Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: wih5fgSNL3Um9YPDWnrEwe9ntbKLsQE0rLL4s6799no=
Subject key identifier: 11:FD:CA:59:9A:22:C4:7E:B3:16:7C:B3:42:69:94:56:A2:70:4B:DF
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 0194BCE0B0406A89E613E914831CB161FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 11B7
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: OuQB2COaRrcP34oUlkPLEAjVtf1DeGwlN5nK/2oM0LY=)
2: pMHjgJekdS1MaOx6NO05QRcLwkA.roa (hash: 0cAR/UsqHx4Uoat+wXKZE3sY02i0A2U0Zxjt7/F3FS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b0:40:6a:89:e6:13:e9:14:83:1c:b1:61:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=11fdca599a22c47eb3167cb342699456a2704bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:c9:54:bf:5e:c2:07:b4:2f:a6:28:fc:ed:
f7:2b:69:ae:b3:8b:88:fa:30:bf:f3:67:6c:5d:23:
f1:ea:7d:40:74:c4:80:c6:c7:c0:ba:b6:a0:8f:0d:
4c:96:ce:b8:4a:8d:f6:d9:91:e2:63:eb:23:9e:53:
cf:f8:de:17:18:c1:aa:c6:62:5e:6c:d5:12:6a:cd:
c7:c5:10:18:6d:62:8b:91:bd:bc:ad:5c:da:81:45:
e9:42:55:f2:90:5b:cf:a2:b6:24:9c:21:0e:d8:05:
eb:3f:8c:82:e4:f5:93:3c:28:39:15:82:3d:2a:9d:
09:d1:bc:db:d5:16:c9:d0:63:c9:9b:52:cf:8d:f8:
92:0c:63:2e:d7:08:f7:da:b0:bc:c1:f2:22:ca:5e:
74:5e:68:39:85:4f:b4:54:9b:df:4b:91:51:2a:2f:
55:d7:cb:09:4b:12:e9:fd:47:c9:3f:06:90:96:97:
36:65:83:39:5e:8b:c1:e3:ba:25:40:1e:f7:f7:fc:
84:e3:84:5a:95:fe:4f:27:c9:71:4c:cc:9e:8a:a1:
31:3c:eb:ca:79:b1:6a:05:5a:ca:ff:2a:ad:00:cd:
ec:d1:f6:72:60:14:45:78:e2:f4:1d:09:df:89:eb:
0a:59:50:1c:1d:17:e4:44:85:56:86:95:77:be:83:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:CA:59:9A:22:C4:7E:B3:16:7C:B3:42:69:94:56:A2:70:4B:DF
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:eb:b5:5a:b1:8e:88:af:0e:b3:bb:65:bc:f0:e1:bd:69:cf:
58:24:35:74:c4:c8:3b:d7:ae:17:3a:bb:6e:21:0d:e7:b5:18:
a7:47:ba:69:3c:13:4c:52:b4:87:d9:05:6d:35:25:69:8b:7f:
c0:33:fb:e6:ae:62:18:9a:5f:82:07:4e:59:bb:ea:e1:ac:5b:
40:59:80:3c:48:d0:d0:36:74:57:3e:42:94:81:10:4e:d0:29:
c9:b4:3f:f4:1e:eb:ba:6b:52:f8:23:74:a3:da:73:5e:0c:d8:
15:b4:ae:b1:4f:15:3e:45:9f:f2:e7:68:23:c7:90:b1:cc:ce:
05:4e:27:9b:83:0d:f1:fb:19:ac:a2:f0:3a:4f:d3:63:dc:95:
c9:8f:50:ea:84:bb:d5:ef:46:69:a7:7f:53:20:f1:39:33:7b:
ec:24:bd:df:2d:18:a2:e4:60:41:6f:50:07:cd:53:b7:97:a2:
12:04:1c:c9:69:45:27:c5:ed:7e:bd:40:ef:44:43:d3:c1:25:
ac:47:f2:be:c2:63:3d:44:8a:0e:81:68:64:5f:0a:10:8c:ab:
66:c7:d1:aa:a6:1a:48:73:65:75:cf:3d:1f:57:cb:09:9f:0f:
8c:17:28:ca:74:25:e8:ca:a8:0d:04:16:9d:0c:18:f1:a4:af:
53:84:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client