Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: aIGF9HkDPFLtKXLwuMLFigANVfn2RdzXdTblJpggeRs=
Subject key identifier: 97:F9:CF:F8:C4:59:67:BE:AF:2A:48:E9:A2:DE:F8:F7:E8:62:48:65
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 0194BBCDE80719BB7F58389E078B9AB882B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0A7F
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: u9n+B7cBrN5ye/X27JVfDwT5E8nphh3sZJBM2mIPZzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:07:19:bb:7f:58:38:9e:07:8b:9a:b8:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=97f9cff8c45967beaf2a48e9a2def8f7e8624865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:b1:41:17:43:78:d3:8c:de:fe:20:5c:07:
10:b7:60:82:16:37:2e:ad:1e:c4:84:c2:ef:3e:67:
c3:60:b6:55:f4:b1:93:a7:2b:e5:fc:ce:32:d3:a8:
65:31:c0:c3:60:95:ff:5d:5c:70:fa:90:e2:d8:ca:
e8:e3:94:a1:3a:c3:e6:63:de:47:a1:57:0f:13:50:
e8:76:9b:19:55:c9:b0:82:52:9a:4b:24:a5:ac:26:
5e:6a:de:98:ca:27:ea:dc:d2:09:0e:37:4a:74:f7:
ed:6d:69:ed:9b:55:90:cd:82:48:22:df:41:28:e8:
9a:13:98:fc:c8:ff:ec:8e:72:bc:ba:f6:b3:cc:c4:
f2:01:29:49:17:7d:11:32:55:a5:c8:9d:0b:3e:35:
98:3d:a3:e3:bf:2b:94:9d:84:6a:66:ec:70:26:aa:
e2:87:60:b9:e2:ae:45:ac:9c:13:69:1c:3d:b5:c1:
03:8e:a7:d6:0b:03:d2:b0:04:de:74:a6:d0:ce:3d:
fe:eb:9a:f1:74:2a:9a:48:76:0d:c7:ac:b8:88:e7:
78:36:4c:c3:47:e6:fa:23:61:46:f8:42:fe:39:f4:
90:ca:ae:50:ba:ff:c7:92:f2:3b:6e:80:81:2e:72:
dc:77:45:28:3e:30:29:14:a4:a4:3e:26:93:db:ef:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F9:CF:F8:C4:59:67:BE:AF:2A:48:E9:A2:DE:F8:F7:E8:62:48:65
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:be:dd:01:27:f3:ac:6c:9a:0f:90:b3:8f:a1:f4:eb:50:b9:
b1:a7:0d:ea:5f:1a:1a:7b:9c:85:cd:59:74:5d:c5:a3:67:30:
73:94:84:bc:b6:3d:a4:34:f8:1c:22:73:4e:06:2d:a1:e4:5c:
cd:66:05:65:9d:88:2d:1b:e5:b5:d6:c3:0b:89:84:5b:41:20:
ec:81:74:08:ea:1e:f2:6c:c8:5f:97:61:f4:af:97:8a:a0:76:
1c:b9:84:3a:a9:a1:d5:01:85:a2:09:c0:3d:81:7e:49:9c:07:
59:6e:ae:ac:f0:44:09:31:9a:0e:9f:a3:52:c2:1d:3e:9d:c6:
8d:6e:7e:9e:0d:5a:7b:e3:d4:f5:a0:dd:c6:98:5c:28:6b:a3:
c5:7b:f6:4a:ca:52:6a:d3:18:2f:47:4c:b7:68:10:c7:3e:21:
65:2d:19:0a:db:48:32:fe:14:85:f9:7e:9c:2f:b5:10:e0:68:
0b:e3:cc:71:22:bd:eb:1b:65:9a:dd:19:72:0b:c5:40:de:fc:
dd:0a:1b:a7:5b:34:3e:04:23:f2:f1:71:91:cf:af:a7:ab:26:
a9:c0:f8:44:87:73:2c:00:79:c9:71:61:23:85:66:1a:19:99:
67:48:73:8c:5e:69:9d:46:50:5e:36:d4:21:bb:a2:38:df:b6:
42:2e:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:37 2025 by rpki-client