Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: LCn2KpDYkDdX5hvyY1RxNubE2GojOrAdafKJDIZajro=
Subject key identifier: D0:FA:BF:93:7A:F3:3E:36:DE:67:33:FF:E5:47:03:C5:BE:CB:2B:03
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 0194BBCE2123BA87D927A13A6A82156CAF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0936
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: eNtwz/2WQedG4SaFK9+1BO0rB1bfiJS+g4DHaYu7lks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:23:ba:87:d9:27:a1:3a:6a:82:15:6c:af:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=d0fabf937af33e36de6733ffe54703c5becb2b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:d9:4e:9f:6b:c6:7f:81:a1:43:f6:c7:47:
43:5b:42:3f:5a:e2:e4:32:88:9e:0b:22:ab:6a:ab:
17:65:f2:74:fb:28:0d:80:d4:76:ec:f1:c0:dc:6a:
2e:37:4c:cd:61:a1:b8:8e:1e:32:c0:8a:8d:30:bf:
dc:03:1b:1b:15:4a:a9:8a:a2:8b:88:ad:6c:e9:de:
77:5b:36:32:44:2c:08:b8:ad:55:3e:7b:cb:09:66:
08:8f:f1:04:c5:d9:1d:bd:93:a9:33:c9:a6:10:36:
86:c1:dc:e4:7c:1a:e0:0a:3b:1d:d9:34:8c:08:9c:
94:b4:fb:26:26:8a:ad:3e:df:d3:89:d4:7f:7c:1e:
63:a4:89:c7:43:0a:bf:60:2d:18:60:b9:2b:90:54:
ea:0a:5b:0f:83:ea:81:50:9b:53:3c:60:5e:b8:c5:
b1:ee:63:39:52:e9:4c:f3:a3:33:e0:f9:bc:55:ed:
e7:71:9b:5d:dd:74:d0:b7:17:e6:e3:28:99:88:5a:
75:20:04:79:c5:72:dc:f8:2b:27:54:c6:b7:0e:b9:
86:a4:c7:77:1b:49:83:84:c9:81:ca:fd:fb:cd:c9:
72:2f:ac:c0:1d:00:73:53:48:04:fb:b9:dd:dc:0e:
60:5d:6f:22:3c:b7:01:86:5e:75:04:35:6b:35:93:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:BF:93:7A:F3:3E:36:DE:67:33:FF:E5:47:03:C5:BE:CB:2B:03
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ab:bc:19:23:cf:5f:d0:75:94:ae:00:8f:3d:32:cc:57:eb:
a7:b7:a6:22:07:c1:b0:e6:86:21:c0:12:7d:bc:ef:5d:1a:6e:
d3:e0:4c:96:5e:ca:1e:1a:04:c7:eb:77:ca:e1:1c:9e:c7:e2:
cc:64:ea:59:55:a3:84:bd:d4:78:a2:52:2f:75:68:5a:98:dc:
6b:85:20:9e:08:77:67:a5:2c:a9:06:1f:36:88:8f:da:ab:45:
be:7d:fa:01:51:96:12:88:5a:06:cb:a4:b0:79:28:5d:3e:a5:
34:82:fd:b8:aa:12:ed:1d:14:ba:13:38:7b:bc:d3:62:54:48:
46:b9:2f:8c:d3:ce:2f:ab:c9:87:6c:0c:ff:aa:65:3e:e6:f1:
45:62:20:70:8d:d6:17:41:e6:ad:49:07:a6:74:a8:f8:ba:19:
46:a1:7d:c8:ce:e7:7c:f0:95:f0:d4:dd:0c:46:f0:9f:ea:71:
d2:58:b3:36:6f:6f:dc:f2:98:24:0f:69:ea:bb:43:36:90:88:
92:d5:5f:b6:0d:f5:77:1b:cc:1e:6b:a7:76:f6:23:bb:48:7e:
18:ed:32:e4:62:03:6e:58:65:2a:6b:bc:d0:80:bf:67:17:48:
9e:89:5b:21:1a:16:09:e7:29:d0:13:7d:69:8e:a7:98:91:8a:
c0:6b:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:05 2025 by rpki-client