Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: 3/q3Zr2GLpPJdh6QuTAr9fsIoMLhFMEtXxUinKsmMtI=
Subject key identifier: E0:16:72:BB:49:6B:39:71:29:4E:7D:EC:F1:06:B6:92:F7:53:D3:38
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 0194BD1785BBBB0435C0EC1BB5EBDB99536D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 0247
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: QjUGEvmrrpC668PVN7bAf6zjxv7s8kLA/wWvXPpcF6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:85:bb:bb:04:35:c0:ec:1b:b5:eb:db:99:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=e01672bb496b3971294e7decf106b692f753d338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:29:d0:d1:32:43:ff:0f:ea:51:6f:b3:af:
8c:c1:2f:d5:1e:dc:7c:18:f0:a3:9e:4e:1d:3c:96:
d1:5f:c3:fd:df:5a:6c:45:70:aa:82:17:ed:e1:3f:
d5:e2:1d:f0:2b:c2:9c:c2:8a:83:e2:93:2d:b9:a9:
76:00:09:15:da:c5:05:c0:ac:b4:67:1d:60:0a:64:
d2:6b:d4:25:59:ef:14:52:87:34:78:ac:f7:3c:ee:
4f:df:5f:08:04:a6:94:e3:83:d0:8f:cd:28:28:c2:
02:15:41:dc:3e:a6:ed:77:6e:d6:b7:d7:76:bb:cf:
09:f1:d7:94:8c:5a:4f:42:7c:58:cb:31:cc:94:ad:
d3:b8:ba:55:92:8d:d5:17:48:18:d2:8a:55:0c:37:
1c:bd:8f:4b:15:f7:fa:4b:84:ed:38:31:4d:e1:26:
c6:71:3f:55:13:a2:94:dc:2a:96:16:af:2e:9e:4a:
a5:cc:aa:b8:b6:48:64:b4:3d:9f:2d:e6:99:34:ea:
44:dd:de:b4:89:b4:60:30:a5:6f:a0:03:34:c2:2a:
1b:c0:98:a5:15:a5:c3:f4:3a:d8:30:15:47:76:60:
66:d7:ed:6f:b1:8f:ca:44:38:07:ad:64:bb:12:f0:
c7:c0:fe:43:94:56:4e:e6:f2:13:b8:a5:de:9a:4d:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:16:72:BB:49:6B:39:71:29:4E:7D:EC:F1:06:B6:92:F7:53:D3:38
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:53:e1:62:f8:d2:f8:bb:3f:d5:a6:99:74:8e:02:1e:5d:68:
7f:f1:35:4d:82:35:15:9c:12:14:64:f5:5c:3e:7a:2b:06:44:
0f:4e:38:9b:b7:08:41:df:cb:3e:c1:b2:7b:f2:b2:cf:72:09:
60:fe:c1:8e:80:d6:79:42:8c:65:6a:81:33:1b:57:47:3c:ff:
b0:a4:2d:63:8b:da:11:75:19:8b:54:08:7a:d8:bc:f3:2b:c3:
cf:ac:45:72:22:0f:47:13:d0:75:bd:ec:c2:8f:7c:0e:1a:4b:
72:39:2f:e1:66:d2:b2:9f:68:93:80:f0:35:ea:80:6a:75:b1:
42:8e:93:cf:af:79:6d:60:1e:ae:6b:b8:c6:5e:a5:ea:51:94:
32:d2:ce:8a:43:4f:5d:49:0b:fe:73:55:f7:e8:17:24:14:d2:
1f:27:37:18:ff:27:84:40:1c:4c:33:7c:00:d8:ed:f7:d3:7a:
23:09:82:ca:96:a4:3f:0d:ac:bf:8c:10:59:6b:94:e2:23:4f:
ee:9d:bf:d0:d8:bb:cf:ce:4f:a2:4c:fc:8f:06:e3:e8:94:a2:
da:e7:28:d1:cd:c5:5e:93:82:33:ce:9e:71:dd:9b:ab:b4:a4:
e2:84:00:9d:fc:1c:27:78:13:97:44:48:4e:59:14:16:34:7e:
03:78:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:17 2025 by rpki-client