Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
File: USzy1zi8akeL64yogkEB_w_IGmE.mft (raw, json)
Hash identifier: xNXGBxNTENfycl35iKRnczCiQyqgv2LEXmnXJaL7SjA=
Subject key identifier: 34:F4:E0:B4:B7:E4:3F:98:45:D7:12:02:7D:F0:8C:3B:D5:B3:AF:86
Authority key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
Certificate issuer: /CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Certificate serial: 0194BC72FC033175C2BCC22A01A8530AEFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
Manifest number: 020C
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: USzy1zi8akeL64yogkEB_w_IGmE.crl (hash: wvX+PsaSamhV+/sr+4dTP/Lssk9DWogotJowyJGfAE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:03:31:75:c2:bc:c2:2a:01:a8:53:0a:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=34f4e0b4b7e43f9845d712027df08c3bd5b3af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:f1:87:fc:32:3f:db:d7:12:fb:a9:8f:6d:
e9:cc:f9:d8:46:af:95:e8:e5:7e:a7:78:fc:b8:a6:
40:36:e7:03:20:7e:9a:d1:df:4f:94:55:63:3a:1c:
4a:4a:1d:6a:ce:b5:18:67:48:5b:da:3f:8b:54:49:
31:a3:e3:c5:26:c0:56:d4:27:b6:b1:d8:9d:5b:b2:
9f:02:1d:e8:01:fa:52:8c:8f:e6:8b:b8:6c:7e:b1:
76:bc:61:40:d8:16:9c:0b:51:27:e1:82:e8:8f:b0:
f4:11:fe:a8:e5:fd:72:f1:a9:b7:bb:2d:6a:f8:eb:
9a:80:aa:5a:6e:e9:09:6e:f8:9e:a3:75:5a:d5:62:
3d:d2:57:9e:ee:ca:7a:2a:ae:c8:55:91:9e:b4:4f:
d1:3f:1a:48:e5:da:b1:c3:0d:4f:f8:bd:c3:aa:71:
73:50:af:46:53:0b:dd:0e:8d:be:25:f2:cd:c4:ef:
eb:87:06:4f:5a:70:28:dc:7b:d3:f5:c3:9d:35:17:
9d:90:0a:6a:00:e8:fe:53:7a:db:98:da:f6:17:ac:
51:38:f2:47:fa:c7:40:cd:ba:fa:d5:48:23:dd:74:
0f:fa:d8:83:74:56:7b:e5:bb:6a:e4:30:f4:1b:a9:
59:f6:ba:d2:92:02:ab:a0:5a:53:94:f9:05:49:1a:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:E0:B4:B7:E4:3F:98:45:D7:12:02:7D:F0:8C:3B:D5:B3:AF:86
X509v3 Authority Key Identifier:
keyid:51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:fa:67:c8:15:d2:5d:19:ea:8e:af:69:32:4c:d7:2e:62:
1e:f1:fc:ae:b2:61:17:43:fd:51:fe:4b:25:37:38:1e:47:70:
0c:48:ad:bf:1d:88:86:61:78:eb:7b:10:0d:c5:e3:a7:29:bb:
a8:d8:fb:f1:bc:ef:f1:70:fb:90:ce:25:8b:d3:cb:4d:9f:c8:
65:5e:a2:32:44:65:7a:a5:09:1d:4f:b8:d0:dc:f4:91:26:f5:
78:73:73:99:03:73:7a:20:3e:64:1c:aa:d3:b5:b3:ee:1a:e9:
ba:56:e3:ea:c7:40:12:2d:5f:22:b8:de:6b:84:e3:4e:4f:cd:
73:58:b9:d7:d8:02:58:be:5f:88:8c:82:83:ae:89:c8:5f:09:
61:49:5a:e0:c0:f6:2f:ec:40:f6:f6:ff:c2:b3:af:14:22:b7:
b2:56:bc:25:20:ca:82:b5:44:01:49:84:36:a9:a0:cb:3e:a3:
a6:70:96:19:0a:fb:37:ec:37:28:8e:81:e2:4a:f7:c1:44:c1:
e9:7a:2c:8f:39:19:1a:8a:fb:84:3d:71:d1:5f:83:4e:65:8e:
41:b4:4e:54:82:86:16:e7:08:ce:9d:ad:d0:87:d6:7f:4c:b7:
14:04:21:54:49:d6:d2:fc:ff:4f:24:be:fb:8d:40:ef:40:21:
0a:b9:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:40 2025 by rpki-client