Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/ZLCrAcoNA05Q0QhadBIy_oy7TL8.mft
File: ZLCrAcoNA05Q0QhadBIy_oy7TL8.mft (raw, json)
Hash identifier: 0rF6edhKbEFKG2RRLnGhd2hsPvEkRSjv4JAve1Dcnaw=
Subject key identifier: 4D:7C:63:B3:43:14:96:C8:8E:88:A2:B4:23:11:D4:FF:F6:BC:65:EC
Authority key identifier: 64:B0:AB:01:CA:0D:03:4E:50:D1:08:5A:74:12:32:FE:8C:BB:4C:BF
Certificate issuer: /CN=64b0ab01ca0d034e50d1085a741232fe8cbb4cbf
Certificate serial: 0194BBCE96B7BF6315B1ABB7B333A96D989C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLCrAcoNA05Q0QhadBIy_oy7TL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/ZLCrAcoNA05Q0QhadBIy_oy7TL8.mft
Manifest number: 12D7
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: ZLCrAcoNA05Q0QhadBIy_oy7TL8.crl (hash: Dw22Os9chD53dPCfA8qqG20ZQvb8Z3W1aAc+T40bBJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:b7:bf:63:15:b1:ab:b7:b3:33:a9:6d:98:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b0ab01ca0d034e50d1085a741232fe8cbb4cbf
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=4d7c63b3431496c88e88a2b42311d4fff6bc65ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:23:04:29:20:97:7f:48:5b:08:3d:ea:4f:
51:dd:7d:04:6c:23:52:03:2d:bc:79:ec:45:4b:8d:
7a:2e:7c:8c:eb:ab:1e:28:38:11:9e:17:fb:41:bb:
1a:6a:70:e2:d6:63:e9:29:63:67:dd:95:d6:31:1a:
49:fe:c6:c2:d9:3f:ec:63:92:eb:7e:c7:d8:92:9b:
99:f8:42:84:f4:50:b1:79:ec:bc:bf:40:47:ca:76:
8c:41:5a:ae:ce:fb:6a:58:7a:ef:fd:9d:50:7d:56:
88:90:ea:ec:c8:79:64:3d:9f:48:ec:da:6e:4e:50:
88:00:1c:a7:f0:44:c9:22:5e:57:6e:d7:67:9f:09:
7d:22:18:b9:2b:83:66:b2:05:b5:51:4d:73:8b:37:
85:8d:f6:16:2d:12:47:87:58:6f:7e:8b:06:e6:82:
89:68:07:6f:d1:e3:a5:ce:9b:ae:84:b8:d5:21:22:
9c:93:4c:bc:e7:46:9f:d2:df:43:84:d9:75:43:37:
cc:be:96:34:58:66:9d:1c:03:01:41:42:09:6f:59:
fe:5b:83:43:19:8e:df:57:11:46:92:30:75:a2:81:
a6:3a:89:55:99:4d:f9:c8:4f:d1:0c:72:b1:3f:8a:
64:8f:76:1f:0d:ec:4b:95:51:03:e4:aa:2e:72:35:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7C:63:B3:43:14:96:C8:8E:88:A2:B4:23:11:D4:FF:F6:BC:65:EC
X509v3 Authority Key Identifier:
keyid:64:B0:AB:01:CA:0D:03:4E:50:D1:08:5A:74:12:32:FE:8C:BB:4C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLCrAcoNA05Q0QhadBIy_oy7TL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/ZLCrAcoNA05Q0QhadBIy_oy7TL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30279f-79e7-4dd2-a2e6-732fee90855d/1/ZLCrAcoNA05Q0QhadBIy_oy7TL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:18:f3:d1:31:77:48:e7:fa:37:dd:77:b0:9c:81:3f:7b:1a:
fb:2a:3e:96:e1:56:34:9a:b6:d9:4c:21:09:a8:59:ad:56:cc:
1a:5e:bb:ef:4e:f3:25:00:77:3f:6d:91:28:3b:7f:9d:bb:69:
c9:af:3e:bc:75:61:36:b5:27:b1:c8:7d:58:e4:c2:0a:e4:4a:
ff:08:1f:97:5d:63:8e:05:33:b6:22:d9:0d:bd:2b:00:25:df:
65:df:76:9a:0e:72:3e:9b:78:bf:71:11:19:96:a0:cd:a7:cf:
66:bf:ca:13:a9:2e:ee:b4:20:bf:2d:5b:70:fd:6a:ec:f3:31:
62:c4:3b:cb:53:de:5d:f9:5d:f5:07:d3:ad:0b:85:5b:ea:20:
e9:2b:dc:29:83:f1:95:7b:c6:e8:1a:0c:75:d0:0a:2a:b4:df:
0a:53:e0:b3:15:46:af:4d:bf:6d:dc:78:47:0c:d5:c9:93:13:
da:0b:5a:c7:4b:df:3a:2e:f0:8e:0c:3a:db:0e:46:6e:58:a6:
61:fa:ca:18:d0:55:0d:00:19:d4:85:fa:ed:58:3f:e1:36:84:
24:16:27:3b:51:0a:fd:a7:be:53:8b:71:85:1e:d9:73:88:d4:
d3:d7:51:2d:f2:e2:59:53:eb:fb:fc:92:d1:65:cf:db:01:7d:
c0:2c:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:37 2025 by rpki-client