Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
File: U7gc6zN9LdQOYwonBEfAmVk5jBE.mft (raw, json)
Hash identifier: +F0n31uDmlwB+wyeQmoThe8rCwSSAUtR6cs8G4/m1yM=
Subject key identifier: 08:34:4D:B1:A5:F8:83:86:0B:2D:78:BD:76:1E:AB:4C:09:EC:0E:9B
Authority key identifier: 53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
Certificate issuer: /CN=53b81ceb337d2dd40e630a270447c09959398c11
Certificate serial: 0194BC72B4AA8B4327A4741F9C0E34A660E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
Manifest number: 08F2
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: U7gc6zN9LdQOYwonBEfAmVk5jBE.crl (hash: yHg+8hT23soTD9BMfXya4KPpAQP4BAcGSalMmPCbddM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:aa:8b:43:27:a4:74:1f:9c:0e:34:a6:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b81ceb337d2dd40e630a270447c09959398c11
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=08344db1a5f883860b2d78bd761eab4c09ec0e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:33:67:32:fd:c4:48:fd:9c:ed:96:32:1c:
44:ec:41:46:95:15:b5:0b:7e:4a:bf:04:eb:0a:b5:
07:53:28:d5:de:ab:c6:f0:4e:47:47:f6:e0:72:c9:
46:ba:9f:3e:5d:da:25:88:8a:2d:1b:89:7a:bd:cd:
94:31:19:db:5d:01:91:7e:68:6c:98:2c:6c:8c:72:
17:d2:20:29:cc:85:7c:10:e4:ac:fc:e4:76:1b:20:
be:22:78:a5:53:98:d6:c4:32:0a:f5:d2:1f:f8:28:
cf:4b:01:f8:7e:1d:f0:24:8c:88:65:46:44:df:c0:
b4:ce:52:ea:fe:a9:72:f8:8f:f8:1d:84:4d:a8:0f:
10:43:8e:99:69:7b:cc:f9:da:3b:1b:ad:2a:83:81:
7a:21:c4:aa:da:48:37:83:6e:a1:f3:73:96:14:33:
5d:42:76:b4:13:bd:ab:47:2c:25:64:c7:1e:0c:4b:
f8:13:e5:5b:49:65:a1:33:f1:a1:f7:fa:06:fb:05:
64:2d:21:fc:37:01:c4:8b:8a:54:af:19:87:73:fc:
31:91:31:fa:c6:ab:94:ea:79:66:73:47:53:e7:20:
55:98:14:78:38:c5:15:fe:ae:17:4e:35:49:b7:37:
27:4f:cd:57:ac:da:10:e3:5c:39:31:5c:78:6e:fd:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:4D:B1:A5:F8:83:86:0B:2D:78:BD:76:1E:AB:4C:09:EC:0E:9B
X509v3 Authority Key Identifier:
keyid:53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:46:75:be:2f:7e:c5:78:c9:a6:10:5a:61:7e:bc:a7:f2:06:
8a:2a:a4:73:ee:7e:1c:3f:33:b5:a7:2c:3f:5c:ec:c8:1f:a1:
0d:91:74:bc:8c:8e:3a:8a:96:ad:76:ce:2c:ef:c0:a7:7c:43:
8b:cd:7e:9f:f7:3b:7a:e5:9e:37:b6:8a:c2:9c:e5:bd:95:fc:
89:56:f2:5b:e4:ff:59:fd:83:27:11:b6:5d:55:3a:4c:93:e9:
ba:20:c0:27:d2:7c:9d:8b:22:6d:df:67:15:0b:96:49:6e:27:
7f:5f:f8:f0:45:26:e5:0f:6c:8d:3f:83:9d:04:e6:e4:f0:d4:
a6:2b:87:d0:e6:93:bd:23:1d:e8:27:ce:35:c3:ea:87:81:fb:
e7:09:a7:4b:bb:09:79:c8:7a:c2:63:c1:14:87:5f:2a:88:5a:
9f:21:8f:19:b9:f1:22:a7:b8:ed:09:fc:21:86:5a:24:57:56:
9f:73:cc:84:06:f1:a9:0c:3a:d4:79:2e:32:73:1a:95:9b:48:
6b:cd:3d:ba:61:b2:ad:e9:10:57:1c:86:19:64:8e:87:68:cd:
7c:ef:9d:a6:fb:5d:84:f0:08:9d:50:6c:a5:6a:70:0a:37:a4:
aa:67:5e:c3:86:0c:8d:71:e3:ad:a6:85:fd:5e:9b:2b:4b:7d:
7e:c0:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:48 2025 by rpki-client