Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
File: UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft (raw, json)
Hash identifier: +MJznYLukfK/+2m2+Pff/YrhDsXXldxm73y9i06X3VQ=
Subject key identifier: 35:11:C0:03:A4:14:CA:9A:75:8E:DD:4D:78:C7:B1:9B:41:B8:CB:D3
Authority key identifier: 52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
Certificate issuer: /CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Certificate serial: 0194BCAA044BACA7FB00C35E9DEBE47ABADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
Manifest number: 1388
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl (hash: SLdiBlo69bWa4qMeRrm6hEOUfZBblf2lic10MDm5OiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:4b:ac:a7:fb:00:c3:5e:9d:eb:e4:7a:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262d3f27cc05be5924bb7bd890f7e6deffb497d
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=3511c003a414ca9a758edd4d78c7b19b41b8cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:9e:41:ca:3b:96:ad:9a:95:ba:78:e7:0d:
54:c1:b8:21:80:5b:c4:b2:c5:46:32:2a:eb:79:df:
b3:e6:6e:d3:57:6c:35:df:51:32:1b:61:2b:b6:85:
3e:0d:8f:de:61:55:a3:43:ba:70:73:0d:55:36:94:
42:44:bc:49:fb:5f:2e:85:fe:26:20:44:18:95:59:
2a:72:d0:ca:80:6c:f8:18:bc:a3:7e:9a:52:ca:0f:
e5:9f:f4:bb:03:b8:5e:11:30:de:8c:9a:7a:05:8f:
ab:f3:58:79:f7:65:bc:74:80:25:65:6d:92:29:b3:
98:9f:80:6e:24:0e:dc:33:29:5f:08:d8:2e:4b:cd:
e4:cc:88:c7:b6:71:75:d9:71:3f:09:40:66:16:3c:
f9:20:15:25:c1:05:d1:59:91:fe:7e:d9:86:26:ab:
97:b0:c2:37:a8:21:01:19:1c:0d:65:ca:4f:97:e6:
e6:10:5b:8d:b5:8d:24:3d:06:23:f3:5e:e1:da:9e:
0d:81:6a:e4:4c:07:ea:06:88:0e:89:10:d0:23:f5:
cd:34:c7:00:20:02:d5:e3:8c:11:9d:15:6d:e5:80:
80:18:b1:ae:dd:67:a1:f6:da:f1:23:90:78:4e:1b:
d3:40:a7:8b:7c:08:a2:10:c8:fb:79:b0:52:4d:a4:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:11:C0:03:A4:14:CA:9A:75:8E:DD:4D:78:C7:B1:9B:41:B8:CB:D3
X509v3 Authority Key Identifier:
keyid:52:62:D3:F2:7C:C0:5B:E5:92:4B:B7:BD:89:0F:7E:6D:EF:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmLT8nzAW-WSS7e9iQ9-be_7SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5974d6-6c67-442b-993a-7ae5987bee62/1/UmLT8nzAW-WSS7e9iQ9-be_7SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5b:7e:82:44:34:1f:20:d2:1e:2d:af:3a:b8:e6:d6:39:a4:
d3:c5:8d:ad:06:e3:f8:bb:8f:be:cd:79:21:9d:e5:d8:f0:6e:
f4:d3:b5:32:a2:1f:eb:4b:23:d8:de:cd:e1:fd:54:2d:d6:0d:
19:2c:16:6d:f0:d9:a7:4f:53:48:96:3c:77:46:72:c1:23:ec:
cb:91:67:c2:cb:78:e7:4f:85:8a:c0:cc:03:89:c7:76:e5:1d:
71:63:97:f2:61:3f:d1:55:dc:d9:b4:b1:e3:57:b6:44:38:58:
1c:2d:98:bb:e9:f9:21:29:ca:b0:17:64:68:84:1e:35:b8:3c:
4a:f8:24:82:a3:c7:9c:b1:0c:bf:43:8e:d5:77:8f:76:16:ff:
49:8b:23:9b:eb:7a:53:bc:5f:01:61:92:15:d5:02:3b:bd:47:
b3:0d:15:2a:eb:3a:5f:78:42:3d:87:53:09:fb:5f:ba:86:d4:
ea:78:03:54:13:bc:47:93:33:2f:27:4a:25:5a:5e:48:a2:50:
f3:77:6f:e8:46:17:84:97:85:92:ac:49:6e:d8:ad:3d:0d:61:
a6:22:42:eb:86:cd:43:6e:3e:55:e5:d7:be:b2:d1:1b:69:ef:
85:0e:2e:e3:f2:63:4a:23:4b:9f:23:ec:db:f6:fc:60:9a:d7:
71:15:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client