Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
File: UNorr8N6OYjdKUyROuUiDgONuWQ.mft (raw, json)
Hash identifier: dmV2+UpA+RTouIGmMk/0euFnbHHqx8qk1V60H30ycHo=
Subject key identifier: 36:6B:4C:D1:47:56:EF:85:BA:D4:4A:1D:75:B3:9C:32:B0:C3:26:A3
Authority key identifier: 50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
Certificate issuer: /CN=50da2bafc37a3988dd294c913ae5220e038db964
Certificate serial: 0194BD174DEB4D76BD0F0628BCF041F28586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
Manifest number: 1377
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: UNorr8N6OYjdKUyROuUiDgONuWQ.crl (hash: GI+tGpPJH9Aq4ntbOWOuycllkW081lKhWYEu0vJKHh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:eb:4d:76:bd:0f:06:28:bc:f0:41:f2:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da2bafc37a3988dd294c913ae5220e038db964
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=366b4cd14756ef85bad44a1d75b39c32b0c326a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:49:e5:53:10:9f:36:b2:ee:67:03:0c:cf:
8f:ee:01:de:a7:59:78:2c:2c:5d:44:80:89:fa:56:
4e:02:ad:ad:22:df:4c:45:7b:fd:ed:20:54:d7:ad:
ec:80:0e:74:c1:24:22:d5:50:fd:b7:a1:9d:48:a6:
e3:c9:39:ca:64:67:ae:ff:6d:5f:d3:ca:8d:68:aa:
57:b9:91:11:24:a0:91:b7:10:3a:f1:9a:c2:ef:5f:
5f:06:1e:52:79:51:48:ad:47:db:3a:59:1e:84:90:
f6:30:43:1f:b6:3f:1d:19:3f:5e:48:1e:a7:1b:a4:
1e:38:ed:52:33:32:23:0e:cf:37:e4:17:d1:25:fc:
e2:7a:b3:3c:0e:32:d1:ab:64:41:84:46:70:42:70:
4d:24:c8:a6:89:79:17:c8:1e:d2:63:50:bf:7f:c1:
11:b0:00:21:20:2f:8a:f1:45:54:15:8e:41:7c:1b:
e1:1a:ec:6f:70:83:e3:df:71:2c:f0:5b:f0:41:c7:
63:39:db:b3:60:53:1d:30:08:14:4e:ad:d6:45:ee:
f1:98:62:77:0e:29:32:c6:ec:ae:49:fa:ac:51:4e:
5d:08:3b:e6:e6:db:8c:b4:4d:37:14:9f:6f:7b:d7:
e3:d4:f3:88:ef:99:ec:a4:c6:94:89:ae:dd:cb:06:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6B:4C:D1:47:56:EF:85:BA:D4:4A:1D:75:B3:9C:32:B0:C3:26:A3
X509v3 Authority Key Identifier:
keyid:50:DA:2B:AF:C3:7A:39:88:DD:29:4C:91:3A:E5:22:0E:03:8D:B9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNorr8N6OYjdKUyROuUiDgONuWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/16453d-28d0-46dd-8577-bdd57751c673/1/UNorr8N6OYjdKUyROuUiDgONuWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7e:bd:a7:9f:4c:b0:a7:85:31:ed:8d:37:05:00:4a:a8:ab:
8d:79:65:d0:bf:ec:5a:06:90:37:9b:71:b7:b5:74:fe:a6:cd:
fc:dc:a0:7a:82:8b:97:97:65:8a:6b:de:77:7c:0b:20:64:13:
fc:39:43:a7:41:46:42:2a:ad:38:15:66:5d:f5:bd:f9:6d:83:
c9:f2:f5:20:9e:9c:6a:08:3d:4f:06:65:c7:da:be:30:d9:b1:
9f:84:1e:10:7c:ad:52:ce:dc:a6:96:37:f3:30:75:a4:21:f8:
ac:07:06:5a:d2:11:35:d7:1b:d1:d9:ae:9d:45:70:db:5b:23:
e8:42:b7:9a:b6:9a:0d:4f:3d:9d:c7:18:78:00:f7:4b:df:6c:
cc:45:33:61:66:75:72:f2:ef:f2:20:54:40:cd:d3:15:bd:31:
2b:a4:43:57:56:b3:08:dc:be:a1:7d:90:e7:8c:b2:c8:01:2d:
4f:fb:30:b8:e9:82:87:02:03:2b:d2:5c:83:c5:56:40:b2:6d:
cd:3c:1a:ff:a2:8c:3b:fe:a5:e6:da:31:31:bc:6c:e4:48:2f:
45:ec:d6:f9:aa:75:42:3b:72:2a:10:b0:21:6b:fd:a9:0b:47:
1f:c9:46:77:e9:6e:45:d7:37:fd:10:09:6c:75:f2:24:10:d2:
b9:94:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:21 2025 by rpki-client