Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/732ea2-9a5c-4eda-b9b4-6276b178efdf/1/U53I-Drwei_XEh53wBzCg8ZRoIc.mft
File: U53I-Drwei_XEh53wBzCg8ZRoIc.mft (raw, json)
Hash identifier: LQ1MUL/VHSesR20SoQnMMhmNWQe9mOG76WO66sjTFSg=
Subject key identifier: 12:6E:18:D7:AC:F4:F9:F5:69:FC:F8:CA:EA:C8:60:F3:48:22:90:63
Authority key identifier: 53:9D:C8:F8:3A:F0:7A:2F:D7:12:1E:77:C0:1C:C2:83:C6:51:A0:87
Certificate issuer: /CN=539dc8f83af07a2fd7121e77c01cc283c651a087
Certificate serial: 0194BC3C3EF1FD77BA6DD57971F5A212E20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U53I-Drwei_XEh53wBzCg8ZRoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/732ea2-9a5c-4eda-b9b4-6276b178efdf/1/U53I-Drwei_XEh53wBzCg8ZRoIc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: U53I-Drwei_XEh53wBzCg8ZRoIc.crl (hash: rnIuLrzYRtCd6p4K9xtJfS2tZmBS/aDC1TgxXv0QiuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:f1:fd:77:ba:6d:d5:79:71:f5:a2:12:e2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=539dc8f83af07a2fd7121e77c01cc283c651a087
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=126e18d7acf4f9f569fcf8caeac860f348229063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:41:10:e8:c8:06:02:03:ec:1f:1b:9d:79:
55:9b:52:7c:81:33:6c:7a:09:47:70:a4:44:a9:a8:
7b:af:56:34:ab:16:19:2f:63:86:06:c0:e8:39:b5:
86:24:c7:bf:63:a0:b0:8d:2f:b5:e8:4d:c0:2a:b3:
b3:b2:4e:e3:8d:4c:fb:0e:80:46:a4:4a:83:87:3a:
7e:76:14:99:9a:ba:11:53:48:db:97:6f:3b:43:55:
20:be:88:b9:f9:1f:d5:0e:32:8e:27:d3:26:cf:a0:
a4:7a:9d:70:8d:d7:54:74:95:2c:af:0c:bd:c4:e1:
f1:60:31:cd:47:fd:c6:4e:99:7e:1d:0f:d9:6b:b0:
d3:d2:56:c3:3a:3b:6d:a0:32:21:76:ef:40:ef:90:
5c:ac:a6:ce:cd:7b:81:36:e6:bc:2b:30:6e:6c:23:
2e:e8:d2:73:bd:73:1c:44:9f:31:5e:f1:0d:13:7d:
f5:1a:2f:66:0a:cd:05:01:af:72:d4:db:44:7a:3a:
c6:4f:43:2e:d9:d4:a1:9e:2b:0a:2f:59:f7:f6:90:
6a:20:cf:56:53:ab:fb:6b:c0:a3:c7:e5:61:dc:eb:
c4:e9:51:ea:2e:46:53:b0:5b:2d:5f:07:21:1a:8d:
40:35:b3:c0:28:41:1b:b1:d6:98:c1:46:d4:72:31:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:18:D7:AC:F4:F9:F5:69:FC:F8:CA:EA:C8:60:F3:48:22:90:63
X509v3 Authority Key Identifier:
keyid:53:9D:C8:F8:3A:F0:7A:2F:D7:12:1E:77:C0:1C:C2:83:C6:51:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U53I-Drwei_XEh53wBzCg8ZRoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/732ea2-9a5c-4eda-b9b4-6276b178efdf/1/U53I-Drwei_XEh53wBzCg8ZRoIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/732ea2-9a5c-4eda-b9b4-6276b178efdf/1/U53I-Drwei_XEh53wBzCg8ZRoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f3:fe:09:dd:30:80:ab:27:2e:46:53:09:7a:41:e6:77:66:
de:d1:b4:83:5d:34:48:9b:a8:7a:8d:62:b9:d2:cc:97:29:af:
c3:ab:a2:98:cb:da:0e:8e:5a:2e:09:84:34:90:e8:c3:cd:a0:
9d:7d:18:ec:c8:3c:4f:18:a2:66:6e:c1:2f:9b:65:40:47:70:
51:eb:8e:70:a4:1a:0b:cb:42:ba:3e:31:b3:1e:c9:80:00:9a:
66:cf:09:85:c1:18:b3:95:60:0e:8e:73:a1:f4:34:8d:9b:2d:
1c:1c:05:e7:14:46:48:74:eb:66:9d:b2:89:d4:8c:e3:b2:ca:
7a:88:d3:dd:af:61:fd:08:cf:cd:fb:ec:2e:5a:3c:1d:2a:d8:
26:9c:17:66:86:6f:3a:7e:2b:67:26:58:fc:3d:5e:77:00:56:
f4:04:ed:49:f5:48:54:c5:f4:96:3d:04:e8:44:4a:e2:39:2e:
a5:e1:9c:14:e6:40:f4:a2:fb:9e:85:2b:b6:4c:64:21:33:0b:
2a:33:b0:2e:f5:b0:45:f0:d5:3c:bb:54:42:a1:7d:0d:9d:7a:
74:49:9f:7f:01:54:1e:9c:f6:08:fb:75:95:1d:5b:2d:73:6c:
0f:a3:3f:fe:5c:74:cb:fc:a5:f5:bf:b9:a0:f6:db:b8:59:95:
ff:1d:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:49 2025 by rpki-client