Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
File: UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json)
Hash identifier: mrMXWXkqcVIKtDnTGWz62TG60Y5Pe7xAShpgFLM4RRw=
Subject key identifier: 5D:65:B7:18:DA:5E:D4:75:C1:AD:91:CB:51:7E:90:B9:2B:97:E1:DC
Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
Certificate issuer: /CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Certificate serial: 0194BBCE84FB0459D81CB34D5892890D8E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
Manifest number: 0A68
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: H5c/LxKW9conc+OaBhPtka3hx1qe1qUDZFapAqw0XSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:84:fb:04:59:d8:1c:b3:4d:58:92:89:0d:8e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=5d65b718da5ed475c1ad91cb517e90b92b97e1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:08:6f:e3:06:a9:8b:46:02:6b:f6:f1:d5:
81:db:69:92:26:3d:d8:ee:18:81:2f:03:30:f7:3d:
bd:5e:8c:c1:ca:92:54:b8:8f:dd:6c:19:91:8d:54:
e8:79:46:17:a2:23:6e:b1:ea:24:4d:d3:83:47:67:
2e:ca:a0:02:13:b2:aa:3c:21:77:b8:08:d3:f1:98:
1f:5b:6f:e8:c5:8b:b5:f1:34:e4:3d:09:5f:2c:a8:
d2:60:67:f9:7c:72:9e:38:c7:a0:42:69:4b:da:f2:
78:a3:43:53:c5:46:a3:5f:17:7c:81:27:65:83:ff:
43:d0:a8:1a:50:67:e1:18:fe:78:f4:bf:bc:92:30:
84:42:3f:a5:17:5b:7d:f3:3e:ac:93:8d:97:bd:73:
54:7c:04:eb:eb:98:9f:ae:d2:57:1c:f6:78:86:4b:
df:59:17:e4:23:7e:69:c9:cf:68:89:bd:ef:75:dc:
9f:fb:0d:f1:60:2b:e7:43:27:15:7d:56:36:92:fa:
67:99:44:f9:62:76:70:eb:38:d1:1e:9c:2b:85:27:
8c:26:95:7b:1f:ab:94:12:8f:1c:42:84:6b:d7:1b:
6c:e5:14:37:52:fb:69:1f:c1:3c:3e:3b:e1:38:99:
6b:80:89:72:18:8a:a4:cc:38:79:a1:52:70:43:ea:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:B7:18:DA:5E:D4:75:C1:AD:91:CB:51:7E:90:B9:2B:97:E1:DC
X509v3 Authority Key Identifier:
keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2f:de:35:a4:cd:1a:99:0d:1b:59:0e:d8:fb:53:75:18:52:
4c:49:28:6e:88:4c:29:4f:b0:0b:dc:2d:c0:54:47:62:bc:1b:
cc:55:46:8e:9e:eb:40:54:35:67:02:33:76:36:1d:13:a0:8a:
c3:dd:b7:96:cc:b5:0b:e1:4a:c0:5c:42:d6:85:fd:8e:16:ea:
52:da:7a:48:31:7b:02:e5:bf:e9:1b:aa:85:1c:d6:5c:f1:73:
f6:30:c5:d6:51:b2:9a:28:a7:00:c9:f8:09:37:58:fa:56:44:
62:00:f9:92:32:bc:de:ed:81:8a:d4:78:be:69:31:cd:f8:6f:
f9:ec:a0:37:03:bd:4a:c5:b6:a2:ac:c7:ee:86:94:89:0f:3c:
0a:93:3a:c5:5c:79:e2:98:b8:0e:16:fe:9c:8e:64:40:cb:d3:
27:81:6b:f4:bd:03:8b:d4:83:f9:41:5b:6a:fa:59:98:39:dc:
7d:00:21:47:52:95:d8:14:57:68:9c:2d:3e:0d:94:cf:2e:b4:
57:60:13:08:18:a3:1c:96:65:ec:a9:48:07:2a:1a:69:ad:07:
ba:5f:fd:f5:1d:e5:9d:cf:3f:74:8d:98:ce:82:99:5f:87:97:
91:02:e2:4d:03:e2:5a:7f:49:fa:e9:2b:c1:58:3d:ae:e3:7e:
f2:9e:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:23 2025 by rpki-client