Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
File: pU3VdP7HLUOUwlU2uoUyydOPQLo.mft (raw, json)
Hash identifier: wc5es6VKedm1yVT1T64OZ7eTHQefm9ETtcDu6qKw45c=
Subject key identifier: AB:31:2D:BA:1E:14:D4:9E:66:64:5A:FE:3C:80:95:C7:F7:6F:70:46
Authority key identifier: A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
Certificate issuer: /CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Certificate serial: 0194BBCE7378FF1215FCD7CD07DCA4487104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
Manifest number: 073F
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: pU3VdP7HLUOUwlU2uoUyydOPQLo.crl (hash: 7yRGKb46sWuHlkLVXReOm5AOuDAIVEdsRQIZMlfd3Pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:78:ff:12:15:fc:d7:cd:07:dc:a4:48:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54dd574fec72d4394c25536ba8532c9d38f40ba
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=ab312dba1e14d49e66645afe3c8095c7f76f7046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:1f:90:7d:48:e0:0d:b5:ab:fb:9a:f3:d1:
10:4c:c9:45:70:c2:64:1d:b7:2f:bc:3a:39:e5:0d:
46:3a:6a:ab:53:c8:83:89:31:5a:a2:b3:69:38:94:
8f:69:95:c0:2e:02:3a:45:c1:52:82:54:ca:99:f5:
0a:dc:f4:56:66:61:14:ff:e8:6a:d9:57:b2:e5:45:
39:7f:da:3a:16:09:18:bb:3a:7c:f6:15:5f:86:eb:
07:88:30:49:e0:a9:43:d9:71:79:97:c2:85:86:69:
82:8a:97:2e:e3:8d:f3:09:23:90:e0:c0:d7:27:d4:
22:99:8b:de:50:6b:c6:40:17:4e:7f:6d:bb:80:06:
4d:2f:fe:d7:6f:eb:7d:cf:0b:0b:b4:6b:50:b0:ff:
05:43:f4:e8:62:ca:d1:38:28:6f:1a:6c:8e:f2:6a:
31:86:9c:70:c9:7c:92:56:a4:17:c7:21:e2:58:56:
e2:b8:1e:79:3b:b2:64:da:90:ca:54:17:d2:c3:92:
b1:5f:c7:26:52:0f:5a:bf:29:ea:0f:ff:ae:30:20:
43:cf:32:2d:da:9c:dc:d1:49:33:cb:b3:93:39:1e:
fe:cd:09:6a:16:68:28:c3:97:54:7b:dd:0d:9d:fb:
f1:da:69:5f:41:16:92:34:88:1b:ec:e2:19:83:49:
ec:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:2D:BA:1E:14:D4:9E:66:64:5A:FE:3C:80:95:C7:F7:6F:70:46
X509v3 Authority Key Identifier:
keyid:A5:4D:D5:74:FE:C7:2D:43:94:C2:55:36:BA:85:32:C9:D3:8F:40:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pU3VdP7HLUOUwlU2uoUyydOPQLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6934b5-96c0-476d-bf54-237f65b64327/1/pU3VdP7HLUOUwlU2uoUyydOPQLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:84:3b:59:10:e1:f7:0f:5d:1f:72:b8:36:cb:4a:c6:81:
1d:e0:1a:c6:e1:48:9b:38:23:7d:76:d2:c3:5e:10:92:7a:80:
1e:9b:05:d4:69:ac:a6:c9:56:10:dc:4b:57:37:11:07:36:a3:
7c:1c:77:ad:9e:f6:2c:52:cf:a7:18:f1:26:65:11:9e:a7:5f:
1e:1a:d9:88:c6:d7:47:bc:a7:a6:c6:1d:51:cb:ee:0e:ba:f3:
4b:dc:10:b7:34:62:9f:05:ef:47:f2:f6:01:3c:9c:ea:ed:13:
24:9f:3a:6d:88:7a:b7:27:b9:d9:74:c8:21:2c:79:1c:66:1c:
f3:21:b4:44:5c:70:8e:69:a1:a6:94:d7:b0:e1:0c:6f:63:01:
bc:43:65:83:b8:76:60:ca:50:de:82:3d:32:fb:a3:2d:d7:eb:
5b:40:ad:95:d5:0a:b5:1c:d0:18:05:f6:af:09:8e:e3:5b:61:
51:5b:5e:3a:46:2e:5e:3f:8f:bd:ff:af:d5:0f:f9:dd:1f:85:
1d:ad:dd:06:ee:b6:a4:43:20:90:60:9f:b3:b2:12:59:7d:b7:
77:82:ef:4e:87:53:38:91:61:1f:0e:e0:33:51:8b:94:a0:ed:
af:67:9b:ee:0b:51:56:3c:76:16:b3:eb:de:04:b6:fb:b6:38:
fe:9e:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:41 2025 by rpki-client