Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft (raw, json)
Hash identifier: up9PNDkmpY9eKlaKdGJQ0j92uVMGaiF8P4rtzI7pSjk=
Subject key identifier: A3:F2:BB:B9:9A:8A:3A:3C:58:43:F6:C2:21:3A:52:4D:CC:43:88:69
Authority key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
Certificate issuer: /CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Certificate serial: 0194BD1772DD415C33AF07DDB6B55E390BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl (hash: VNW3G32gOJn1MYbf9m2p981Iw3K39JReNlv1e/N/ocE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:dd:41:5c:33:af:07:dd:b6:b5:5e:39:0b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=a3f2bbb99a8a3a3c5843f6c2213a524dcc438869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:b3:99:25:6e:c8:86:83:99:5e:8a:09:04:
b2:71:b4:cd:86:ba:6d:ca:24:34:9c:70:82:95:61:
42:79:62:66:3e:31:78:cd:a4:07:87:77:e1:d8:ce:
08:f2:e6:3c:f0:10:d3:33:b3:ac:45:6f:93:0e:95:
58:de:09:bd:36:31:2c:2e:7c:7a:cf:5e:a4:82:7f:
be:97:2d:02:3f:09:5e:d6:4f:19:a1:16:55:2b:a9:
d1:b4:cc:28:57:db:bd:29:d1:b3:3b:7b:0f:bd:6d:
ff:03:66:7e:98:eb:47:3d:a9:24:54:c8:68:8d:3c:
e9:2c:cf:7f:3d:6c:06:05:65:ed:58:fe:3f:e2:3a:
fd:da:83:cf:e7:c8:4d:c6:ae:7b:db:ad:fc:5c:10:
83:65:e0:30:ad:c0:1c:05:98:32:f7:e1:7a:26:0b:
8c:10:59:b8:8b:65:d7:0b:82:35:00:75:9c:19:ad:
d9:2a:53:92:a5:76:b0:c5:de:8f:9d:3e:ac:73:ab:
76:e6:18:de:d0:dc:5b:ef:28:c7:6b:2a:43:61:8f:
6a:6a:d2:af:90:b3:ef:92:fc:a5:2b:d5:a0:98:10:
57:2f:9b:cf:c5:f3:e8:31:eb:a2:aa:0b:bf:86:c0:
50:e6:5a:81:8c:19:f1:39:38:d9:51:9b:e1:12:f6:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:BB:B9:9A:8A:3A:3C:58:43:F6:C2:21:3A:52:4D:CC:43:88:69
X509v3 Authority Key Identifier:
keyid:53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:24:80:d5:ac:f0:80:67:e5:28:1a:f8:41:68:3a:fa:ca:f8:
17:5e:4a:37:aa:0f:0e:db:ad:53:d8:a6:94:61:8d:e6:5b:51:
16:6a:58:0e:6b:1a:01:3d:b4:d9:1c:3b:6e:9f:c4:d4:ec:a1:
0e:a1:a3:fb:9f:e6:bc:bb:5e:60:f5:03:c4:b3:e2:c6:18:33:
4b:a0:7c:c3:86:2e:f1:78:af:d5:d8:fc:20:d6:9f:2a:c0:ac:
af:c9:d7:0f:f1:04:fd:60:fa:9f:4f:7f:21:a3:c5:f5:25:23:
2c:5d:a1:90:83:a0:72:98:0e:97:d4:12:40:0a:6f:d4:ca:30:
f4:80:32:2c:19:9e:42:f0:f3:dd:9b:8d:eb:7f:60:14:c9:e1:
f8:2d:18:35:25:a9:7f:68:af:60:de:c1:98:a0:e5:7f:49:50:
b1:39:fa:ee:3a:17:b6:46:d0:20:0a:c0:89:f4:f7:4e:31:ff:
45:36:4a:77:3c:2d:98:13:de:14:60:70:1d:bc:fc:97:d3:5c:
2c:59:86:20:6b:64:7d:51:60:f1:65:d9:e1:36:dc:88:96:3b:
05:06:36:95:b3:b7:9d:cb:76:49:de:55:38:0d:7b:e2:8a:c9:
d9:8c:86:ca:17:4b:f9:1c:b4:82:a4:cd:53:18:52:a9:61:75:
8f:3a:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:38 2025 by rpki-client