Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: tJ810Ropoa3JnMLeyjhG2gVYrpVNim0KIUSMxdsZ1Rg=
Subject key identifier: 86:09:A9:BB:2D:66:B8:6E:F7:6D:31:BB:94:29:97:75:D4:7E:98:7B
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 0194BBCDBCB8BA1119304AF6FB83D842E4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 09BE
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: k/QH0mlJS7Zy/1DJfTMQCsEqDDVBDD6oo5SnK5vP+VY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bc:b8:ba:11:19:30:4a:f6:fb:83:d8:42:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=8609a9bb2d66b86ef76d31bb94299775d47e987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:e8:25:9a:b5:bb:92:7e:7f:bb:cb:ca:d9:
24:88:6f:1f:66:f2:80:8b:27:69:ee:28:3b:f8:df:
94:b2:3f:9a:0a:f5:4b:8f:aa:cc:5c:cf:ca:67:fd:
82:37:b6:d4:dd:4b:39:c3:a4:bb:91:e2:e9:c3:2c:
72:0a:c3:17:c5:0f:16:d0:e6:32:cd:69:d4:57:fb:
6c:36:70:aa:f9:49:80:c1:3f:c9:7b:cb:8b:98:10:
0a:2a:17:13:bc:5c:8b:5b:46:f0:0c:b8:6f:f9:ed:
78:d9:67:12:e7:79:a0:48:2a:72:dc:29:19:59:71:
30:82:9a:20:1a:47:96:09:6b:7c:e5:0e:2c:aa:01:
45:26:39:e2:36:93:1b:4a:93:6c:ac:f3:e1:58:41:
c3:ca:d1:8b:6b:e1:08:e7:73:62:cd:e3:89:81:03:
ef:29:40:52:ac:6a:73:6e:b9:82:80:e0:ef:65:ae:
ac:40:22:2d:ac:19:4e:fe:b5:12:61:b5:b0:2d:c6:
52:53:68:33:9f:ef:53:b9:bd:56:9a:9a:31:f0:97:
58:bc:19:ba:85:0b:5d:fe:4e:71:ca:cf:d9:a3:b9:
1b:44:3c:97:4c:ac:5f:aa:4a:fc:99:6d:3f:c9:53:
2a:32:0c:18:34:cf:24:65:87:7d:9f:f5:41:62:21:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:09:A9:BB:2D:66:B8:6E:F7:6D:31:BB:94:29:97:75:D4:7E:98:7B
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:62:d0:ba:1b:3e:ad:f2:14:04:0d:b5:4d:11:d9:fa:6b:
aa:0f:31:b1:cb:32:7f:a4:eb:99:fd:f5:35:b8:c7:74:dc:c5:
ae:1e:62:a4:08:8f:d3:57:0f:f8:47:51:e8:e5:07:dd:01:c4:
94:5d:b7:a9:ff:ca:c5:59:4f:26:81:b8:55:53:fd:7c:9b:31:
ca:38:9b:67:ca:ca:80:67:3d:80:36:27:14:be:12:6f:bc:b9:
7d:5f:97:af:c1:d8:d4:f7:c9:db:6a:9d:40:66:e9:68:d3:b9:
af:9a:f6:1f:79:cc:08:58:59:24:10:4f:73:8f:a4:91:46:01:
0d:9e:29:ad:b1:2f:2a:00:99:95:ae:df:36:bc:ca:15:84:d6:
9e:92:20:90:23:c4:04:f9:20:12:6f:ce:76:d7:9a:ee:94:35:
a8:05:4b:db:bf:24:ab:76:fa:6c:16:96:32:fa:4c:01:8d:38:
56:d4:1e:3b:b2:9d:9a:3a:0f:84:f7:7c:fe:6d:5a:66:3f:5e:
ec:51:d9:f3:8a:10:6c:f8:3f:7f:32:80:29:65:f3:a1:44:f1:
77:be:3c:9e:fd:76:b1:bc:b4:ba:3a:74:1e:72:e6:03:a0:51:
ba:1b:28:f4:99:c3:0e:ac:24:6d:9d:21:ad:ca:62:ef:fa:38:
23:70:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:46 2025 by rpki-client