Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: HMSzKLECKKPRceTSrv0f3S686f8IxA+50LolD3KGtPo=
Subject key identifier: 19:FA:1D:23:78:6B:2D:54:9A:24:EE:A2:D7:98:46:74:D3:4D:23:81
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0194BC3C6E21D19235EC8D099E69BEA8A11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: fd1ErPnSsJiOGgbMcx9GHEO3xl0p8jqcWzEoOvVRBgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:21:d1:92:35:ec:8d:09:9e:69:be:a8:a1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=19fa1d23786b2d549a24eea2d7984674d34d2381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:54:ef:f1:9a:00:04:2e:00:ed:4a:a7:a5:
38:da:9f:56:f7:49:13:3f:c3:e0:0d:8b:14:e7:87:
f5:90:48:b1:8b:4a:d2:f4:6d:cd:65:37:12:d5:60:
5e:96:ad:81:51:5e:c9:39:95:0b:e8:92:6c:10:6e:
f7:d7:d1:06:8d:6a:e3:32:54:5a:3c:45:dc:86:fd:
bf:89:07:fa:f4:27:95:dc:3a:7e:d9:71:0a:38:87:
09:47:c2:e4:3e:58:fa:5f:a9:86:bf:e9:b6:fc:c7:
77:53:83:cb:dd:34:18:56:95:71:f9:f6:85:b7:5e:
8e:02:60:45:ae:1b:3d:cb:3f:64:3b:8d:bc:b9:45:
b8:5a:b3:39:71:de:ad:85:70:26:58:45:d5:c0:a2:
38:e9:28:03:de:4a:43:e8:c0:27:03:30:da:19:4d:
61:ab:5c:ec:3f:df:f3:ef:51:ad:7a:05:b6:02:35:
6f:4f:c8:c8:bd:97:35:9b:6e:0d:fe:16:7a:94:dd:
ef:79:2e:78:6d:63:14:27:74:6d:8e:31:24:a5:14:
7a:bd:6d:a4:81:2e:8b:47:11:c7:c4:21:76:31:7a:
14:43:4c:d2:04:a8:e3:97:81:0d:fa:b5:6f:c8:41:
fa:42:b4:71:90:3b:66:11:4f:a1:5f:54:aa:89:42:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:1D:23:78:6B:2D:54:9A:24:EE:A2:D7:98:46:74:D3:4D:23:81
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:36:9b:f9:52:c8:e8:9b:8f:fd:fa:14:6a:21:c5:87:3b:b1:
a6:6e:8a:1a:ed:9d:7a:db:85:a8:8e:49:33:fa:72:cb:6c:54:
e8:9e:80:0c:11:64:50:8b:cd:44:e5:29:6a:62:77:e8:2d:fc:
2d:4b:89:20:1c:16:a2:8b:b4:93:b6:0d:2f:ab:51:fd:c0:c5:
48:f3:3d:18:87:e9:b1:61:69:68:6e:42:e6:7c:b5:57:84:1d:
3f:9c:e5:bc:e2:8f:dc:66:ae:be:f0:18:d2:4e:2e:b5:84:42:
fc:8a:34:20:2a:96:ab:63:be:47:b8:2c:7e:64:0c:19:b7:e5:
25:2a:1a:7c:4c:cd:5f:73:bd:ac:da:f8:58:d9:57:43:67:c5:
2d:b1:e6:24:cc:e1:01:82:cb:02:06:90:a5:d4:7c:2f:c5:d9:
f0:f1:7e:74:ec:2e:0b:97:6e:82:69:e5:23:eb:6f:59:27:89:
3c:96:3b:bc:8f:b2:a9:11:b7:61:ef:8a:6b:8e:34:cf:5d:d8:
89:ec:3c:80:d7:ca:71:07:73:7a:de:52:ee:1c:96:e7:6d:3b:
ed:d7:65:75:7f:7f:fb:e2:b4:0f:80:8e:74:99:09:f6:e6:01:
e1:d3:13:18:cb:32:46:e0:53:87:90:43:65:cc:e5:5b:ca:39:
2c:83:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:25 2025 by rpki-client