Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: ecN6tLxpzbGGyNdhTmuOBSRurxA9TIAwygpxWTB2NOI=
Subject key identifier: 86:DF:6F:F0:B6:D1:FA:81:3C:59:39:8C:16:32:84:F9:0C:D9:86:00
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 0194BCAA211AA20EA4D610F22D74FCD54AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 12DC
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: mX/Gi+tBQbLSeUasOaxLBh/eRnJa5Ayb9oRVlhUUCyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:1a:a2:0e:a4:d6:10:f2:2d:74:fc:d5:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=86df6ff0b6d1fa813c59398c163284f90cd98600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:bf:89:dc:23:02:b1:75:a6:42:00:85:80:
f2:b9:f9:66:4a:50:be:f9:be:9a:1c:13:07:be:42:
00:48:28:3b:55:bf:f0:cc:08:2c:39:96:fb:84:23:
7a:e3:75:34:a8:17:5e:ac:bb:07:08:f0:7f:57:80:
0f:ce:ae:ad:01:c0:26:0e:7e:4e:09:46:86:cc:fb:
c6:ec:90:8c:9a:36:c9:a2:48:9e:bc:a3:04:18:95:
98:a3:f2:de:34:ad:d6:0b:af:13:49:c0:a8:4d:09:
09:26:1e:92:7d:79:65:a6:98:98:e4:a2:5f:53:b4:
68:62:f8:bb:84:37:60:a9:10:84:db:5d:4c:ff:0e:
e6:af:2e:64:5d:5c:ba:45:4b:fc:b4:d4:d7:db:10:
32:2f:89:68:f7:f6:1c:8f:d8:24:9b:1f:1d:a4:a8:
db:5c:da:24:42:61:a8:37:d2:89:60:9e:74:6e:d6:
b4:45:ff:3f:da:b5:2c:1f:7e:45:ba:c4:51:a3:55:
3f:83:6a:af:d0:bd:9e:1f:e1:bf:8c:2d:6b:f9:46:
b0:98:5e:c8:3e:e8:d3:76:b6:46:94:ef:93:13:e2:
8b:0c:fe:28:8e:c9:73:17:b2:9e:cd:88:f5:aa:54:
96:fe:8e:be:73:b6:49:b5:0e:ae:14:be:b4:45:21:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:6F:F0:B6:D1:FA:81:3C:59:39:8C:16:32:84:F9:0C:D9:86:00
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:54:4f:fa:46:bc:6f:75:3b:16:c1:85:e5:fa:a7:2b:ce:e8:
1c:ef:05:ef:08:9c:d4:91:3d:d9:f5:48:36:ef:5d:84:cb:ca:
28:ba:20:fd:5f:97:a5:13:f1:94:c6:0a:4a:3c:56:5c:5d:9d:
16:9e:12:ed:db:22:b8:fe:23:8e:2c:01:36:42:43:70:3c:03:
32:4c:62:c0:80:1d:94:e2:78:e4:78:50:c3:72:17:df:35:7d:
5b:56:6b:8b:b3:ab:b6:66:ba:8d:26:1b:3c:b9:0c:ba:f5:e0:
2e:1b:77:d5:d7:8b:ac:84:2a:85:75:a0:05:f1:fb:89:82:f4:
3d:2b:75:2b:79:74:28:d1:b4:15:2d:93:ad:6e:3d:4e:59:51:
ad:df:9b:1c:d1:47:60:b3:34:b5:3c:63:8e:4c:06:4c:81:fe:
10:29:87:70:20:34:5d:18:f8:ae:15:f4:27:5b:d0:c9:9f:18:
8a:08:65:fb:42:d6:36:b2:92:2c:cc:df:e3:f9:a9:9a:a2:b0:
ea:aa:c1:07:d2:aa:af:da:c1:ee:3b:f6:78:29:e9:ab:84:be:
c7:68:2e:b4:23:ce:e7:62:de:21:94:90:30:8f:9f:bd:22:68:
10:9e:9f:3a:71:35:bb:6b:6b:3a:54:9c:6e:e9:fe:1b:d3:a4:
9a:dd:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:10 2025 by rpki-client