Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: kVnvsZDs5O/bvSC5Nu6bmZKcrWsoPsfPlMjcV39gdrQ=
Subject key identifier: 60:78:81:B9:48:0B:B9:19:E4:13:61:0D:1A:27:E4:BC:AB:55:2D:1A
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 0194BC3C33A35EFD3489B9E0A16B781C0C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 070A
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: SjoVtiTpemPj2eY2Jg07xZYqeAfrkE57IXDYSC2OJ/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:33:a3:5e:fd:34:89:b9:e0:a1:6b:78:1c:0c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=607881b9480bb919e413610d1a27e4bcab552d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:00:b4:23:42:2f:93:80:3c:cd:92:c4:25:
94:b0:f7:55:00:ae:59:d6:bd:7b:3d:7a:50:1f:cd:
64:00:f4:e7:f7:9f:2f:65:cd:2d:32:81:38:b9:b1:
54:5a:e8:ca:d1:89:16:1d:39:68:93:cc:d1:c9:52:
49:a8:83:57:99:dc:29:ad:bb:c7:7d:a1:71:e6:e4:
16:5f:48:d1:e0:9f:1e:67:50:32:76:9b:a6:a9:be:
76:ab:5a:53:a9:88:b6:c2:e4:0d:18:f6:b2:bc:ad:
22:de:be:2b:87:df:90:b1:86:5c:f4:4e:82:18:78:
8b:b5:5f:8f:36:4d:59:08:7f:62:e8:d1:0e:73:8e:
2f:3f:60:49:c6:cc:c4:55:ae:e5:18:13:13:a7:4a:
64:11:ea:a7:62:09:83:70:0c:ff:22:25:8e:61:03:
25:57:bc:19:77:a5:9e:cf:6e:bb:0f:f1:08:8e:e5:
76:88:2a:9d:99:7b:60:9f:50:e7:0f:4d:7d:47:19:
aa:d3:70:c9:58:24:31:d2:33:ec:60:8c:11:ac:84:
c9:7d:53:e4:77:5a:ca:a4:3d:3e:ff:a0:5d:4a:e8:
6c:fa:f8:b1:92:d2:cc:ac:22:a4:c3:83:fe:dd:6d:
00:98:db:5c:2e:ad:09:29:53:fa:83:4b:7f:22:94:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:78:81:B9:48:0B:B9:19:E4:13:61:0D:1A:27:E4:BC:AB:55:2D:1A
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:07:72:f0:f1:8c:40:2c:47:31:fd:0e:fd:59:a4:79:e3:14:
da:5f:12:01:56:6d:d3:fe:d1:4f:10:c2:09:e2:36:c4:62:18:
0a:2f:fe:37:39:c2:dd:c5:ec:b1:57:53:d9:84:d8:77:9d:26:
bd:82:d2:9b:fd:c4:76:c0:99:3e:5e:47:19:65:27:63:52:48:
98:20:bb:01:fd:0b:50:d9:e6:59:f2:48:a3:a7:aa:fd:04:20:
db:f0:a5:c0:4f:97:8b:61:e0:f2:2a:1e:e4:9c:e5:7a:45:5b:
f2:f3:db:89:73:05:f3:a6:95:af:fa:93:a7:6d:9d:05:80:c7:
04:88:59:5f:29:7f:9c:5c:76:1c:d0:3e:6c:3d:d5:51:f0:35:
d5:fe:4a:37:08:c5:65:5b:82:23:01:34:26:79:03:37:09:72:
92:e6:ea:fb:cd:ed:78:f8:a3:ce:d3:eb:61:2f:60:81:43:59:
5b:97:f7:91:d1:59:7a:0c:1b:c8:dc:2c:f1:9f:ee:b0:bd:cf:
01:7c:28:98:94:96:6e:71:5b:b6:b4:e5:db:d7:a7:d9:d7:1a:
23:81:fa:ce:9f:68:c3:a0:39:d5:5a:8d:03:0e:6c:81:a2:fe:
f0:9a:8a:f5:d3:ff:1f:f6:b4:78:f3:2c:d0:f4:c9:d0:91:53:
8a:4d:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:17 2025 by rpki-client