Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
File: U5UGCcqN1_bG-jzsrHeUIexsAQA.mft (raw, json)
Hash identifier: TunExeN9evPG3FLuuZWk1bEcsL3LZHTBPrpg5ssamVA=
Subject key identifier: 57:0D:46:A8:D5:16:15:7C:E9:7F:9D:B8:36:80:B8:34:D7:49:D4:1E
Authority key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
Certificate issuer: /CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Certificate serial: 0194BD4E71CF530E6A445FC94CDA2387FB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
Manifest number: 02EC
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: U5UGCcqN1_bG-jzsrHeUIexsAQA.crl (hash: nLKGVsbda6RoRbxc1xYrqjGa4MY2VTg/fqzgd3usCHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:71:cf:53:0e:6a:44:5f:c9:4c:da:23:87:fb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=570d46a8d516157ce97f9db83680b834d749d41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:f3:c4:32:4a:1d:34:83:b0:3b:cb:e2:da:
14:e3:e9:1b:34:8d:e8:02:40:3e:9e:41:4d:d4:d4:
b7:36:a2:5d:94:ca:5f:ec:38:1b:43:e8:0f:42:af:
e6:6f:af:52:90:1b:13:63:e9:41:81:9d:5c:61:7a:
13:79:1c:40:60:e3:58:45:81:0a:5a:57:b5:75:88:
3a:3e:e1:e7:0b:9c:43:3c:4a:01:90:6f:e2:a0:db:
d2:74:63:fd:98:f7:8c:6a:97:5c:81:79:d3:11:2d:
9e:30:79:aa:82:da:1f:a6:16:28:88:43:65:53:25:
19:06:5d:3d:ac:42:94:22:13:b9:d3:8c:57:f8:37:
a3:d5:94:32:a7:86:4c:8f:40:86:43:a6:61:5d:5e:
9b:96:2f:ec:31:e7:73:63:4d:ce:5b:9b:9a:ce:4a:
1d:a7:4d:cc:af:39:f4:66:30:b0:f3:26:c1:6c:42:
34:42:a4:75:db:19:0d:1f:d8:18:02:28:23:ba:5f:
fe:25:9b:4e:e1:3e:b3:1d:6c:e1:a0:39:94:83:89:
7a:d0:ac:0e:60:74:5f:6b:64:b7:5d:a9:6c:2a:d6:
10:25:c3:5a:24:58:9a:5c:05:63:cf:9c:ea:65:18:
b3:00:0a:55:b4:77:40:97:4c:e6:fe:e3:49:e8:60:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0D:46:A8:D5:16:15:7C:E9:7F:9D:B8:36:80:B8:34:D7:49:D4:1E
X509v3 Authority Key Identifier:
keyid:53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:e5:88:4d:05:b6:5f:8d:02:7d:91:23:43:77:40:9e:95:
d9:28:69:e0:55:64:48:bf:cd:14:eb:92:c6:f9:c5:1e:a1:f2:
67:ea:13:ff:6e:a6:77:c1:83:c1:bb:b7:e5:38:cc:6c:73:ef:
0b:4c:58:c8:8a:12:e3:fc:df:0c:59:22:6f:9a:6c:1f:46:df:
88:9e:37:ca:a2:f8:9d:fd:13:44:d3:79:00:3d:de:24:98:1d:
db:cf:44:19:ed:88:ba:85:3a:39:f2:bd:06:64:fd:26:1b:6f:
c1:ad:2d:a9:fe:80:53:49:5f:48:9e:2c:4a:76:33:60:bc:66:
af:34:93:d4:d8:c9:52:70:4b:c7:64:91:4a:a2:74:96:84:35:
29:b2:74:bc:93:d9:38:e5:b3:df:d1:2d:9a:36:7a:4a:4d:ff:
57:04:e0:1c:fd:66:fe:72:1f:ed:04:b1:e3:0e:6e:a8:23:7f:
22:03:e2:86:27:51:75:43:d0:25:9d:34:0a:ce:31:b7:c4:51:
c8:0b:36:0b:1a:65:94:0d:18:fe:79:16:4e:15:b7:3b:fe:f8:
34:f1:59:40:e7:eb:64:98:3c:21:14:96:1f:d7:68:84:b9:da:
8d:80:13:b3:59:d9:83:ae:bb:3e:a8:4c:16:8f:d3:69:07:59:
03:00:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:00 2025 by rpki-client