Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/UMekmcJkv7FWKWdef73c2Dae8U8.mft
File: UMekmcJkv7FWKWdef73c2Dae8U8.mft (raw, json)
Hash identifier: MYipYRmWwGDJnrGdBjNlseCvFkl4dysH+6igboi+WEU=
Subject key identifier: 71:F2:53:14:A5:6C:05:F8:5D:60:0C:79:F9:35:73:99:12:74:28:7D
Authority key identifier: 50:C7:A4:99:C2:64:BF:B1:56:29:67:5E:7F:BD:DC:D8:36:9E:F1:4F
Certificate issuer: /CN=50c7a499c264bfb15629675e7fbddcd8369ef14f
Certificate serial: 0194A57D2162D98FDE6B51499FFCA40BBD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMekmcJkv7FWKWdef73c2Dae8U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/UMekmcJkv7FWKWdef73c2Dae8U8.mft
Manifest number: 0475
Signing time: Mon 27 Jan 2025 02:00:28 +0000
Manifest this update: Mon 27 Jan 2025 02:00:28 +0000
Manifest next update: Tue 28 Jan 2025 02:00:28 +0000
Files and hashes: 1: UMekmcJkv7FWKWdef73c2Dae8U8.crl (hash: CVZBz6LL60vdrztCNjDX2l2YHTQZcKfB+K1ntYAbqeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a5:7d:21:62:d9:8f:de:6b:51:49:9f:fc:a4:0b:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c7a499c264bfb15629675e7fbddcd8369ef14f
Validity
Not Before: Jan 27 02:00:28 2025 GMT
Not After : Jan 28 02:00:28 2025 GMT
Subject: CN=71f25314a56c05f85d600c79f93573991274287d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0d:32:ce:1b:20:2a:bd:a2:55:28:0a:ef:04:
1d:b7:c6:f9:4f:24:f7:ca:17:95:54:6d:0a:18:45:
70:98:97:5b:4c:dc:03:1e:65:33:fa:56:1c:69:fc:
6a:66:b0:cd:3c:2d:ed:3e:fa:a6:41:07:0a:d0:76:
86:ca:05:d0:0f:dd:11:21:36:6c:5c:37:07:75:09:
16:48:0e:e8:89:be:e5:3b:0a:92:78:0f:7e:19:24:
63:7d:c4:6a:95:09:fd:31:5b:fa:18:3c:86:67:b7:
ff:e2:2e:1d:3e:c9:e6:1e:bb:cd:2d:ea:6a:b8:9b:
4b:bf:71:c8:28:4a:4d:c2:07:2a:08:d4:e6:03:b3:
76:ff:ae:45:54:e9:fb:5f:e3:89:43:1c:ae:aa:5a:
fd:92:62:b5:b0:bf:a3:a4:d6:fd:99:7f:ea:c0:21:
2e:e7:74:2e:94:7c:3b:e0:45:48:87:a3:81:40:b3:
24:62:75:fe:c3:55:1a:4c:bf:7b:c2:2f:e3:f8:b1:
bc:e3:04:d5:d5:1b:b1:96:4e:0a:60:18:d6:56:c5:
b6:9a:2c:b3:4d:ea:88:07:89:c5:5e:64:f6:98:a1:
2d:74:63:f0:c3:f8:08:b2:68:1a:9d:81:39:cf:df:
4c:33:aa:30:8a:39:6e:2c:d3:b6:8c:2c:e7:d8:a5:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:53:14:A5:6C:05:F8:5D:60:0C:79:F9:35:73:99:12:74:28:7D
X509v3 Authority Key Identifier:
keyid:50:C7:A4:99:C2:64:BF:B1:56:29:67:5E:7F:BD:DC:D8:36:9E:F1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMekmcJkv7FWKWdef73c2Dae8U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/UMekmcJkv7FWKWdef73c2Dae8U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/04a207-c0b7-4b7a-a26f-3e7400467a43/1/UMekmcJkv7FWKWdef73c2Dae8U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1b:2c:57:32:4f:1e:75:d5:57:eb:d6:0c:9a:6c:a0:7b:ab:
fe:ad:22:2b:af:ae:a4:47:61:9f:93:83:cf:97:cb:05:c7:25:
29:52:7f:18:27:c2:f2:86:6d:6d:88:2a:8d:76:5c:0b:07:fc:
6f:99:09:e5:4f:b7:be:e7:9e:43:59:62:16:fe:f7:da:e9:e6:
a8:51:a6:75:41:cf:fc:7c:16:4c:f4:78:f5:e5:36:8a:e9:c1:
77:d1:d3:2f:eb:76:cf:76:cc:8e:1c:2c:c4:45:aa:94:f3:8a:
04:0e:06:36:e3:0a:f3:af:4b:0c:3a:28:09:47:6d:d4:61:85:
5a:25:d5:5e:c8:2a:66:87:23:9f:ae:7f:a3:4d:ad:b0:74:38:
db:ee:f3:ad:d8:56:6f:d0:26:a0:c7:bc:bb:b6:80:a0:9e:12:
b4:3d:b2:cb:60:e2:e6:4d:4b:62:3f:66:0a:f3:8e:bc:7d:ef:
4d:6e:7d:07:9b:fa:15:65:15:a3:f2:7c:10:0e:d6:58:11:51:
ae:20:df:73:83:a0:59:78:2f:fe:07:79:0c:17:02:c1:69:5e:
7d:e1:b0:08:32:5f:27:9f:ea:77:3d:d3:ec:27:b2:e1:1b:55:
aa:6a:d6:1a:b3:be:2f:cc:d6:2e:be:a6:d0:d0:89:c9:e7:48:
b7:2d:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:25:05 2025 by rpki-client