Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier: yLMkmUYrgUo/77mavOjasSOUu5LgeWxO+EpalqX7oIE=
Subject key identifier: BE:57:04:CB:5B:61:35:00:B1:65:10:FA:EE:CE:19:70:35:B7:87:28
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial: 0194BD17484433F9548E2E3DAF8CD0D070AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number: 084C
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: GeaXbUFLuLCPpcZxv+k3HYJ3fgcDvuLHanpE2uvVo3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:48:44:33:f9:54:8e:2e:3d:af:8c:d0:d0:70:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=be5704cb5b613500b16510faeece197035b78728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:6e:68:0a:b8:fd:dd:66:ba:64:b4:5a:db:
51:6f:76:4a:e8:81:07:79:14:08:4d:ea:bf:bb:96:
7d:de:3d:a7:bf:af:4c:de:aa:1d:28:20:4a:53:a2:
2d:da:5f:37:d2:fc:2d:8a:81:ef:eb:c1:c7:70:0b:
a1:80:5d:b6:45:9e:7c:b5:da:3e:e7:5c:7d:2c:19:
62:b3:60:67:67:15:c4:63:47:34:02:63:22:88:3a:
eb:c8:f7:3b:0a:96:14:d4:a1:25:76:39:e1:c9:f2:
f9:76:b6:c1:d4:62:45:ef:72:f8:aa:57:f2:1f:9d:
0b:eb:ef:45:68:7a:99:85:b5:7c:fc:63:d6:77:06:
21:0e:7c:8e:15:9b:f4:07:02:e8:9d:4a:4a:fe:3a:
7c:b0:19:62:1c:80:b7:bd:c9:e8:24:44:d6:e6:48:
9c:6f:19:03:44:1d:a3:31:e5:24:a7:19:db:e7:32:
86:92:b6:00:9d:2e:ae:e9:da:45:f5:fe:10:c6:3d:
3a:47:28:ac:ac:a1:17:8a:13:cc:8f:84:86:69:97:
d3:31:66:e1:37:6e:e8:a4:59:25:e0:bf:ec:43:29:
ba:af:cf:12:9e:0c:b0:26:ad:10:8c:89:d4:76:20:
dc:13:14:65:fc:14:8b:7d:8d:37:eb:74:96:96:88:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:04:CB:5B:61:35:00:B1:65:10:FA:EE:CE:19:70:35:B7:87:28
X509v3 Authority Key Identifier:
keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1c:72:48:46:0e:a0:7f:41:60:68:8b:8c:02:61:e5:c2:c2:
e6:41:6a:d9:72:cb:24:f3:a5:98:4d:b9:bf:9a:2a:93:bc:05:
6f:25:5a:35:9e:92:fc:e3:80:12:57:7f:b6:c5:b0:26:1b:0e:
1a:bf:f7:84:0b:df:32:cc:25:79:b1:b5:84:a4:cc:6c:b3:f7:
25:b5:9d:e1:fd:0b:f7:93:b5:ef:42:d5:18:68:1a:e8:27:dd:
4d:28:79:72:2b:8e:0e:6a:54:39:d6:2e:b9:5b:34:37:f3:44:
ac:5c:07:07:de:fe:c8:48:a5:60:a8:50:a8:9d:c6:7d:f9:a4:
52:5c:1a:6a:fe:7c:ec:97:2c:52:91:01:57:d3:d9:1b:0b:69:
37:85:54:ee:1e:00:d2:19:af:65:42:9a:f8:21:0f:da:d8:5f:
8b:83:ba:fa:93:86:f5:10:13:52:20:b7:12:d6:bd:3c:28:62:
32:e1:cc:48:35:71:c7:a7:a8:22:ca:76:6f:48:cf:88:4c:a4:
00:0d:5b:d3:0e:4e:cc:d2:f7:4a:e0:95:0a:39:d1:11:c8:69:
a0:b4:78:3f:f0:db:40:e6:3d:38:1e:11:32:1b:0b:15:59:33:
ca:be:29:b6:05:d8:21:7b:35:98:02:10:51:27:15:ec:17:a6:
17:e4:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:23 2025 by rpki-client