Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1b6af9-ac54-4ced-acaf-5e62ab908aea/1/UXjejgQCG3JaJUcfAS0quw7QywI.mft
File: UXjejgQCG3JaJUcfAS0quw7QywI.mft (raw, json)
Hash identifier: KozHio0YTb9HPq5hp+3B8DPnCrJnQadGzs0f8E6Qh2s=
Subject key identifier: A2:66:3D:0A:3C:03:20:FC:20:33:BA:74:B9:7D:10:85:17:C9:EF:DD
Authority key identifier: 51:78:DE:8E:04:02:1B:72:5A:25:47:1F:01:2D:2A:BB:0E:D0:CB:02
Certificate issuer: /CN=5178de8e04021b725a25471f012d2abb0ed0cb02
Certificate serial: 0192AE85C54CF18C10FAB01817765568AEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXjejgQCG3JaJUcfAS0quw7QywI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1b6af9-ac54-4ced-acaf-5e62ab908aea/1/UXjejgQCG3JaJUcfAS0quw7QywI.mft
Manifest number: 26
Signing time: Mon 21 Oct 2024 10:00:55 +0000
Manifest this update: Mon 21 Oct 2024 10:00:55 +0000
Manifest next update: Tue 22 Oct 2024 10:00:55 +0000
Files and hashes: 1: UXjejgQCG3JaJUcfAS0quw7QywI.crl (hash: wfOvkeeBw72wg5d7vMZBnHApUvQy4Afq6oGcQ4VXIq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:85:c5:4c:f1:8c:10:fa:b0:18:17:76:55:68:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5178de8e04021b725a25471f012d2abb0ed0cb02
Validity
Not Before: Oct 21 10:00:55 2024 GMT
Not After : Oct 22 10:00:55 2024 GMT
Subject: CN=a2663d0a3c0320fc2033ba74b97d108517c9efdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:24:cb:3b:b2:f3:d4:cb:87:1a:d3:95:c6:
c9:37:5f:f8:85:3e:73:e0:7f:4b:2b:7e:d9:24:d8:
fb:29:6e:cf:52:49:3e:f2:46:57:06:87:cb:a7:9e:
36:8b:e0:96:ac:e5:c4:97:e2:45:0a:8c:58:78:7f:
5c:87:ab:66:53:91:23:49:bc:3e:c5:2f:38:f7:38:
28:f0:a8:50:a6:e4:11:77:55:e1:f3:45:be:fb:42:
61:ec:a5:a1:96:9c:78:08:8b:09:67:2e:36:bf:51:
bc:6c:66:2e:22:02:82:58:10:23:ba:38:82:88:bc:
b7:c7:91:5c:15:ce:28:e0:3b:75:84:cb:c6:30:f2:
ba:52:cf:6b:84:38:0f:62:08:cc:be:4a:e7:76:96:
63:75:68:73:78:1d:c5:2c:d2:99:d5:5a:f6:a5:71:
59:34:e5:ef:37:94:18:b9:bb:5e:41:68:c0:09:c5:
a3:b6:ef:c2:45:2e:17:6b:ca:70:77:fb:d3:04:49:
78:90:d7:60:46:17:8f:36:47:d2:db:c6:87:ed:66:
5a:f8:12:85:bd:22:07:ca:ca:93:d1:79:07:d8:87:
e7:00:55:83:a0:3a:df:a0:a0:8d:5d:af:2e:ee:4a:
46:3d:7d:23:7b:c8:cc:69:5d:c2:de:a1:27:c4:37:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:66:3D:0A:3C:03:20:FC:20:33:BA:74:B9:7D:10:85:17:C9:EF:DD
X509v3 Authority Key Identifier:
keyid:51:78:DE:8E:04:02:1B:72:5A:25:47:1F:01:2D:2A:BB:0E:D0:CB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXjejgQCG3JaJUcfAS0quw7QywI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1b6af9-ac54-4ced-acaf-5e62ab908aea/1/UXjejgQCG3JaJUcfAS0quw7QywI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1b6af9-ac54-4ced-acaf-5e62ab908aea/1/UXjejgQCG3JaJUcfAS0quw7QywI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:5b:51:b7:69:23:f2:30:5d:7a:c1:32:51:31:f9:6d:49:
ef:71:dc:6b:a6:15:54:4f:71:4f:5b:8f:a8:8a:33:a3:24:0b:
1f:a1:cd:ef:c3:93:7a:ba:f3:c7:81:9b:88:4c:1c:26:c7:37:
b9:c4:4b:10:12:13:54:9a:5a:81:06:d8:a7:24:28:50:38:62:
67:e7:41:d5:d8:c4:72:95:9a:4c:30:8e:09:9b:25:f7:43:86:
88:57:f0:49:3a:6b:d5:98:14:b3:88:a1:0f:09:e8:b5:da:f0:
2f:b1:05:41:a9:a2:a8:63:cf:27:ac:51:9e:76:08:a9:29:43:
3b:b5:6e:28:02:28:22:9c:e6:50:4c:c4:6c:f7:9d:38:db:f5:
8b:9f:4f:fc:23:c3:b2:7e:c7:a4:0d:d3:b5:ed:80:d0:58:69:
ca:d5:79:ab:41:26:f8:76:31:13:d9:e2:b0:7e:77:a1:6e:85:
55:59:d5:90:91:57:5f:1c:e5:74:94:ff:43:ce:1e:83:a5:5e:
d1:11:1a:ef:12:ea:0c:d7:1e:c3:6b:34:1a:69:13:2f:b6:7a:
11:65:16:cf:b6:9a:61:ac:89:0b:42:2f:64:e0:11:fe:49:ac:
d0:72:65:ee:2a:51:2b:da:9f:d6:fa:9a:d6:df:09:e4:1b:03:
c2:ac:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:05:54 2025 by rpki-client