Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
File: U7gc6zN9LdQOYwonBEfAmVk5jBE.mft (raw, json)
Hash identifier: JLmOPbqWxyVaMsQ8bjZCRsPORp/DThj5k3SowwF8mPs=
Subject key identifier: 4C:2D:B4:EE:AD:64:49:7F:A1:45:89:2E:6C:7D:5B:3F:E4:9E:76:62
Authority key identifier: 53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
Certificate issuer: /CN=53b81ceb337d2dd40e630a270447c09959398c11
Certificate serial: 0195C6F44E62359591BD8E9F91390278B012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
Manifest number: 097C
Signing time: Mon 24 Mar 2025 07:00:54 +0000
Manifest this update: Mon 24 Mar 2025 07:00:54 +0000
Manifest next update: Tue 25 Mar 2025 07:00:54 +0000
Files and hashes: 1: U7gc6zN9LdQOYwonBEfAmVk5jBE.crl (hash: pRTYE82pyM0OumlZ4XBYdmFDi9n4x8ECn0iSfrfms5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:f4:4e:62:35:95:91:bd:8e:9f:91:39:02:78:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b81ceb337d2dd40e630a270447c09959398c11
Validity
Not Before: Mar 24 07:00:54 2025 GMT
Not After : Mar 25 07:00:54 2025 GMT
Subject: CN=4c2db4eead64497fa145892e6c7d5b3fe49e7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:f1:31:f5:d4:9e:36:ca:6f:26:d3:0a:c6:
2f:45:eb:07:39:57:70:1d:cf:4f:c1:a1:86:c8:28:
47:31:c3:33:b9:29:2f:9f:07:f4:6d:3e:a5:f2:63:
40:c7:f6:07:95:39:95:8f:06:41:bf:9f:2f:00:fe:
af:8e:82:21:1a:14:7c:de:ce:77:ca:c8:55:0c:0d:
2c:7e:5b:e0:3e:88:7c:10:76:ee:17:6e:9b:be:c7:
8f:89:1b:13:d4:25:fe:1a:14:87:0a:1c:8b:4e:0c:
b2:f9:82:08:c8:d0:ec:0d:8d:df:28:31:58:d0:a2:
42:25:8c:88:2a:0b:82:b1:0a:ca:bf:16:45:e4:c4:
43:d1:40:06:5e:8a:c6:f0:34:f3:d1:38:a3:da:b1:
87:b1:80:a3:f9:51:79:1e:be:22:41:15:2d:22:37:
95:25:b0:e9:d7:d3:9d:d1:a0:e0:9e:88:7f:64:53:
4d:de:71:42:ff:b2:1f:67:85:b3:e9:18:e1:de:14:
f7:54:f0:c1:d6:6a:a4:20:d2:22:44:41:09:26:6f:
b2:77:c1:d7:b5:7f:a0:e8:af:08:f1:70:40:92:83:
32:05:39:24:2e:1a:1c:bb:86:c1:7f:d0:b5:b6:bc:
46:0f:f3:54:44:00:ce:be:cb:91:14:5c:40:14:d8:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:B4:EE:AD:64:49:7F:A1:45:89:2E:6C:7D:5B:3F:E4:9E:76:62
X509v3 Authority Key Identifier:
keyid:53:B8:1C:EB:33:7D:2D:D4:0E:63:0A:27:04:47:C0:99:59:39:8C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7gc6zN9LdQOYwonBEfAmVk5jBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/998e59-1fe2-4346-82a8-dcd15112c6d7/1/U7gc6zN9LdQOYwonBEfAmVk5jBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7a:73:3f:35:68:a4:10:a3:42:ed:fc:8a:2d:d9:93:8c:00:
70:4b:a4:b3:15:2f:3c:15:96:66:27:21:5c:23:e2:b4:be:2a:
93:62:65:09:b4:22:a6:56:5a:05:9b:ee:0e:8f:dd:9e:68:eb:
fb:08:95:fc:06:a4:7b:47:83:74:97:49:1b:b0:a5:db:0d:fe:
2b:65:65:5b:b9:78:31:86:6c:a2:60:a2:b2:d3:ba:db:9f:3d:
c4:db:46:06:81:7b:3a:3c:ae:5c:e2:f8:70:48:c7:27:89:38:
6c:95:b4:4e:c1:79:cd:17:32:d1:23:f7:8c:2a:e7:8d:53:b8:
50:6f:cb:e4:71:59:15:25:eb:0b:18:53:d0:0e:aa:a5:ae:23:
2e:24:c4:2c:d9:ba:a2:e3:a3:61:16:55:78:a1:d6:a4:f5:fb:
b2:55:f6:68:71:0d:a1:9f:73:e4:26:f1:6f:85:e8:65:27:d1:
b9:13:a4:12:ab:e9:12:1b:17:d7:94:22:bd:97:eb:29:5d:71:
b9:d3:74:c3:a9:a6:36:42:64:d0:ac:64:ef:ef:9b:3d:d9:83:
a5:42:8f:2c:c6:a8:b8:44:0e:a6:1d:c6:59:95:aa:3c:9c:54:
ab:c9:1d:25:0b:2a:e3:e0:08:9d:64:11:8f:1b:e1:86:f3:ed:
c3:12:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:34 2025 by rpki-client