Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
File: ucN059N57ajbliAKTu_lvBwok58.mft (raw, json)
Hash identifier: BXsEcBWfiz3uOX56/WdubhYaNghW7IH6rGTVr/cZSzI=
Subject key identifier: 79:99:3C:21:8F:5F:08:B7:09:EF:94:7B:45:57:62:A8:3E:78:EA:62
Authority key identifier: B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
Certificate issuer: /CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Certificate serial: 0194BBCEF602E6569C3A288EA583A36B6060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
Manifest number: 0AE1
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: ucN059N57ajbliAKTu_lvBwok58.crl (hash: FHzqRsmYlerf/P6I28JXBjnGNcMvHG08oHFdKQVIp38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f6:02:e6:56:9c:3a:28:8e:a5:83:a3:6b:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c374e7d379eda8db96200a4eefe5bc1c28939f
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=79993c218f5f08b709ef947b455762a83e78ea62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:95:14:29:ae:11:7f:0c:d4:dc:e7:dc:3b:
94:6a:09:9e:16:93:ad:fa:30:8b:1d:ae:5a:95:cc:
3c:08:47:88:38:ea:ad:62:fc:67:95:b0:91:a2:c6:
00:45:66:e2:ac:b1:77:7c:bc:94:59:8b:9c:b1:9d:
ec:17:96:c1:71:28:7f:4d:dd:5c:36:6a:d8:8f:e1:
5e:74:7a:70:5c:cd:02:65:6f:93:1b:20:3c:7c:6e:
3d:7b:be:e9:7c:50:b2:66:5f:9d:d7:e1:57:46:50:
e7:fb:af:d8:cc:98:ba:32:d0:71:3d:52:35:4c:9c:
52:0b:05:0c:d9:a8:5c:92:5a:73:71:8c:cd:13:fb:
86:af:0e:9b:36:e5:25:89:15:89:ba:49:6e:92:0f:
3f:4c:d3:48:be:57:16:ce:2e:60:59:e4:6a:36:65:
13:50:db:f2:4e:c4:bb:c3:ca:0e:df:78:a5:90:13:
31:23:95:03:c9:e0:5d:f2:12:54:cd:05:cf:f0:9a:
b2:5f:36:7b:70:b1:79:3f:72:02:7c:7a:e6:a2:82:
ac:77:30:7d:b7:15:93:98:84:c3:c4:ae:6c:70:34:
59:db:f8:0e:06:54:45:08:c2:cd:5e:79:85:29:61:
f1:c7:9b:fc:17:38:42:91:eb:90:d1:46:de:a7:ca:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:3C:21:8F:5F:08:B7:09:EF:94:7B:45:57:62:A8:3E:78:EA:62
X509v3 Authority Key Identifier:
keyid:B9:C3:74:E7:D3:79:ED:A8:DB:96:20:0A:4E:EF:E5:BC:1C:28:93:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucN059N57ajbliAKTu_lvBwok58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7a53ec-56d7-45cd-bab8-b32adf61ab47/1/ucN059N57ajbliAKTu_lvBwok58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:06:75:31:5d:ba:ec:52:16:cb:fb:ef:35:25:71:cd:fb:6c:
d9:39:b1:70:9f:bd:a0:87:2b:50:b8:cd:b0:fa:fa:4e:93:5f:
be:22:db:a2:66:ec:3c:83:f6:8f:9c:2a:29:79:10:0a:83:51:
2d:ff:07:db:9a:c1:64:6c:6c:44:af:4b:28:b4:ce:c1:fe:1b:
14:0f:37:21:fd:47:8f:eb:75:c9:3c:f2:49:e9:e4:df:d8:02:
80:68:1c:dd:c7:d6:45:4b:e3:e6:41:f3:3a:70:ae:74:95:39:
87:85:ce:ec:f6:39:42:a4:a3:39:06:d4:ec:26:9d:ba:bc:b5:
67:05:0a:7d:c1:e3:cb:fb:15:0e:de:96:26:3a:28:57:5a:28:
b9:f4:83:ed:dc:6e:31:95:0c:9e:8b:f9:84:d9:1b:c1:0f:f7:
e1:ab:38:f3:74:f1:b9:20:61:72:93:ca:08:b8:98:16:f4:af:
c5:e5:b6:fe:ff:71:93:e4:aa:f2:b9:eb:53:83:cc:a5:23:dc:
b5:99:72:82:28:77:62:86:57:a0:18:67:a3:53:98:52:b9:40:
79:ec:07:d7:cf:9d:47:a8:f2:95:21:c9:db:d9:67:a8:5f:28:
ea:3c:de:fd:82:4d:e5:22:35:62:d8:9d:d2:0c:8e:c3:b7:14:
8d:ec:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:54 2025 by rpki-client