Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/zlcCI6rEATx60sk0UA5vQwJk_ks.mft
File: zlcCI6rEATx60sk0UA5vQwJk_ks.mft (raw, json)
Hash identifier: orOR+J4C1nX6TjAOzUboSS7hNxjthdBvXk+AQaz/tz4=
Subject key identifier: FC:35:CD:37:DF:01:2F:1C:78:18:FA:3B:25:6F:65:77:1C:DC:E1:CA
Authority key identifier: CE:57:02:23:AA:C4:01:3C:7A:D2:C9:34:50:0E:6F:43:02:64:FE:4B
Certificate issuer: /CN=ce570223aac4013c7ad2c934500e6f430264fe4b
Certificate serial: 018DEDE05C7FD64F2B3EC193BCB9C8D7114F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlcCI6rEATx60sk0UA5vQwJk_ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/zlcCI6rEATx60sk0UA5vQwJk_ks.mft
Manifest number: 0DFA
Signing time: Wed 28 Feb 2024 04:02:00 +0000
Manifest this update: Wed 28 Feb 2024 04:02:00 +0000
Manifest next update: Thu 29 Feb 2024 04:02:00 +0000
Files and hashes: 1: _2jogeO0kEeQVfuMkqE1pYnlB14.roa (hash: uGRBG2mrp6sQhxCJvjX80sZBCx1BmFKNdGaNg9QNvsw=)
2: zlcCI6rEATx60sk0UA5vQwJk_ks.crl (hash: hbG4RsPBbVycDAhA6rG9KtHBFKqjEraD6ne4QjqtA/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ed:e0:5c:7f:d6:4f:2b:3e:c1:93:bc:b9:c8:d7:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce570223aac4013c7ad2c934500e6f430264fe4b
Validity
Not Before: Feb 28 04:02:00 2024 GMT
Not After : Feb 29 04:02:00 2024 GMT
Subject: CN=fc35cd37df012f1c7818fa3b256f65771cdce1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:ee:23:6d:ff:27:ec:5d:56:a0:96:5a:71:
ce:d8:b9:cf:b0:c6:58:3c:b3:ba:ea:8f:a2:47:3f:
c6:b7:f9:26:01:dd:d2:33:f8:60:03:44:1b:3f:d1:
67:bf:03:fb:22:b9:de:0f:91:91:65:c9:09:50:4f:
02:fd:18:f9:7d:78:19:fa:6a:13:2d:ef:6d:6c:ba:
89:d6:9f:40:64:d6:89:f3:5c:3b:3d:24:22:1d:dc:
3f:1d:46:a1:d2:1b:ee:ef:87:d0:99:c4:3a:29:4e:
df:99:76:93:7c:2e:27:83:b4:c8:1c:d7:e2:33:b4:
05:f3:b6:d0:f0:40:01:0c:db:c7:b1:a7:11:62:e4:
bc:f2:4f:ff:49:97:e3:08:35:ba:45:64:3b:9e:cf:
75:80:c1:d1:a5:de:70:3d:f3:3c:d7:96:d6:68:a4:
a1:9a:f7:27:4f:f3:d8:e6:6e:40:95:57:cc:cd:6b:
34:a3:ec:00:35:8e:c1:5d:8e:2a:72:42:87:d0:d4:
24:17:c8:f1:98:35:f0:37:70:19:8b:1e:d1:83:f4:
f8:05:24:29:ec:61:cf:26:6b:a5:c0:9c:5d:d5:26:
09:6b:24:71:e3:31:f1:46:75:f5:12:ae:f6:be:71:
ea:cd:b5:c4:59:8c:7c:bc:e4:14:7e:57:1e:81:76:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:CD:37:DF:01:2F:1C:78:18:FA:3B:25:6F:65:77:1C:DC:E1:CA
X509v3 Authority Key Identifier:
keyid:CE:57:02:23:AA:C4:01:3C:7A:D2:C9:34:50:0E:6F:43:02:64:FE:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlcCI6rEATx60sk0UA5vQwJk_ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/zlcCI6rEATx60sk0UA5vQwJk_ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59369b-5981-4bbc-bdc2-7b551eb97363/1/zlcCI6rEATx60sk0UA5vQwJk_ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:81:17:db:0e:37:ea:1a:ce:af:1c:ea:f4:dc:46:8b:67:16:
e0:d2:56:7c:ee:e6:44:6c:de:ff:68:94:40:1d:d5:df:ac:f5:
7d:bc:26:4c:40:09:8e:4a:18:41:0f:6e:1d:0f:e9:98:85:bc:
33:6e:d0:79:ec:8f:9a:c4:63:19:42:63:0c:85:00:90:b2:34:
62:f1:2c:a7:f8:91:cf:82:eb:92:01:6e:d1:80:c3:f5:5c:1d:
e2:63:07:d3:26:5b:35:19:a3:d0:90:45:10:3d:95:c2:40:cd:
94:39:0b:ee:29:cc:48:ee:d2:e4:62:65:32:c7:29:e6:c2:83:
54:33:0a:39:c2:38:85:45:01:aa:3e:70:52:53:7b:6e:de:a5:
85:d2:89:3b:6d:7e:44:53:e8:7d:87:4d:89:2f:89:1e:7f:82:
fa:8b:83:2a:d4:25:47:56:7a:07:05:38:61:08:6b:2e:5c:24:
3c:fc:87:e4:67:96:47:d4:a5:42:9a:28:a0:ae:89:1a:ac:39:
ec:2c:59:86:f7:4e:2a:48:5d:20:7a:32:57:fc:22:5c:58:2f:
cd:bb:17:4e:5e:df:8e:14:4a:c1:bd:30:5e:08:23:e0:4d:55:
8f:ff:8b:b7:09:9e:0f:7d:47:5f:1d:06:9d:2f:79:2b:ed:26:
03:a7:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:27 2025 by rpki-client