Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: J7oQc+MdjJXNywCDsdSgpVt88p4rUSEJE6jhiCjdWQE=
Subject key identifier: C2:AD:5A:C8:4B:B9:79:AC:2E:0B:FC:9E:67:04:66:8E:29:05:BA:CF
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 0194BCA9F2D76EF3FB47A2A963D9BF30C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 0FBE
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: PgvSYHjIQipM2SV2ilRIGwuVyi51jVxgmrm8fAI7yfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:d7:6e:f3:fb:47:a2:a9:63:d9:bf:30:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=c2ad5ac84bb979ac2e0bfc9e6704668e2905bacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:ad:43:dc:78:78:8c:f2:30:9b:e8:eb:c8:
96:66:37:cd:12:b4:3c:98:d6:5b:49:59:92:4a:e9:
eb:d4:1e:da:24:ef:52:31:34:67:d8:fa:fb:74:65:
c4:a2:c4:20:84:0a:e2:52:52:5a:6c:8d:87:69:65:
cd:8f:cf:d1:0f:5d:26:26:2d:4b:eb:06:91:8b:ca:
03:31:a4:09:44:be:42:83:eb:84:fe:7f:94:7f:e2:
de:db:36:25:64:d8:30:1e:47:fe:8c:51:92:80:38:
98:95:4f:34:88:df:3e:8a:ef:bb:d1:15:49:93:9a:
b7:bb:91:4b:fe:f0:87:b6:3f:ce:33:dc:df:b5:33:
be:94:7a:41:11:13:dd:06:01:29:7a:81:bc:57:53:
8e:dd:82:ca:b2:46:43:da:92:a6:84:33:e2:79:1b:
9c:4f:88:bd:65:52:38:5f:79:43:b8:4d:88:c3:6d:
c6:0c:d2:8e:f3:b8:8f:62:38:0f:af:cd:fd:51:ad:
29:f5:db:8e:43:88:fd:24:17:65:8e:4d:f8:b3:ed:
7d:d9:5f:9a:26:e0:16:18:19:2f:2f:64:f3:87:a3:
fd:24:5b:38:2d:dd:3e:db:9d:99:24:da:ae:94:4c:
0f:f9:ea:0b:06:bb:95:76:a9:4e:69:3b:11:03:ad:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:5A:C8:4B:B9:79:AC:2E:0B:FC:9E:67:04:66:8E:29:05:BA:CF
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1b:5c:c3:14:11:e9:ba:05:01:f7:77:15:a1:5a:e3:5d:56:
78:34:60:aa:3f:f6:41:96:91:60:67:4c:2f:92:56:8f:20:d3:
b6:b9:2c:32:9a:1e:5c:01:6b:53:e3:73:f4:24:19:d4:fe:33:
7e:c7:04:4d:89:18:b3:3b:25:0c:43:76:3f:e5:27:9b:e4:19:
52:98:d6:21:b0:4a:cd:19:eb:98:e5:04:20:20:2d:f9:4c:19:
95:7c:61:52:08:8a:8f:f3:89:c3:bc:31:46:ed:99:78:c4:af:
5e:68:81:80:dd:d4:8f:ec:74:ac:f7:af:e5:62:35:e7:8d:04:
17:c3:2b:82:02:6e:a7:cb:bb:0f:19:5f:55:7a:cd:a3:1b:b2:
12:d1:69:2c:5e:1e:aa:02:06:39:a6:8a:c3:98:b3:38:54:5e:
21:51:ce:9c:8a:c8:4b:10:a6:d0:fd:a8:1b:91:a7:e2:c4:3b:
b4:ae:1d:ff:34:8c:31:96:de:f4:46:1c:b3:32:8b:8a:7f:9b:
cf:eb:ca:2f:15:43:f1:e9:76:72:d6:1c:d8:d0:18:32:fc:e4:
a6:5b:c3:f3:15:8d:0d:7b:3b:e7:3a:ee:86:56:94:64:5c:57:
af:df:86:22:71:c0:f1:37:82:60:e0:99:91:a1:35:d9:0c:4d:
b6:78:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:18:10 2025 by rpki-client