Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft (raw, json)
Hash identifier: lxwYlO0sokR1V0rH21GjRMtBD9SiE8Br36SbKO+X8i4=
Subject key identifier: 28:46:A3:F9:2D:3F:BF:E8:91:C6:32:8C:14:02:99:82:0C:F9:0C:FB
Authority key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
Certificate issuer: /CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Certificate serial: 0194BBCDF9B0F49B4028D5099541D5E9857D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
Manifest number: 0DE7
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl (hash: S0NYqC9NUPWlmStyZ4lVwJ69jhZMB8td0lyxymTlQSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:b0:f4:9b:40:28:d5:09:95:41:d5:e9:85:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=2846a3f92d3fbfe891c6328c140299820cf90cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:1f:9b:67:6f:7d:6a:17:1b:df:ec:64:bf:
74:77:21:69:9c:d7:cc:e8:8c:5b:60:8b:34:b8:3f:
9b:a6:37:58:1d:f0:62:9f:5f:dd:27:37:57:9f:20:
7f:ef:cd:55:c3:ed:fc:fc:4d:ac:22:d2:1d:cb:26:
71:8a:9d:22:d0:70:fe:5d:8a:81:87:b1:fb:df:a6:
e1:f4:ac:bc:b2:fd:66:19:64:bd:09:1c:f8:c8:50:
d8:78:75:dd:14:c4:ef:9c:ae:44:d4:2c:09:47:3f:
cc:0d:88:17:31:3a:57:01:d7:73:b2:af:ab:7e:cd:
73:9d:cf:19:6d:77:bb:82:d0:30:53:2b:08:79:9c:
59:18:48:fe:0a:8e:95:0d:bd:25:39:ca:48:94:d5:
a3:67:e5:b5:8a:4f:11:f6:e3:2e:6c:b0:26:01:df:
7a:6a:10:b9:3f:ae:4e:8c:ce:a3:60:5f:09:c6:3d:
ba:0c:ad:44:63:e5:fc:53:4b:f5:7c:f2:8e:54:34:
07:3b:93:3a:63:44:ef:50:f5:61:cb:e7:a8:f1:80:
94:ff:d2:da:00:4b:cc:53:bf:2b:95:fd:27:0e:80:
85:71:84:b6:de:9e:1a:ea:5a:d5:13:df:c7:7c:05:
23:4d:c6:b2:10:ab:11:ba:98:03:82:48:b3:bd:b6:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:46:A3:F9:2D:3F:BF:E8:91:C6:32:8C:14:02:99:82:0C:F9:0C:FB
X509v3 Authority Key Identifier:
keyid:BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:eb:a8:ee:a8:6b:a8:ca:80:b0:b7:52:b2:17:41:1f:4a:c5:
7a:33:74:8d:3d:d7:39:9f:ee:b5:a6:22:ad:5d:a4:81:d0:cb:
60:0e:c8:5e:ef:1d:64:52:56:97:be:55:4b:dd:60:6a:03:4c:
b8:a2:17:10:06:a3:1f:37:a3:c3:17:72:5c:0e:ff:b0:2c:80:
94:c6:25:68:34:d2:2c:64:e5:18:9c:7a:22:c4:f3:d8:b5:aa:
20:e7:93:25:5a:6d:7b:51:5e:d1:0d:4e:19:63:84:eb:d7:3c:
15:d8:e8:10:f6:4c:c1:27:b2:29:96:77:87:00:4d:77:03:56:
a0:9e:bb:dc:03:c4:4d:37:92:78:52:5c:0d:a1:4c:5b:8b:82:
46:e9:bb:5a:43:d1:e9:30:40:2f:da:cb:e2:84:e0:18:d8:c3:
6e:fd:a1:b9:cd:98:ea:ad:b8:21:a6:5f:ca:e8:8b:c6:6a:f1:
41:5d:b5:e4:f1:ad:82:fe:a4:a4:5e:67:6d:9b:d4:fd:fd:4a:
2c:b3:8d:17:f5:2b:38:d7:fa:7c:04:d6:03:e9:a1:0e:ec:b9:
79:df:aa:b6:0e:7e:fb:7d:dd:83:3d:50:8a:45:36:c5:11:b4:
4b:82:a9:aa:92:b1:54:ea:44:ee:af:0d:19:ec:2b:80:ee:8b:
54:25:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:40 2025 by rpki-client