Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier: K31HYvb2dckwKKUBYmbIlkek99DnluzEcyBRgn80EwQ=
Subject key identifier: 7B:79:A5:29:A2:7B:C4:62:73:D8:D2:4B:85:46:DF:17:42:41:26:AC
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial: 0194BBCDB5AC32A29164A908342F1CC91A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: IpHMlqPz9n+pkc8PeLRaaqMJV2/yPYke9xFaQ2TZqT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b5:ac:32:a2:91:64:a9:08:34:2f:1c:c9:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=7b79a529a27bc46273d8d24b8546df17424126ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:1e:2a:57:97:98:e8:93:15:71:c0:f5:28:
48:36:a2:c7:7a:ef:58:31:fe:5e:b3:08:2c:d8:21:
e0:98:35:d0:bb:c9:ff:2f:4d:c7:d6:5a:cb:13:4b:
a3:ee:65:f6:39:63:2b:e5:ef:9d:6e:1e:83:d2:62:
55:9f:92:fb:49:ff:4a:53:3a:d8:68:aa:bb:29:2f:
85:4f:3d:6a:74:a6:d4:b3:7a:09:43:4f:c0:e2:8d:
ca:68:1e:75:3e:74:38:5a:c3:66:db:06:c0:6c:11:
74:89:1a:cb:cb:80:2d:d5:17:90:df:60:2a:ce:60:
45:eb:84:9d:17:e9:d3:cd:71:43:38:7c:24:58:80:
8c:3c:8a:3e:1e:f3:60:28:95:7e:80:5e:27:bc:02:
73:ac:03:4d:01:3d:5f:d1:92:ae:11:f5:6b:11:df:
79:2e:a4:68:43:59:9c:61:77:8f:1e:cf:eb:c5:4a:
a4:4f:dc:ef:77:67:17:46:48:26:c9:10:16:3b:dd:
ce:2c:cc:0c:6d:09:59:83:51:84:ae:2e:f9:a0:4d:
dc:06:ed:97:2b:7d:6e:c5:b0:a6:f4:a7:b5:14:8f:
85:27:3f:15:12:7c:0c:1a:93:58:69:f0:d1:aa:ef:
19:1b:23:7c:60:86:f0:45:99:c6:84:cd:e3:a9:f4:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:79:A5:29:A2:7B:C4:62:73:D8:D2:4B:85:46:DF:17:42:41:26:AC
X509v3 Authority Key Identifier:
keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ec:4d:b4:6d:6a:c9:02:af:43:34:65:4b:35:fd:4c:27:60:
ae:ae:a4:e8:d3:50:86:46:53:4d:58:8e:fd:8f:48:3c:a5:66:
25:66:74:f6:c0:ae:4b:78:56:94:30:18:3f:ac:ff:a8:f9:85:
ba:bd:60:70:e8:1a:4d:f4:6f:68:09:58:42:b4:4d:1b:d2:a2:
fe:ed:3a:75:47:cc:68:b8:83:95:b9:22:b5:3c:79:c8:b7:00:
04:db:56:fa:72:da:5d:6e:ca:52:c9:55:fc:1a:5d:ea:55:85:
3f:9b:9f:80:d1:84:e9:d8:77:f9:94:fa:c2:02:06:c8:df:83:
ed:4e:09:46:26:31:8a:41:66:83:1a:d0:ec:f2:0a:bc:56:40:
0c:a5:01:b2:7f:41:14:1e:e0:e5:69:41:89:92:60:02:d4:b8:
a1:f9:6f:77:85:94:b0:4d:e4:75:ba:46:65:88:8a:15:58:84:
09:cc:93:58:1d:25:9d:f5:0c:21:b1:4e:36:58:79:3b:ed:b4:
f9:1c:c8:34:b4:28:d1:71:ed:59:cd:9b:1e:86:0b:da:ec:c0:
2b:e2:38:05:f2:c2:5a:82:1b:4d:d4:86:3a:2c:c8:8d:1e:58:
21:f8:80:26:c5:96:8b:46:6f:9f:44:86:5d:e5:71:08:80:84:
74:24:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:13 2025 by rpki-client