Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
File: U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft (raw, json)
Hash identifier: bHXw7di1GvQjEe3txICp7uDbxjOYp5ZwxA78WPBypOQ=
Subject key identifier: 6B:C3:9E:BE:45:38:F1:E7:94:6B:57:33:C9:67:BE:42:A2:C8:16:1F
Authority key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Certificate issuer: /CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Certificate serial: 019535E652FD96AE21A036F1FCE8CEE2ED11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
Manifest number: 0CFC
Signing time: Mon 24 Feb 2025 03:00:41 +0000
Manifest this update: Mon 24 Feb 2025 03:00:41 +0000
Manifest next update: Tue 25 Feb 2025 03:00:41 +0000
Files and hashes: 1: U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl (hash: VKl4vQlnu8UnG/sV7X5vNNwrlHhrgahBKwYJFSm82ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:35:e6:52:fd:96:ae:21:a0:36:f1:fc:e8:ce:e2:ed:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Validity
Not Before: Feb 24 03:00:41 2025 GMT
Not After : Feb 25 03:00:41 2025 GMT
Subject: CN=6bc39ebe4538f1e7946b5733c967be42a2c8161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:d3:14:b0:98:ff:1a:61:fb:f4:73:7a:35:
4b:34:a2:58:e2:26:d9:05:fd:53:e8:8b:a0:4f:a4:
be:5d:d4:aa:63:d4:ad:2f:05:6f:d0:dd:2f:ba:f7:
fb:76:41:8d:7d:e5:33:e3:cc:22:6f:1a:c6:5a:b2:
95:1b:56:04:4a:19:79:f5:b4:83:9d:51:53:0e:98:
55:73:2f:90:17:a1:7e:33:25:69:ca:c8:3a:d5:44:
d7:12:41:ca:8e:73:54:4c:75:88:64:74:cc:94:80:
33:ea:08:01:0b:8d:fb:89:ef:ec:fd:03:2c:f5:52:
b5:fb:7b:fd:0c:d8:be:ad:f4:72:09:49:55:3b:ea:
c4:e7:0d:1b:17:26:f8:54:f0:53:00:c5:97:76:1d:
79:72:dc:9e:3b:13:18:54:c2:f8:de:55:68:9e:12:
1c:5b:7f:ca:05:33:3f:db:e4:0e:de:a4:cc:13:40:
2c:c1:49:d8:49:81:d3:34:ea:0e:bd:7b:ec:ee:a9:
dc:f3:87:d0:1a:d7:2f:44:b3:15:ec:51:77:c1:41:
bf:a8:d8:46:4b:d4:f7:00:a2:5e:52:4d:b9:be:ad:
e7:eb:60:21:d4:71:20:a5:e8:29:0a:ee:10:02:dc:
81:7e:a8:80:40:80:50:59:66:5a:35:61:42:c0:a0:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:9E:BE:45:38:F1:E7:94:6B:57:33:C9:67:BE:42:A2:C8:16:1F
X509v3 Authority Key Identifier:
keyid:53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c6:d0:25:9f:cd:28:fb:a8:58:b7:0c:51:c0:41:4a:07:90:
bc:7b:4b:b6:5e:64:66:97:35:9c:9f:48:2e:3d:e8:93:db:53:
d1:bf:7d:ac:a1:79:2a:41:e7:52:93:c3:d8:49:62:10:a1:29:
e2:19:73:8b:06:0f:d8:e5:5d:61:e3:ab:e0:84:d8:ea:63:f6:
e7:41:d9:a8:33:a9:44:2a:70:c6:ff:51:92:7b:c8:2f:d8:4f:
46:4f:fb:96:c8:2c:a9:7d:18:be:9e:58:a6:c6:32:94:5c:2d:
8d:9e:e0:22:22:a4:55:32:3b:f7:43:08:8a:2b:ad:70:a4:ca:
14:b8:3b:08:11:2c:ce:2d:7b:c2:21:6b:38:73:c8:ed:fe:70:
fe:1b:3c:a0:42:e2:0e:96:07:dc:91:d2:e8:02:19:e1:14:1b:
a1:f8:f5:13:46:84:3a:d8:f3:57:5d:2f:38:68:3b:24:ef:81:
50:bf:18:e4:f0:f2:c7:14:5b:fb:fa:32:76:d7:31:ce:64:5b:
74:20:37:8a:d7:23:99:ac:fd:b7:bc:88:f8:7c:6e:a5:2c:ae:
3e:bb:17:ab:e0:b0:17:9d:60:7c:41:54:35:12:3e:68:5c:7a:
6d:fe:7a:17:dc:74:66:e9:b4:55:4f:55:b7:40:59:dd:d8:49:
e6:f2:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:03 2025 by rpki-client