Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft (raw, json)
Hash identifier: Z01rRtl1xSBzulbn2enR8uB6/DVQte9z6IDK71XEM90=
Subject key identifier: 96:FE:BD:43:CF:E7:14:0A:3A:3B:A1:37:3E:EA:90:AA:24:6D:48:39
Authority key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
Certificate issuer: /CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Certificate serial: 0194BBCEAFFD10795445A42E4A07985BF00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl (hash: NzmoBayGcBszjLqSZeNQZjPIhr+X1WyxtP3jB9Ntse0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:fd:10:79:54:45:a4:2e:4a:07:98:5b:f0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=96febd43cfe7140a3a3ba1373eea90aa246d4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:ad:ee:0c:63:fb:63:1e:2a:a1:cd:db:29:
ff:ae:67:1f:ae:e5:b9:21:dc:ab:51:e8:95:55:af:
9a:99:ae:af:a0:3b:5f:fc:b9:29:e9:f7:dd:41:72:
e5:58:1e:f4:5a:10:b4:5c:99:e3:dd:bd:e6:34:ea:
25:1d:af:b0:44:56:2d:6d:0e:c5:11:5c:60:03:a4:
db:6e:24:5b:e5:03:0b:d0:f4:29:2c:07:80:4c:bb:
56:b6:aa:d1:60:e1:20:4a:d5:5b:a7:f3:ce:dd:61:
cf:03:fe:c3:c2:a5:7b:ce:42:bb:81:2b:25:ca:63:
b9:72:2c:dc:d2:19:62:b4:fa:8b:df:6c:82:d1:4c:
0e:3f:7b:8a:3e:e4:30:c0:e3:36:bf:e4:4a:6c:bb:
28:3d:42:29:25:72:7c:44:f6:e7:e1:60:ed:8c:ab:
94:45:f1:08:c8:a4:b4:59:d5:0f:a9:ea:28:02:57:
e5:fc:7f:13:c2:f1:98:03:12:45:95:35:e4:f8:57:
fd:c7:1c:73:62:a3:1c:d4:a4:45:b4:7b:54:48:c2:
56:2f:56:96:65:93:2b:58:ca:f5:5d:15:de:75:68:
8d:fa:13:aa:74:86:8f:90:83:06:0c:18:fc:29:4d:
9e:94:fd:0b:56:76:09:7d:bb:79:87:39:9d:47:dd:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:BD:43:CF:E7:14:0A:3A:3B:A1:37:3E:EA:90:AA:24:6D:48:39
X509v3 Authority Key Identifier:
keyid:B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:2e:01:b1:9a:d4:3a:c8:c9:53:f4:4a:bf:48:c6:98:bf:
57:1c:5d:28:f9:ab:52:63:8f:42:17:a8:9c:e4:52:05:02:30:
d9:28:ed:d9:18:84:09:0e:6d:04:5e:35:05:eb:6e:8c:a5:53:
ff:c0:13:73:13:5a:0f:89:b8:6d:13:ca:55:b0:b0:c4:9a:40:
83:7a:e6:82:d2:6d:0b:8c:38:0b:7b:b3:89:29:cb:34:c4:32:
c5:6b:e8:d4:1e:52:28:11:88:e0:9a:8a:1d:34:c7:0b:d7:73:
6c:49:88:b6:c4:7f:78:4b:ed:e7:a2:0c:b6:f4:5b:68:07:90:
5b:10:8d:33:73:58:2a:0d:94:e3:60:bc:7e:40:25:62:72:0d:
74:db:88:d2:d4:c3:01:02:e3:ef:2b:67:77:2e:76:83:08:67:
ac:ba:4b:1d:aa:04:a7:0a:d2:2d:b5:fa:e7:d2:1c:1d:9d:af:
65:e9:c4:13:0a:5c:e1:04:49:8f:12:e1:49:2c:5e:8a:6a:64:
bf:e1:6f:c4:c7:8e:53:46:75:fb:e6:a8:53:27:b3:84:8e:1b:
61:ac:94:b7:50:36:77:2d:6d:b7:99:d3:9e:56:6e:2e:e3:12:
f3:54:75:8e:9b:a9:96:08:b0:cd:8d:b3:d2:78:dc:3e:3f:17:
52:42:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:46 2025 by rpki-client