Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
File: U9L19sohYsiL85oPnekm9CPlMQQ.mft (raw, json)
Hash identifier: W+rK5uY0GCtaCLKiOJHJ0XPll1eRR9EFgA5ZFq3AY60=
Subject key identifier: A7:70:A8:D0:CC:4E:64:01:D5:E2:47:F5:6F:36:B7:B2:16:27:15:8B
Authority key identifier: 53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
Certificate issuer: /CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Certificate serial: 0194BBCE49ED1D832B412AD29A158888F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
Manifest number: 0D91
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: U9L19sohYsiL85oPnekm9CPlMQQ.crl (hash: CJ+1nqG9ViCrhpaRN/OLqQk6WKbglu/xg9s5OiPAAdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:ed:1d:83:2b:41:2a:d2:9a:15:88:88:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=a770a8d0cc4e6401d5e247f56f36b7b21627158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:ed:a5:91:f1:62:3d:27:64:5c:c8:aa:53:
73:f3:53:ce:31:2f:77:0c:d0:45:3f:0e:50:2f:2a:
3a:22:2e:d3:5c:a9:75:07:ad:b7:25:b7:bf:61:56:
df:4e:75:ad:f8:e4:5a:e9:57:94:e9:53:dd:f0:93:
3a:53:d4:4e:55:06:90:43:51:c9:ef:4e:f9:99:20:
65:7f:29:f7:26:60:47:d6:80:66:56:57:b2:71:79:
4e:00:82:fd:2d:e9:cd:29:e7:72:e3:6b:5b:f8:b8:
05:57:73:97:7e:31:56:56:c9:ac:06:4b:22:08:d3:
5a:e4:6f:34:d6:c6:ac:b5:e0:85:06:9a:67:f1:d1:
eb:0f:63:d7:9e:1b:8e:db:27:4f:6d:04:9c:f6:30:
17:20:d4:ee:e8:44:ff:e6:e2:a2:34:3d:1f:04:8d:
af:4f:43:0d:2c:fb:1b:43:4e:5c:50:66:15:ad:85:
aa:f3:4b:f4:b5:9e:f7:f7:5e:b8:cd:50:0d:75:f5:
ae:fb:1f:06:77:90:15:07:c8:74:20:71:25:2f:37:
6f:c2:c0:42:3d:2c:1a:5f:eb:48:d7:a7:d9:ba:1a:
52:38:22:f3:03:fa:f2:14:c1:b2:82:50:73:07:db:
d1:91:80:8b:19:19:1a:17:a9:e1:a7:11:b4:c5:2f:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:A8:D0:CC:4E:64:01:D5:E2:47:F5:6F:36:B7:B2:16:27:15:8B
X509v3 Authority Key Identifier:
keyid:53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ac:b4:91:dc:82:d7:02:f7:47:78:2e:51:b5:8f:81:06:36:
ca:cf:fe:b0:1a:46:94:bd:f0:a0:61:45:33:91:90:db:26:55:
72:c3:5d:2b:e9:7f:82:6b:fa:a9:1f:2b:99:a8:4e:f0:4a:c1:
de:a8:92:5a:47:78:d8:0c:88:36:83:8e:fd:5c:4f:b4:7e:4b:
55:2e:e9:24:8a:46:b2:c5:00:6b:0e:3f:41:a3:7c:cd:1a:85:
ac:f0:3d:aa:c5:02:88:c1:10:c3:39:9c:91:65:3f:20:12:38:
50:ab:91:95:30:8f:73:7d:36:c4:e0:f2:d8:ab:08:5c:45:dd:
be:4c:22:0e:6a:73:59:f6:5b:ce:c2:07:e0:f6:4c:3d:56:b8:
de:f7:84:1d:22:1c:29:3c:a5:4d:c5:d5:5d:2b:f4:15:7a:54:
72:0a:8a:5b:28:ee:53:ae:0a:2a:4f:91:b6:1b:0e:0a:8c:85:
59:a1:89:ec:19:77:5b:cf:b7:bc:fb:90:e8:c6:cc:5b:42:10:
65:05:fd:cc:e0:6f:51:38:11:b0:74:f1:58:48:ef:7c:4f:e0:
7d:55:13:12:78:c2:20:a8:ab:45:2a:14:ab:9b:4d:0d:ac:8d:
33:e8:7e:0f:bd:12:b5:02:89:44:71:af:dc:fa:44:55:cb:fe:
ed:59:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:30 2025 by rpki-client