Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
File: U_tSQvmM_53qm6qMiuRmpCtTfFw.mft (raw, json)
Hash identifier: dxX2OTpzbw/NKWSTx8q+7nMS03KSp7SwjknbB/z1KSs=
Subject key identifier: 60:15:41:02:12:3F:7F:17:3B:82:52:BC:D0:40:3E:07:5D:47:C6:E5
Authority key identifier: 53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
Certificate issuer: /CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Certificate serial: 0194BBCEB98B2FF80BAE6E9E0546278A11E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
Manifest number: 140F
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: U_tSQvmM_53qm6qMiuRmpCtTfFw.crl (hash: HDlC8fKduHOwi+pUYC2UKYVdzE/jyP7sO2jVurxVdvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b9:8b:2f:f8:0b:ae:6e:9e:05:46:27:8a:11:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fb5242f98cff9dea9baa8c8ae466a42b537c5c
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=60154102123f7f173b8252bcd0403e075d47c6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:7f:7b:a8:70:51:95:4f:c4:8d:37:b0:03:
72:08:d1:74:1d:56:e4:87:19:ab:b8:24:36:cc:e2:
41:7d:30:cb:de:3c:5b:44:47:3e:92:66:8a:91:c2:
07:ad:80:3f:3b:84:87:c1:47:b6:d7:4b:81:8a:d8:
b5:29:d5:55:7d:e9:5f:44:d7:63:7c:2a:d9:61:13:
07:44:9d:63:95:fa:6c:35:c4:a2:d3:25:2f:4c:79:
54:79:fa:ff:22:53:99:e2:dc:2e:05:a5:72:62:a2:
21:42:72:b2:0d:a7:82:c4:2f:f5:c5:fe:fc:f0:60:
54:b0:1e:a4:f7:bb:85:01:8b:6f:44:73:24:e8:8e:
47:76:6f:3d:cf:d6:d3:b6:76:b6:bf:63:28:93:46:
d9:7d:da:71:d6:ad:a3:69:9a:1c:77:38:19:ce:4c:
cc:ca:e0:05:b5:98:8e:07:2e:b3:ce:73:1e:ad:3b:
c2:31:6e:6b:b7:56:2b:46:a1:12:b7:1a:3d:c7:29:
7d:b9:2f:bc:31:c5:3b:5a:11:67:e0:1f:6e:0b:39:
ea:b2:f8:d9:73:df:20:cc:57:dc:92:6c:0b:e5:d8:
66:81:b4:ad:cd:b6:5e:47:10:3d:43:31:5e:52:35:
f7:f9:35:c0:54:89:aa:5e:52:14:2d:83:99:31:21:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:41:02:12:3F:7F:17:3B:82:52:BC:D0:40:3E:07:5D:47:C6:E5
X509v3 Authority Key Identifier:
keyid:53:FB:52:42:F9:8C:FF:9D:EA:9B:AA:8C:8A:E4:66:A4:2B:53:7C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_tSQvmM_53qm6qMiuRmpCtTfFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e4d7c6-a299-4b88-8247-9c4032963e17/1/U_tSQvmM_53qm6qMiuRmpCtTfFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:df:c1:ec:e2:2a:5b:97:c9:4c:bd:f0:f5:1a:1c:d0:7a:
a8:96:39:5f:17:da:c5:5d:3e:07:5a:70:ee:39:9f:03:cd:dc:
96:d8:c7:bb:9f:cf:c7:de:97:c5:49:be:bd:41:e1:93:ed:3d:
63:6d:ca:9a:bf:ed:ba:9e:48:28:ba:09:fa:bd:f8:2e:79:cd:
dd:9e:ae:b7:1c:e3:f3:70:26:c0:a9:10:c0:f8:fa:20:06:45:
f7:d3:03:64:40:01:2a:e9:00:f1:d1:86:ce:7a:b1:c2:6d:b2:
3c:ab:f6:cc:da:ae:b2:13:43:14:04:40:6c:2d:03:5d:11:9e:
68:24:11:c3:cc:47:f4:be:2c:7d:0f:49:65:2f:aa:29:7b:70:
9b:1a:ab:01:3b:5d:67:05:dd:1e:bf:97:c5:e1:f2:ce:81:23:
ab:a7:f1:48:84:ef:00:55:0b:78:80:a1:8a:98:6b:74:fe:c6:
e9:34:78:54:46:78:1e:64:b8:9f:7c:e8:83:83:c2:a6:c4:91:
da:0b:1c:71:47:6d:a7:d2:c1:0e:80:eb:e7:f7:17:33:a2:a1:
37:90:e0:95:c4:ab:9f:7c:69:8e:73:49:b5:c6:8b:90:0a:f7:
7f:be:65:fd:be:f8:af:52:43:59:c5:1f:83:4d:5d:94:fb:58:
4f:bd:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:25 2025 by rpki-client