Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
File: AGXxbaYGeD8wH3CKXmtP1f_UMug.mft (raw, json)
Hash identifier: vRE4Ju54+QOkbRjKdi/CFD2bj8FZ2Xhp9sYHz89rwZw=
Subject key identifier: 63:A2:76:89:DF:5A:E6:36:3C:7A:72:68:96:6D:98:D1:86:5C:DA:F9
Authority key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Certificate issuer: /CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Certificate serial: 0194BBCE8876A99DA0AAD05E4C84AC631BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
Manifest number: 08C6
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: AGXxbaYGeD8wH3CKXmtP1f_UMug.crl (hash: u0DpTPP4ruw2Jt3WkDYhY+XGRpYJT4RAbaq3VrJd768=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:76:a9:9d:a0:aa:d0:5e:4c:84:ac:63:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=63a27689df5ae6363c7a7268966d98d1865cdaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:ca:82:e8:26:ad:89:1d:e7:63:ec:d7:73:
0d:9d:9e:2d:25:95:15:9d:18:8a:b8:53:22:53:3a:
23:9f:54:6c:96:a6:0e:f3:73:15:19:e6:60:db:6a:
a8:8f:68:9a:ec:ea:0d:31:e5:c1:78:93:71:ad:e9:
5e:ed:6c:14:2a:43:8b:ef:19:e6:20:de:f6:28:f3:
89:8f:f7:d2:ef:e6:4b:23:8f:61:6b:50:39:0b:06:
48:4e:aa:bc:bd:98:f1:ef:01:a5:fe:02:91:cc:15:
69:49:fe:d7:9f:47:7e:0d:fa:b8:bd:8f:5a:8a:87:
a6:8a:a8:ad:14:57:43:33:dc:b4:69:46:a6:0d:8d:
52:aa:0d:77:39:33:66:9f:df:ae:e1:25:dd:28:93:
d9:1e:ed:2a:66:f9:18:4f:a9:e2:43:f2:67:ca:83:
82:63:7b:3f:a3:86:6a:46:bb:e1:59:5e:1d:86:91:
c5:6c:17:06:13:2c:df:8c:e4:ad:f8:f0:78:72:91:
7c:c3:16:61:40:fa:ce:70:88:97:7d:d1:a5:6d:a9:
e5:cd:a5:e8:dd:a0:76:98:91:95:09:3a:b3:99:b8:
5b:74:9f:e0:75:09:4f:d6:02:1a:0f:86:a6:d2:e2:
d9:bd:10:e3:82:75:55:5f:4a:6a:6d:23:8f:61:e4:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A2:76:89:DF:5A:E6:36:3C:7A:72:68:96:6D:98:D1:86:5C:DA:F9
X509v3 Authority Key Identifier:
keyid:00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:e3:ed:62:5a:70:a2:63:d6:9c:4b:3d:d0:e9:82:c2:26:
c9:69:09:4f:1b:35:ee:f9:eb:c1:86:c3:4f:b7:e2:7a:d5:92:
dd:35:ac:c8:f8:51:cd:7d:81:cb:cd:f9:32:d7:32:07:ba:e1:
04:8c:2a:f3:09:34:f7:54:f7:45:5a:fa:de:3a:d0:ac:ff:a0:
35:03:7d:84:cb:ca:57:ae:a9:f0:4a:6d:5c:85:6e:5f:14:01:
51:28:f0:a3:37:2d:9c:aa:13:71:af:d2:62:b9:72:eb:11:95:
1e:45:b4:0a:3c:5f:7b:00:b6:08:aa:24:14:e5:08:e4:b4:8d:
1f:1f:e9:95:c4:60:d6:cf:f0:72:06:76:ea:91:df:bf:25:9a:
40:6d:d1:e3:cb:27:1e:b2:7f:7b:a6:51:b6:8a:10:93:81:5e:
68:d7:a2:1a:68:d7:da:50:bd:4a:09:2b:67:f1:43:06:a2:65:
39:92:17:9d:b8:af:de:5f:30:ce:2a:e8:d8:76:86:e3:4b:27:
77:b0:82:8b:90:6c:0b:94:0a:28:f2:c6:8e:24:76:e5:b2:21:
c8:f0:72:aa:05:af:82:8b:0e:b5:15:7e:b2:9d:71:bf:5b:19:
40:b9:27:65:a9:cb:1b:11:0c:f8:e4:55:77:17:1b:be:61:f3:
d1:65:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client