Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: eK//OdEv8sr6LSqh4fIozrwF6ZKpYyY2N/ghn3hYA+M=
Subject key identifier: B1:62:70:A2:B9:F0:23:20:DC:C1:8B:53:3A:29:C7:2D:7D:FB:A3:4A
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 0194BC728935E8BC5B33FBF40216802EC7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 03CC
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: P7+BcuwvDCP7GI30Fs/SU1I/qxK41lZSG4LIg2OU93w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:89:35:e8:bc:5b:33:fb:f4:02:16:80:2e:c7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=b16270a2b9f02320dcc18b533a29c72d7dfba34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:7d:ad:37:07:74:99:c2:e9:44:1d:07:e9:
20:fb:6d:73:db:27:fb:c2:f7:34:4a:22:ee:27:bd:
7d:45:bf:9f:f2:90:87:c7:80:d9:d8:c9:b9:4c:65:
86:4b:04:84:d3:be:c5:90:d2:74:76:94:4f:a0:47:
2e:07:53:08:6a:25:0b:ab:14:08:66:77:9a:5b:b8:
0c:56:86:db:6b:18:73:78:55:1f:ff:6a:4f:20:8f:
e3:c4:16:2b:95:cc:b3:a1:45:2b:25:78:9e:f4:d6:
d8:2f:65:bc:b0:5b:e0:f2:d2:1f:fa:ab:0a:c3:a1:
09:03:32:02:39:98:a9:38:4e:f5:77:2d:7d:a1:52:
62:13:6e:cc:f2:06:20:2b:14:cd:9e:1b:fb:5c:03:
c5:4e:ee:cf:d4:76:1d:2a:14:b5:99:f0:97:1f:3b:
db:0b:d2:80:fb:45:a2:50:35:e0:07:3f:d1:39:07:
4a:37:55:01:ee:8b:ba:60:20:33:04:1a:cc:80:c9:
d6:aa:f1:48:e1:f3:00:b8:44:7f:87:59:6b:b1:36:
ba:1f:0f:86:7e:4d:bc:01:00:61:08:32:22:80:fa:
bd:8a:c1:ca:6b:5a:06:fe:ff:a3:12:d4:5b:94:d6:
b0:44:bf:26:29:ff:b1:52:c0:02:20:ff:27:43:ce:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:70:A2:B9:F0:23:20:DC:C1:8B:53:3A:29:C7:2D:7D:FB:A3:4A
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c8:5d:67:f6:31:fb:f5:45:97:69:a3:f3:7c:1e:0d:d2:e7:
b4:c6:ec:e1:72:21:47:d0:be:86:1b:20:c2:18:f7:ef:79:6d:
bc:db:94:5b:e1:65:a6:1a:cc:67:72:30:5e:f6:cd:50:b3:5c:
c0:9b:ac:fc:a0:dd:23:8c:e2:a3:cb:54:d6:48:19:3a:9c:fa:
9b:87:06:57:7f:9e:ad:67:ef:e9:2e:04:cd:2d:d6:69:7a:f4:
28:fc:17:0c:7b:25:24:52:dc:1f:66:cb:31:65:38:89:fc:0b:
de:38:ae:70:0d:d7:e6:39:af:4f:ed:db:26:95:d5:42:7c:18:
c3:32:de:11:b0:91:b3:33:a1:cc:c6:18:db:9e:ac:94:2a:d7:
67:70:9f:22:6d:85:23:64:9d:36:05:c9:91:e6:46:82:e8:cc:
d0:46:b3:66:5d:e2:5e:8f:62:0c:29:b8:66:20:da:38:4e:5d:
38:5a:fc:39:51:6b:e8:a5:0f:4c:4a:55:0d:25:6b:4b:31:72:
b8:0e:ab:cf:a5:94:73:9f:ff:49:74:2f:3d:24:3c:cb:65:ce:
d5:0f:5b:a6:c9:3a:d2:fe:30:aa:fa:06:21:38:b4:96:c2:a5:
21:2f:a5:42:2b:c5:60:a7:6a:64:b0:fc:20:5e:bd:32:58:9c:
94:76:db:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:10 2025 by rpki-client