Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
File: UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft (raw, json)
Hash identifier: ocL7a3a3EDKJr1rEyPqG+iyR/hjtSLHzvHrmXYY1rRU=
Subject key identifier: 4F:B5:3F:0B:84:84:52:E2:6D:F6:E8:6E:56:9C:12:8F:EA:69:37:98
Authority key identifier: 50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
Certificate issuer: /CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Certificate serial: 0195D69EA9885FD5055217A9D855CEC7FAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
Manifest number: 1025
Signing time: Thu 27 Mar 2025 08:01:17 +0000
Manifest this update: Thu 27 Mar 2025 08:01:17 +0000
Manifest next update: Fri 28 Mar 2025 08:01:17 +0000
Files and hashes: 1: UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl (hash: rPNF4cMCzQEp0HkRUNyXwOYBT2CzTcyTPmwS9TFhYFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:9e:a9:88:5f:d5:05:52:17:a9:d8:55:ce:c7:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Validity
Not Before: Mar 27 08:01:17 2025 GMT
Not After : Mar 28 08:01:17 2025 GMT
Subject: CN=4fb53f0b848452e26df6e86e569c128fea693798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:14:29:3c:54:35:a3:4f:d5:af:81:60:b9:
38:ea:93:0c:04:de:a3:a1:f9:e2:28:56:7a:64:24:
1a:c5:74:28:a0:29:a8:1f:5e:6f:41:51:f3:49:3e:
16:b6:55:5e:ad:c5:4a:88:90:36:ee:e4:4c:5a:10:
65:77:6c:79:80:5b:04:66:12:3d:a2:fc:e7:cf:7a:
32:dd:2c:40:4b:c0:17:98:ba:cd:47:4b:25:b9:65:
e6:46:b2:8f:f0:ea:6e:f2:17:06:29:27:22:25:93:
1c:06:5d:37:90:79:68:c0:3f:13:24:ed:46:6c:74:
4b:28:15:64:fa:01:03:39:9a:57:b8:ab:46:0a:71:
91:04:32:ae:2c:78:f8:c3:96:a9:24:af:f1:70:ef:
6d:90:87:36:31:f2:39:d1:5a:9a:4f:d1:f0:2e:93:
25:b7:fe:b3:14:54:82:82:d7:ae:7d:7b:e7:d5:4a:
a3:4e:18:d2:e9:f5:c6:81:d6:6a:55:85:10:f1:20:
8a:64:b5:ff:68:56:f1:0a:e7:df:9c:24:fd:8d:51:
9f:78:c1:f0:51:30:71:fd:f8:3d:ba:db:5f:6d:00:
eb:9b:5e:76:67:4a:99:5e:2d:82:e7:ac:15:ba:56:
6a:3a:02:c0:59:3a:83:4d:81:05:27:f7:7b:15:47:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B5:3F:0B:84:84:52:E2:6D:F6:E8:6E:56:9C:12:8F:EA:69:37:98
X509v3 Authority Key Identifier:
keyid:50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f8:c1:5b:77:93:e5:34:9d:08:4b:46:6b:e8:2e:69:24:aa:
dd:fb:d3:65:c0:61:49:ae:52:cb:67:21:a9:d8:cc:2e:80:23:
34:8b:5c:54:65:e4:1c:f0:ff:f6:60:53:4e:d7:b2:34:a6:c1:
02:80:6f:59:07:48:43:87:59:3b:87:24:b5:37:a0:19:4e:cd:
8f:ca:99:f8:04:05:bf:15:59:5c:59:ca:f0:10:b6:c5:5f:f0:
ad:b2:12:79:d0:d3:39:50:d8:81:a3:f3:59:58:a1:da:32:96:
63:6e:8d:3c:34:64:1b:54:7c:24:a4:1b:20:2c:1b:6d:4b:2c:
6d:9c:fb:78:3b:73:ca:59:74:09:39:66:81:92:8c:5d:90:d8:
5e:4f:7e:3e:6f:cb:52:3e:ca:fe:e0:fa:d5:2e:2f:6b:13:ee:
38:ff:f2:a3:d3:3e:df:27:18:10:f3:30:3a:fd:fe:5e:02:8e:
f9:1f:9a:14:05:6e:f4:61:46:88:32:b3:18:35:9b:1f:8f:ee:
a7:1f:1f:73:f4:ce:b4:c0:22:47:6a:7d:36:95:62:2f:e8:ae:
88:c8:5f:6e:89:01:49:5d:81:d2:98:3a:5e:06:9b:8e:3b:b4:
37:32:7d:80:5b:6f:3a:30:0a:96:f8:06:f5:e2:34:8e:9b:99:
56:41:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:01 2025 by rpki-client