Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
File: U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft (raw, json)
Hash identifier: y1fve/bCViXzgWfK06zMS75gMyeUhT2xOlNcJVq2Ex4=
Subject key identifier: E9:9C:F6:3E:30:3B:1A:ED:44:E5:51:75:4C:EC:F2:F6:87:D5:DC:AF
Authority key identifier: 53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
Certificate issuer: /CN=53a3c4ee670dcea68b4d79ea6c3185fe029d97b6
Certificate serial: 0194BC72B74F8F97BF63078DE30048E29F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
Manifest number: 114D
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: U6PE7mcNzqaLTXnqbDGF_gKdl7Y.crl (hash: DUiFhgGdwjeDf6dTI7oR69Midvna+m8jvmnZWXBbXH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:4f:8f:97:bf:63:07:8d:e3:00:48:e2:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a3c4ee670dcea68b4d79ea6c3185fe029d97b6
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=e99cf63e303b1aed44e551754cecf2f687d5dcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:e2:83:c6:6d:50:b4:03:0f:d3:ce:cb:39:
7e:4d:d2:b7:2e:e4:b9:c5:39:b0:d5:4e:04:2f:47:
17:11:79:ac:20:9a:a4:98:04:6c:c1:36:04:13:cd:
3d:3e:f4:b5:e0:b3:de:ea:d1:e6:d0:4c:f1:ce:da:
59:2c:ae:96:aa:46:77:d6:7f:f5:0f:6d:88:49:20:
c4:bd:2a:99:40:90:b0:34:04:7c:ad:5f:ff:d1:22:
bc:19:9c:d4:b2:35:70:31:1d:f3:84:f8:52:d7:b4:
0b:06:7e:94:ed:b3:3e:50:38:b9:c9:03:4a:41:af:
57:65:25:e8:41:f2:33:e5:9b:af:c8:52:9d:8b:7a:
45:6a:96:4d:e8:7a:ea:56:f4:bb:b5:d5:26:01:a1:
23:17:7d:cf:48:e5:8a:f4:bc:46:97:3f:ac:c1:6c:
7b:36:c5:29:fd:fb:fd:35:27:58:8d:14:3f:bc:c4:
ca:2b:1f:d2:11:2e:99:36:f8:da:75:cd:56:df:7f:
4c:0e:bf:b6:40:42:7a:d0:48:26:5c:7a:60:42:e0:
c5:38:57:8a:a1:c1:f0:cd:5d:c3:e1:b4:64:15:c5:
c2:a9:e4:af:26:c4:1e:ff:91:60:ec:2e:f0:dd:dd:
f4:de:d5:dd:04:86:65:4a:8e:58:80:8a:84:5e:81:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9C:F6:3E:30:3B:1A:ED:44:E5:51:75:4C:EC:F2:F6:87:D5:DC:AF
X509v3 Authority Key Identifier:
keyid:53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ec:e8:cd:9d:23:d1:e1:b1:42:e4:15:ba:b3:12:a5:31:e0:
cd:59:68:88:63:f7:01:7f:52:77:51:44:8d:e9:bf:5e:7f:f3:
c6:d6:4a:bb:de:67:a9:11:eb:ed:9a:70:de:23:93:33:36:c1:
4c:29:f4:9a:01:68:2f:a3:97:92:97:0d:06:d2:a2:1c:e6:e2:
17:00:17:2b:a8:aa:cd:60:e2:41:9e:f2:89:65:5a:d6:59:e1:
5c:6a:de:7f:4a:4e:a7:70:c5:30:bb:6d:04:a2:4b:ea:59:00:
80:1c:7e:23:c6:7e:83:ce:6b:b4:40:0e:37:9c:45:e5:16:7d:
92:48:d2:e4:79:35:f0:54:a9:35:45:e9:db:cb:f6:14:7d:b2:
87:fc:87:9b:aa:cc:21:d7:c2:78:42:e3:86:8b:2c:45:8b:13:
3f:78:30:72:69:2b:c0:ed:b7:99:6a:7f:2c:43:ca:e4:fb:bc:
41:24:88:e0:9a:2c:a8:9a:a9:00:67:79:41:94:b6:53:de:45:
48:c0:41:48:2f:f3:72:b6:c4:5a:09:4a:d0:35:0c:35:9e:a8:
a9:7f:e9:23:3e:b5:fe:60:db:40:6a:39:52:61:f3:3e:2f:63:
33:da:e6:12:70:ee:89:17:7f:b7:e4:6e:0f:cb:21:21:c4:95:
eb:11:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:30 2025 by rpki-client