Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier: p0y3eFEq1i2gwf7f+hmK7UVk8+DEXm/F1tNFi2mphE0=
Subject key identifier: 17:19:04:66:11:2D:FE:4B:FC:D3:4C:07:0C:86:5C:70:DB:07:F2:68
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 0194BCE0EB3332BE08B4A188E6DB4C3D193D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number: E3
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: YhTujiZpyryb0vz3dgrMojpR7Arzqyl8kv8sswVAvm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:33:32:be:08:b4:a1:88:e6:db:4c:3d:19:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=17190466112dfe4bfcd34c070c865c70db07f268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:0d:39:ff:dc:e1:a0:e3:c1:36:22:64:77:
fc:1f:87:75:9b:41:26:5b:4e:6d:d9:06:87:13:80:
47:70:3a:cd:4d:b4:9b:22:1d:3e:ea:82:37:c5:9e:
22:72:e9:df:9a:20:cf:f5:d3:32:66:63:82:e3:9b:
c3:b2:44:a2:7c:94:c5:01:88:50:fa:52:06:18:1c:
d3:3c:42:58:41:b4:38:f1:7e:99:cc:42:37:e6:7a:
6c:34:3c:ee:4d:53:67:a7:20:b0:e3:2a:1e:9a:80:
10:b5:3a:b0:ea:d4:8e:1b:9d:20:f4:d9:ae:91:f7:
95:4f:3c:03:75:3b:c4:19:e7:37:f6:7d:73:f7:a1:
a7:93:72:5e:9b:49:56:5d:5a:64:9b:ea:74:e2:f1:
2b:95:fe:8b:ab:60:88:75:92:12:92:e2:6d:9b:67:
ac:7f:0c:77:8a:2c:ab:e8:b3:b7:27:66:42:8e:d0:
e0:7e:7d:5d:ef:25:c8:40:01:d7:8b:12:7c:6e:1b:
fd:ac:f1:41:27:ed:9c:3e:b9:5e:c4:2e:04:14:31:
f9:7d:71:81:4b:ee:0b:ea:01:d1:87:73:38:c1:d4:
1d:20:49:71:d7:07:01:44:75:a9:96:99:08:63:2b:
ff:f5:36:f2:ef:1b:43:77:84:a7:ab:ef:1e:68:98:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:04:66:11:2D:FE:4B:FC:D3:4C:07:0C:86:5C:70:DB:07:F2:68
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:91:07:ad:42:4b:0b:c3:35:71:14:e2:eb:94:f1:a6:5c:99:
fe:6a:fb:fd:8d:27:84:ba:3b:b1:e5:cb:91:53:f5:00:0a:6f:
a0:ec:b8:1c:1d:ef:6e:a1:25:18:f0:b4:ce:60:fa:e1:07:b5:
ea:61:7e:51:c5:1f:67:90:da:84:47:9a:fb:13:80:e5:75:92:
be:1b:a6:13:63:4a:f3:5d:20:75:ce:77:13:7b:ad:33:9a:1d:
b4:c0:69:96:9f:c3:1c:ca:91:8a:bf:f9:77:cd:9e:8e:0d:8d:
d4:e6:58:3b:fe:ff:e0:84:ff:be:84:a4:d8:4a:ff:df:a9:f6:
04:7d:da:86:5d:d6:fd:e0:64:6b:66:1b:f8:c8:49:4b:4a:7c:
96:96:65:82:b2:94:8c:00:e9:5f:79:6f:ff:c0:22:a7:dd:1f:
14:d0:f8:ed:12:71:d2:e9:fc:b0:23:a4:65:ce:aa:9a:dd:f2:
60:e2:43:b5:28:64:80:4d:50:12:59:4b:0e:9a:18:d4:7e:74:
bc:c3:b7:9b:83:0b:c5:42:2c:6d:fb:f2:4e:ed:20:a9:72:82:
2b:35:4a:e6:fd:31:29:7f:c8:9f:cf:24:9b:1c:d3:42:d2:96:
2e:10:82:bc:4c:79:19:c0:46:cb:4a:07:c6:d1:ad:c6:91:59:
1e:d5:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:49 2025 by rpki-client