Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
File: UlvgKcsyyovigKZJcDcY09iLtHU.mft (raw, json)
Hash identifier: MAIqGSbE3vulejrcYYRdWw6mzazwVCtyHmMB6agdn4k=
Subject key identifier: 62:30:8D:E6:D0:0D:B2:A4:8D:22:8A:E4:24:7C:0A:FF:A3:91:BA:B2
Authority key identifier: 52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
Certificate issuer: /CN=525be029cb32ca8be280a649703718d3d88bb475
Certificate serial: 0194BCE0B52317A237B27270301480546D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: UlvgKcsyyovigKZJcDcY09iLtHU.crl (hash: loAESSnlcKOAXZ53UsZnUtyo/MH9KY+ykbPXrkC/Mrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:23:17:a2:37:b2:72:70:30:14:80:54:6d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525be029cb32ca8be280a649703718d3d88bb475
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=62308de6d00db2a48d228ae4247c0affa391bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:37:d3:4c:03:13:f1:a0:ef:8a:a3:36:09:83:
6b:2c:d7:76:cd:93:c2:c0:c2:d0:b1:86:72:f9:84:
b2:12:08:b3:91:88:f2:6c:14:91:fb:96:b4:dd:d5:
5e:4b:64:a4:e5:0d:a6:db:d3:6c:ee:54:d1:52:c0:
0d:c8:24:7a:8c:2d:32:56:63:c7:2b:4d:93:df:1c:
58:71:dc:9c:0c:1d:ed:3e:44:18:4f:31:3e:88:ca:
15:6b:b3:9a:69:2f:ba:ec:3f:2b:2c:4a:45:3f:85:
fa:07:5b:ec:47:8d:58:87:f2:ac:99:37:80:f2:87:
e7:14:7b:e3:79:7d:2a:47:e2:e3:1a:c9:c3:28:ba:
39:01:76:60:00:f1:c9:e8:1c:77:10:84:c2:59:86:
9c:b7:ca:d3:f2:31:95:08:a4:75:c5:5f:12:a4:27:
3b:b6:57:0f:4f:4a:e6:f4:8a:9c:7f:e9:fb:87:3a:
9f:6a:f7:5a:ed:ae:6f:b1:c9:67:5a:09:de:4c:84:
eb:67:f7:90:c3:6b:e7:a1:de:09:8e:d0:2c:77:ae:
d1:6a:8b:f1:24:76:46:22:3d:7a:92:04:8c:ac:36:
e0:51:b1:58:5b:4b:15:17:3e:71:63:fb:b4:d5:33:
ef:be:f1:f7:f2:95:29:27:98:59:55:38:6d:05:18:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:30:8D:E6:D0:0D:B2:A4:8D:22:8A:E4:24:7C:0A:FF:A3:91:BA:B2
X509v3 Authority Key Identifier:
keyid:52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:93:97:ef:35:a6:1e:53:20:8f:eb:ea:10:6c:9d:37:17:
d7:e8:cd:dc:6a:a0:73:03:db:e1:61:a7:ac:6d:9c:a3:2b:2b:
22:46:45:f5:2f:5f:92:a0:37:19:50:1e:c1:e0:74:f1:1e:36:
7c:92:9f:0d:f7:5d:20:e6:4c:bf:11:08:60:b5:d0:b3:e3:23:
8b:f8:15:4c:59:8b:6a:05:7a:3b:e0:ed:68:33:e4:97:73:08:
83:f2:05:9c:b9:cb:85:3f:de:41:af:b6:d2:b1:7a:8d:15:84:
3a:96:d5:af:62:c8:17:da:56:af:79:69:fa:c9:51:ea:50:2d:
d0:ee:21:76:0e:74:83:fb:dd:33:72:dc:f1:ce:ad:5c:26:6f:
8a:0b:05:24:a6:1a:7d:f7:52:19:bd:6e:8b:c5:fa:a8:fb:75:
c2:68:39:52:2b:12:1c:47:33:4f:e7:12:f6:c1:02:56:de:6a:
e6:40:c0:61:45:33:6c:83:87:62:01:95:64:5a:75:59:b0:8a:
8d:67:a9:3c:11:4a:d0:cf:4e:36:32:59:f6:cd:a4:fc:3d:7b:
da:e6:d0:67:7e:60:d4:43:13:e6:a5:8c:3e:da:26:32:7f:2b:
f7:aa:13:da:67:52:f3:ce:0b:d4:d2:63:bf:9c:2c:bf:ab:aa:
22:d7:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:06 2025 by rpki-client