Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
File: Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft (raw, json)
Hash identifier: PAILjbPMpFNjt+bzPOxBLYTfxnfzVEZTEhAVifHUY+0=
Subject key identifier: 53:9B:B3:13:FF:FE:30:48:AF:7E:F3:12:78:6B:CD:70:75:96:52:ED
Authority key identifier: 52:6F:9C:0D:97:D6:36:7E:0C:A7:2D:16:24:C5:85:0A:61:0D:65:AE
Certificate issuer: /CN=526f9c0d97d6367e0ca72d1624c5850a610d65ae
Certificate serial: 0194BC7316067C2716B97258272F09035B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
Manifest number: 0DF5
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl (hash: DnjAkBbt2bjDAnsxiZTZYmyIOtmbhLJgwAJ7rA+5oNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:06:7c:27:16:b9:72:58:27:2f:09:03:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526f9c0d97d6367e0ca72d1624c5850a610d65ae
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=539bb313fffe3048af7ef312786bcd70759652ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:69:c0:96:a3:0c:85:b1:56:72:c6:1c:5c:
e0:fa:92:59:38:14:2b:57:43:c3:f5:5e:53:f0:ac:
33:ef:20:15:41:15:6f:80:f9:ee:26:05:5d:26:8a:
96:70:38:12:ee:0b:2e:89:2e:2c:ca:12:b8:c2:f1:
a8:c8:79:ce:7a:b7:1a:76:53:b0:42:b6:a8:74:ff:
d7:4d:29:14:5e:6a:90:e8:ed:11:a1:9e:99:72:df:
4c:75:cc:ae:0d:47:16:7f:e2:13:0a:84:e0:98:2c:
7f:92:e1:39:89:60:01:c2:f9:64:58:e9:dd:d8:30:
81:aa:2a:aa:24:09:04:16:43:bf:cc:c9:d9:44:9e:
bb:04:a1:b1:69:a7:0d:27:64:1f:c7:b8:27:ef:63:
71:83:57:94:f6:bf:51:b6:8f:23:fd:4f:1c:a0:71:
0b:0f:5f:29:71:4f:67:f5:4b:d0:40:6e:28:d7:8f:
af:a6:73:ba:b9:8b:3b:0c:20:10:bb:7b:9f:f1:e2:
30:89:09:95:88:70:03:90:f8:7a:9a:db:6d:45:6a:
ba:e7:80:5d:5a:09:5c:97:1a:13:cd:a4:3b:fe:01:
d7:7d:b1:09:be:1e:01:49:aa:e6:b5:3f:4d:35:f1:
f0:f2:35:0c:3d:d2:dd:fc:1d:30:7d:41:69:39:50:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:B3:13:FF:FE:30:48:AF:7E:F3:12:78:6B:CD:70:75:96:52:ED
X509v3 Authority Key Identifier:
keyid:52:6F:9C:0D:97:D6:36:7E:0C:A7:2D:16:24:C5:85:0A:61:0D:65:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Um-cDZfWNn4Mpy0WJMWFCmENZa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/648a08-3513-426e-8eee-98efc80a1593/1/Um-cDZfWNn4Mpy0WJMWFCmENZa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4d:72:b8:44:e2:d7:a7:aa:94:22:9f:ac:a6:0d:62:49:8b:
50:e8:72:e7:4d:a6:eb:3f:67:79:56:13:14:43:f5:69:c3:a3:
0c:95:ce:3e:f7:71:39:29:0d:b9:29:3e:65:74:86:dc:0a:2c:
15:50:c7:6e:af:01:b4:3f:99:d4:4a:cf:d1:c5:5e:d7:0b:65:
b8:c1:a0:83:51:46:7e:02:a7:f6:e1:fb:27:8d:e7:c9:00:c9:
65:c4:13:ca:f2:52:1c:36:49:fa:e0:2f:e6:b2:0c:4d:76:2b:
3d:fe:89:8e:b7:f2:74:51:2c:9e:93:27:36:f5:cf:ad:38:0b:
1e:c3:f3:48:5d:09:87:b4:e9:e2:58:ec:c9:08:2e:bf:4a:37:
d6:90:07:bb:60:62:e5:e7:bc:b1:53:8b:ab:fa:e2:a5:9a:e1:
e9:3a:25:3a:7a:85:c9:cb:62:70:f4:64:a7:12:00:16:71:12:
fe:87:e9:dd:1b:1a:ff:29:22:be:c6:5b:ad:81:01:7a:6b:9a:
fc:84:6d:97:f4:2b:3b:d6:a4:83:1a:4d:65:85:80:41:3a:83:
d8:61:7f:78:3f:89:3a:a8:6e:a8:20:ef:08:59:ba:99:c1:fa:
db:1d:bd:ce:7a:bf:be:d1:2d:99:81:10:41:73:75:c9:b7:4e:
2c:48:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:15 2025 by rpki-client