Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier: Zd3DQn625cYiljVNodtlvpAoAiNw+srGvXWRX671cxE=
Subject key identifier: A7:B3:34:36:24:CA:47:1F:68:D4:60:43:0F:A8:27:8E:CB:EF:B1:87
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial: 0194BBCE580CE63B9D675F7576978703FC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number: 066C
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: N+jJM6WcdhXC0Slm1Hf7ZVHwrO7kIuU4l1dT4l8+u1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:58:0c:e6:3b:9d:67:5f:75:76:97:87:03:fc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=a7b3343624ca471f68d460430fa8278ecbefb187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:3c:e1:05:0e:70:1b:dd:59:be:f7:c8:9a:
a9:a4:a8:4f:f2:b6:73:35:98:b9:0e:4a:92:46:60:
79:be:16:18:ac:7a:6d:0a:97:b0:5e:bd:98:2a:27:
e3:c8:23:05:f7:d3:51:e5:17:0b:bf:6a:f8:6c:1d:
7a:7b:02:af:1c:e2:b1:5b:13:8f:32:66:09:ac:d4:
98:b7:f8:6a:d8:ca:dc:60:ca:e7:58:13:1a:aa:74:
2a:7b:d7:1b:42:8c:f4:27:26:39:06:5b:a7:ec:9e:
28:56:74:f5:e5:45:c7:85:9e:fa:4e:ee:16:d8:0b:
73:97:31:65:81:4a:4a:7b:bc:44:dc:d9:cb:f1:d6:
4d:12:68:3c:63:00:e3:9e:ef:66:ec:c2:5d:93:88:
7a:6b:e6:1b:4b:a9:a9:be:90:a5:7c:ab:41:ae:ee:
2b:71:af:df:f8:1e:84:f5:8e:3a:5d:06:5e:c4:6b:
d8:57:a0:62:fa:2f:a8:2a:cb:60:16:b2:8c:38:af:
d2:5f:7c:32:cd:8d:b8:c4:67:27:c8:5b:9b:5d:d1:
13:d5:c4:34:01:49:3e:ae:91:26:75:e7:f6:c2:e6:
0d:9c:e5:ca:04:40:1d:d2:bf:cd:29:ce:41:58:dd:
d2:d8:0e:64:d1:7f:04:50:16:2c:14:c0:b1:85:c2:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:34:36:24:CA:47:1F:68:D4:60:43:0F:A8:27:8E:CB:EF:B1:87
X509v3 Authority Key Identifier:
keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d6:97:4c:24:1b:b4:ba:b5:c8:bd:10:e7:fa:43:33:e8:68:
d4:84:99:0c:a3:dc:f1:23:33:e6:18:bb:74:3c:8a:11:94:b9:
3f:f0:3b:ac:12:d0:13:95:36:e8:cc:50:ff:47:54:73:56:87:
1c:c4:ba:d5:d0:3a:a4:32:ff:aa:fc:d7:3a:6c:1c:fc:cb:ed:
b6:b2:a5:ef:b1:3f:4e:d0:c7:65:92:5d:cd:2f:3b:cf:b2:44:
61:7a:22:74:b6:2d:b1:f9:cc:ba:65:fe:2a:ab:56:39:64:80:
41:b1:3e:c6:8d:8e:e5:c9:b1:4e:79:50:95:ae:a9:95:b9:b1:
a3:19:c8:83:3e:ff:d9:a1:a8:aa:28:a9:c7:44:c7:1d:5a:8a:
10:65:f5:a5:ee:01:fd:0f:fa:d7:86:6b:4e:de:1a:05:45:81:
52:32:55:01:81:ac:c9:5d:18:55:fc:d9:53:03:ca:a8:2f:12:
3a:a4:db:46:3e:e2:47:5d:52:04:84:95:fa:a0:2c:dc:fe:24:
05:14:1a:3e:2f:b8:17:5e:e9:94:33:87:9c:86:06:19:30:0a:
1f:20:19:ed:eb:fd:2a:16:fd:1f:47:dc:2d:6e:93:ca:69:22:
54:94:14:26:ac:b5:a9:86:bb:f2:4d:55:96:a9:7a:0d:e9:01:
73:96:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:09 2025 by rpki-client