Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
File: dUI-b2St_Fh6CPgawqySYOsu1hU.mft (raw, json)
Hash identifier: eXEZ2PRpF2sGs0aGUHRNt7LQaa2XEmhRm9qS0z82Ojw=
Subject key identifier: E0:F0:DF:A4:72:E0:BA:D5:6C:95:F2:1A:5D:53:99:DC:0A:E1:BE:AF
Authority key identifier: 75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
Certificate issuer: /CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Certificate serial: 0194BBCDCC0E70E3E0A70920846F0BE0450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
Manifest number: 0A9B
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: dUI-b2St_Fh6CPgawqySYOsu1hU.crl (hash: si9AeZu5BtQtnSW5/KnqG59N72zkktESIOxgLnvA1K0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:0e:70:e3:e0:a7:09:20:84:6f:0b:e0:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75423e6f64adfc587a08f81ac2ac9260eb2ed615
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=e0f0dfa472e0bad56c95f21a5d5399dc0ae1beaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:ee:d2:c5:0c:82:8f:7c:22:e4:5a:2b:6f:
9e:a4:5c:9f:d9:54:72:be:ff:67:74:c8:c5:83:93:
50:e2:f9:e2:0c:14:3c:1e:3d:d8:ee:9e:0e:7e:f2:
21:c1:74:82:f2:16:2a:fb:ec:5f:a2:b5:fe:88:7d:
7d:19:c6:dc:94:84:51:53:c9:99:bf:64:f7:d1:3f:
b8:60:92:ee:c8:54:b7:f8:b3:12:f6:56:67:f5:95:
ff:e2:31:04:3c:b3:ab:7e:56:bc:7c:5d:60:23:6f:
da:43:a7:03:8c:7b:c8:97:4f:13:19:69:41:e7:e3:
6c:ee:d5:0f:7a:9b:2c:e7:20:71:ba:e3:d6:d4:2d:
49:8a:90:ea:46:df:1b:c4:79:95:b8:cc:77:63:10:
27:aa:34:30:e9:80:4e:a4:25:45:7f:60:62:5e:ad:
b7:d8:1c:ae:b7:8d:24:3b:7e:a2:63:56:a0:a8:7a:
ab:1a:14:02:f5:e1:51:7e:07:17:89:7c:da:3f:ef:
f8:d9:0e:1a:d6:4c:22:1a:13:09:ae:c3:90:cf:4d:
38:79:4b:20:02:f5:64:84:35:e3:50:62:9d:09:3f:
ad:7a:f2:6a:44:73:1f:f5:d3:03:c4:32:81:34:a8:
1c:35:4d:27:63:e3:8b:97:a4:04:ee:5b:2a:fe:0a:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:DF:A4:72:E0:BA:D5:6C:95:F2:1A:5D:53:99:DC:0A:E1:BE:AF
X509v3 Authority Key Identifier:
keyid:75:42:3E:6F:64:AD:FC:58:7A:08:F8:1A:C2:AC:92:60:EB:2E:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUI-b2St_Fh6CPgawqySYOsu1hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/dUI-b2St_Fh6CPgawqySYOsu1hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:42:53:c9:ba:cf:6e:89:57:f8:26:1b:c7:57:8d:ab:bd:
dc:07:64:6a:db:74:cb:d5:26:98:94:b4:ca:ea:f3:2f:f2:26:
91:c2:ec:00:6f:7c:2c:9f:bc:5d:e8:0a:a8:fd:a4:80:76:ce:
56:99:dd:22:3f:b3:49:8b:ef:85:a6:93:c8:b8:ff:14:06:31:
80:57:c7:d6:0c:1a:de:8d:62:3c:71:a1:9b:89:6e:a7:64:07:
2f:57:ff:1d:b9:02:ab:d6:01:11:56:21:2b:e1:7b:c8:b8:31:
43:4f:21:10:2e:e4:07:62:eb:8b:6a:85:7d:83:d0:5b:8f:3e:
d0:45:e2:9d:98:82:9c:2c:5d:20:6e:55:f6:c4:ee:2a:87:ef:
48:f7:97:93:40:25:6c:a4:df:71:29:b2:ef:cb:f0:bc:4a:e6:
54:61:f1:be:d4:1c:32:2b:16:a7:d5:de:99:0c:0a:bf:ce:5f:
c7:22:f6:7f:15:f1:4e:1c:e0:59:38:9f:ae:c7:e9:8b:44:50:
2b:ca:e8:4c:09:43:d4:19:ac:61:d0:12:33:1d:74:c0:d8:b0:
c9:19:69:ce:a8:d7:0b:dc:36:6c:06:71:99:36:f8:55:b4:07:
4e:ad:f9:a6:ca:2c:c4:30:76:e2:1d:63:a0:92:d9:03:71:a2:
c6:81:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:51 2025 by rpki-client