Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
File: UEwHY-3Lox64nwmD3djdGIkYwu4.mft (raw, json)
Hash identifier: PeKFlVX6wG4+ZFe9KkcRal/d3zs98JjI+vCzunojuTM=
Subject key identifier: 54:76:A9:BB:E9:83:7B:69:7A:E2:61:A3:B6:9B:69:D0:2F:FF:67:A9
Authority key identifier: 50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Certificate issuer: /CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Certificate serial: 0194BCA9A69A7A036AC64ADC9631729711A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
Manifest number: 0753
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: UEwHY-3Lox64nwmD3djdGIkYwu4.crl (hash: CbD97iMEptA5VMGQRbb0PlrkkuUmPKXpksTcL3Rl/xU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:9a:7a:03:6a:c6:4a:dc:96:31:72:97:11:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=5476a9bbe9837b697ae261a3b69b69d02fff67a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:f3:e8:6a:e8:eb:80:4a:50:3d:bb:56:a2:
1a:92:8f:87:4c:65:13:2f:41:a2:bb:3b:e2:8d:21:
5c:c8:c3:36:f2:50:cf:54:9e:b7:a8:d2:3d:3a:49:
7a:3b:54:c1:20:40:d9:7b:37:4a:49:fe:8e:67:12:
6d:87:a5:fb:90:d2:8e:6f:78:4c:90:1f:9a:d9:40:
f9:50:10:e3:57:07:26:dc:50:8e:2a:fe:4a:c2:50:
5a:55:2f:72:2a:3b:1d:e6:9b:85:31:8e:f4:dc:a5:
68:c2:4d:bc:31:b2:8c:4c:b8:1d:ed:62:92:95:b5:
95:8c:67:35:54:23:df:31:c9:37:de:a9:79:ef:10:
9c:4b:8d:dc:bc:8b:4f:71:56:52:9c:24:10:38:ea:
14:0d:e5:f7:ee:d6:2a:ee:77:a6:d5:46:aa:80:e5:
f6:d5:47:39:6b:9d:66:cc:a8:97:c1:04:19:59:be:
28:3a:02:21:6a:5b:7d:f9:14:60:6c:5d:78:aa:aa:
e5:b4:ba:5f:46:65:7c:31:e5:ca:46:4d:73:bd:0f:
38:5b:65:e3:12:21:53:31:df:09:cb:1b:38:3f:2a:
28:36:5d:3e:7c:39:48:65:b1:5c:96:15:cb:a2:35:
4e:1d:72:01:40:f7:2a:64:07:5b:5b:c9:9d:f8:7b:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:A9:BB:E9:83:7B:69:7A:E2:61:A3:B6:9B:69:D0:2F:FF:67:A9
X509v3 Authority Key Identifier:
keyid:50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b8:f3:e8:d5:93:e5:86:e9:e0:b4:88:dd:76:ba:ad:d9:1c:
53:38:b9:c4:0f:95:d2:d8:29:71:4e:b6:90:d2:e6:d8:23:ec:
f5:ef:2f:9b:c8:4f:9f:29:77:b8:51:ab:84:86:ca:b9:99:85:
10:52:7c:88:84:40:c1:24:28:8c:7d:16:21:cc:87:a5:4f:96:
4c:77:b8:70:cf:10:4e:f9:59:5f:99:88:8b:52:01:46:e1:b9:
61:b6:42:18:79:8d:94:2a:6a:37:33:06:eb:2f:4b:25:74:f8:
84:47:a0:6f:8b:87:4c:99:59:db:56:79:86:d9:dc:27:bd:b8:
60:c0:22:aa:61:b8:f3:95:d5:4a:37:cf:1c:7a:b5:04:52:2b:
1a:75:80:8d:f4:ea:ac:1c:51:7b:7b:a1:19:a1:ca:d5:26:aa:
0e:72:b6:4d:2e:84:ed:f0:f6:d5:b7:db:8d:9a:34:7f:2e:95:
59:91:a4:81:d1:78:7e:7f:09:8e:4a:1a:56:60:96:0f:e0:a8:
6c:4f:19:93:da:a4:ab:7e:68:1b:d0:66:a9:b9:18:39:e0:93:
1d:fc:21:ea:9e:95:0d:95:23:a0:8b:a5:41:78:8b:38:23:d5:
0c:e2:34:15:48:cf:d8:be:97:4f:4a:6f:0e:d1:73:c1:a7:44:
be:b7:ad:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:27 2025 by rpki-client