Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
File: uv5tfV8eRHjRoCUXHaawObJjAR8.mft (raw, json)
Hash identifier: iIbaCueJhVNrkiFkIXoP/plSWaMdQxQTuXzsE/gAysI=
Subject key identifier: 1A:33:F2:A8:5C:1C:4A:49:BD:7E:DF:C8:90:E2:B8:88:50:5F:24:1E
Authority key identifier: BA:FE:6D:7D:5F:1E:44:78:D1:A0:25:17:1D:A6:B0:39:B2:63:01:1F
Certificate issuer: /CN=bafe6d7d5f1e4478d1a025171da6b039b263011f
Certificate serial: 0194BBCEC3BC49DA7A376AB1278F0A683083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv5tfV8eRHjRoCUXHaawObJjAR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
Manifest number: 07CD
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: uv5tfV8eRHjRoCUXHaawObJjAR8.crl (hash: lDYimlJhd5nU3420CQSyRGalOmcnnvtrhWY8dUoIwXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:bc:49:da:7a:37:6a:b1:27:8f:0a:68:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafe6d7d5f1e4478d1a025171da6b039b263011f
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=1a33f2a85c1c4a49bd7edfc890e2b888505f241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ac:70:b4:ac:0c:55:5e:35:1b:47:70:f0:81:
e7:d5:de:49:63:3b:ff:30:42:db:e3:95:9a:52:2c:
4e:7e:fa:26:25:c5:5a:77:1d:58:aa:32:40:af:ef:
af:b0:06:9a:70:b7:72:4c:2a:41:cc:77:6f:26:d2:
65:73:ab:f5:44:66:63:ed:6d:eb:96:75:97:f8:06:
21:68:c2:65:a0:c9:b3:a6:41:9a:a0:6a:ad:eb:ce:
30:21:8b:80:71:63:0a:66:e6:96:43:00:e3:a3:7b:
aa:dd:7a:4f:f2:d4:7c:6b:35:1a:ed:5b:dd:42:f2:
21:35:c8:7a:c4:2a:cc:15:87:db:5e:c5:c3:54:5e:
95:2b:6b:ed:44:92:0b:68:23:97:cd:36:b3:c1:80:
c7:f6:64:9c:9f:9e:ae:15:67:e9:73:c6:02:ff:4a:
4e:30:7c:dd:57:23:b4:92:1f:30:b3:7c:f0:a2:da:
2c:95:da:d5:91:06:f0:6b:82:2a:23:a9:08:ec:d8:
fa:0f:a1:b8:34:19:53:41:51:6a:53:1d:9e:bc:fd:
c8:ff:3f:7a:39:e2:2a:ac:5d:cf:0d:32:2b:a9:93:
27:54:81:f5:71:4e:c0:2b:84:b6:75:10:93:d6:b3:
fc:cd:47:05:8c:95:d1:18:b5:ad:53:71:db:ec:9b:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:F2:A8:5C:1C:4A:49:BD:7E:DF:C8:90:E2:B8:88:50:5F:24:1E
X509v3 Authority Key Identifier:
keyid:BA:FE:6D:7D:5F:1E:44:78:D1:A0:25:17:1D:A6:B0:39:B2:63:01:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv5tfV8eRHjRoCUXHaawObJjAR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/9ff86c-1f7b-4bc7-976a-dfb79bba1b68/1/uv5tfV8eRHjRoCUXHaawObJjAR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:53:55:98:18:5a:da:a0:65:e3:22:6b:2f:0b:64:55:02:49:
1d:bc:d0:20:a2:a7:20:5f:c7:c7:ed:ea:48:8b:48:6d:db:61:
22:fc:87:8c:72:d1:e1:f4:66:5e:fa:c2:8c:5b:30:ad:f3:47:
77:71:da:42:2a:88:5c:20:41:11:23:79:2a:99:c7:d3:f6:42:
50:e9:fc:d7:01:6e:42:c1:5b:24:b3:b2:20:c0:f4:df:5c:0c:
2d:2c:64:fe:8f:59:52:37:df:85:46:de:2d:b0:bc:17:1d:6d:
24:9f:bf:55:42:e7:a2:b8:2c:3a:98:f5:ed:12:9a:73:17:17:
b6:02:c3:bf:55:2a:09:8a:6a:24:4d:10:97:38:dd:a4:84:71:
10:4e:d1:95:33:ef:08:68:6b:e4:d2:42:5d:56:69:15:58:ee:
64:e8:39:f9:53:86:a1:16:21:66:e6:a6:98:4b:75:33:0b:c2:
b0:51:bc:e9:09:c7:18:e0:06:3d:c0:b3:fc:a9:90:ba:2e:3b:
f5:69:48:b3:25:e0:0f:72:e1:8a:d4:ec:ec:fe:cb:0b:4a:4c:
af:bb:b5:14:5b:83:8a:4e:2a:47:05:57:12:54:c6:73:d3:59:
ac:bc:44:a6:f9:7f:3e:6a:52:26:f4:90:7a:89:13:7b:0b:ad:
52:74:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:58 2025 by rpki-client