
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: 285HnysLbcS34F2fsBeIuaw5M3+DOphHjH61L7KDU+M=
Subject key identifier: 35:37:00:1C:FC:1B:52:58:D2:02:AB:11:8B:38:E4:82:2E:E4:A2:DE
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 0194BC3BEDA1B94C9F3715359A0F2796FADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: xKT/7iTCom5y6fwX6mNXg0d6D80sXHG7M2ecJf5FVZk=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:a1:b9:4c:9f:37:15:35:9a:0f:27:96:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=3537001cfc1b5258d202ab118b38e4822ee4a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:a9:45:50:6c:a0:50:15:ce:ad:6b:4d:a7:
0d:e6:5c:e5:64:be:fa:ad:21:b4:80:4f:7e:ed:b4:
bb:d0:ab:cc:7d:73:a9:1f:bc:1b:fd:20:33:34:c3:
a2:5e:31:9e:42:61:92:6d:5f:ef:a0:29:c2:ba:56:
bf:ed:d3:ec:0c:35:1d:2c:64:de:ea:9a:d6:10:15:
2b:ef:7d:88:c0:3f:01:4c:45:20:cf:5d:c5:73:6e:
aa:43:4b:1b:5a:89:c6:37:ad:3d:22:2b:30:43:16:
a5:1f:c0:90:61:13:1b:98:31:7c:81:0d:e2:d9:fc:
63:31:1e:a6:e0:52:93:a2:97:0b:2f:d2:0f:05:d2:
45:9e:27:58:53:d9:9e:c6:ac:12:17:d7:58:44:6c:
bb:e1:38:6e:92:4b:9c:97:23:d4:ff:a5:2d:d0:c9:
68:54:9b:2e:f1:cd:b5:3c:44:0b:e5:e7:ef:e0:c0:
83:6b:c0:a1:56:17:c6:13:39:5a:4c:31:7d:64:8e:
aa:50:9b:33:d2:c1:b1:3e:6a:57:ac:c7:9b:70:79:
bc:fe:b4:56:16:4c:55:86:a5:9e:93:0f:c5:a4:fa:
80:68:f0:bf:cf:c4:8e:84:f8:f4:66:d8:04:ca:51:
68:0f:b7:61:5f:1f:2c:90:d2:3c:73:77:23:a1:90:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:00:1C:FC:1B:52:58:D2:02:AB:11:8B:38:E4:82:2E:E4:A2:DE
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:6a:d1:43:e9:be:15:f8:54:76:5f:89:dc:11:70:e3:c1:bf:
14:10:d3:11:60:16:ae:f6:6a:1b:82:cb:fc:a1:18:f0:7e:2a:
0a:1c:86:75:87:02:c5:73:a9:c4:ae:c8:75:15:47:3a:0b:32:
c5:ee:db:15:37:57:d0:a5:11:e9:bc:51:54:b3:64:d1:cf:d5:
1b:a0:ff:dd:7d:65:7e:dc:7c:17:20:2a:58:26:fe:44:37:c2:
c1:ab:e4:82:42:1c:44:ce:bf:5c:44:dc:60:c9:88:0e:3c:02:
0a:4e:5d:cc:b4:ce:8d:49:65:f3:db:c4:46:69:49:12:27:d9:
8a:75:16:b6:c9:03:53:6b:3f:34:d9:bd:54:ed:9c:7a:ea:01:
4c:28:e4:53:1c:da:88:32:3b:02:d9:cc:a4:f6:33:32:00:88:
1d:d0:d2:a7:85:4d:18:d4:e1:cd:8f:a7:ab:e3:90:9d:ca:a1:
fd:0c:98:c9:81:c4:27:be:19:2c:ce:43:c2:f7:59:76:fe:67:
08:70:0a:d8:19:f3:49:44:f0:fa:09:8b:8b:8f:c9:c6:7d:67:
af:54:99:c7:1c:98:70:8a:59:e2:f6:44:4e:0a:3f:34:8a:1b:
0d:8b:d6:b0:b0:52:1b:12:09:cd:f8:30:bd:25:c1:a7:7a:8a:
37:ed:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:16 2025 by rpki-client