Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
File: UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft (raw, json)
Hash identifier: 5bNToOTBR0osCGYWgpziDhRjeDRgqwq0lzu+tsY6NPM=
Subject key identifier: 0F:53:A1:B1:95:BF:B0:67:6A:86:3E:DB:98:6D:31:F1:07:5F:99:EE
Authority key identifier: 52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
Certificate issuer: /CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Certificate serial: 0194BC3C13B46FE0820295E832896BE678D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
Manifest number: 9F
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl (hash: VEOw6yPcnyhE8tHpLB+rX0VTl7AK6O8X2DwpQECjBBM=)
2: ckdLePhoueFIYZx4kGDlV51XN1k.roa (hash: aOA0NbOYFDXcRN0IYoUzlHYQw/Z3WdJX57vq3cILcdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:b4:6f:e0:82:02:95:e8:32:89:6b:e6:78:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=0f53a1b195bfb0676a863edb986d31f1075f99ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b2:89:8a:57:1c:89:9d:95:19:a3:43:cb:bb:
86:3e:e7:d6:b5:0b:48:3d:72:52:b2:10:00:e6:c8:
9e:d1:06:e1:d2:a9:92:60:aa:a0:75:63:51:1a:7e:
51:0d:cb:50:8b:8b:f6:0b:5f:e8:60:ea:9d:2e:13:
e3:4f:27:da:d4:fd:de:dc:bb:ff:04:d6:00:7d:ba:
e2:64:20:cd:c5:10:26:4e:49:c2:e8:57:87:f7:00:
3c:0f:cd:f0:85:f2:ef:36:16:ae:1e:b5:e1:59:95:
9b:ad:4e:18:59:37:85:01:18:26:c6:8f:73:47:99:
8f:92:82:83:d8:97:75:02:36:73:49:a5:08:ef:52:
25:07:bb:93:5c:c4:6a:aa:b4:e9:97:8a:1e:19:f1:
3b:99:bb:5d:5c:21:41:bf:1b:b7:52:2f:c1:42:82:
43:29:70:ce:7b:61:96:37:ac:fe:23:7e:55:e8:46:
06:84:15:ee:04:22:91:8b:54:32:b7:33:1b:72:8a:
d4:21:98:ad:65:5a:6a:a4:c2:8b:e9:75:78:2a:55:
b3:9a:1e:fe:21:8c:7d:6a:ac:e7:58:24:32:2f:cf:
c6:49:e0:99:e5:99:55:4c:fc:8b:26:14:3f:35:a7:
de:28:1e:6e:fb:18:e5:75:d9:15:9f:ca:dd:41:9f:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:53:A1:B1:95:BF:B0:67:6A:86:3E:DB:98:6D:31:F1:07:5F:99:EE
X509v3 Authority Key Identifier:
keyid:52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e2:da:ba:5f:07:f4:0d:c5:2d:ad:28:af:1d:bb:7d:f3:0f:
ea:7d:a9:39:24:d4:c8:81:8f:a4:75:f1:dd:13:5a:01:9e:d0:
95:e1:ac:0f:16:2a:a7:fa:42:8a:71:cc:3e:3f:a4:75:6f:58:
d7:24:eb:bf:a5:d2:6c:a4:c5:59:0f:da:5f:40:08:4a:f3:60:
27:d9:9e:a4:12:5a:21:93:7b:c7:0e:8e:29:6d:60:1d:31:11:
f8:e3:b3:73:2f:88:7a:00:3a:43:e0:6f:e9:74:26:96:35:dc:
c7:44:70:3d:c6:08:d0:40:31:b6:15:46:33:9c:3b:08:57:2f:
8b:0f:51:85:c8:99:d8:cb:30:6d:a1:84:75:c0:90:3d:67:0b:
92:6b:45:67:ce:e3:f9:72:8b:63:85:e8:60:34:87:32:3d:59:
18:22:7d:b4:08:74:02:ff:dc:c2:ad:39:cf:34:4a:5e:87:fc:
cc:f4:07:33:a2:83:14:cf:c3:af:94:9f:76:50:55:62:40:69:
22:85:51:28:19:5f:26:06:03:9d:28:13:55:d6:4a:21:dc:0e:
c8:05:8a:37:67:83:ac:76:db:43:7b:a8:02:fd:ee:e8:c1:6c:
1d:bf:73:4a:a3:8a:c6:1a:21:5c:f1:b6:bc:d8:74:02:ba:c7:
49:f3:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:44 2025 by rpki-client