Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
File: 1-K4RxAyWYdJFsaDL5DohK1je_UY.mft (raw, json)
Hash identifier: DubztA7YWzaKF1oW4m9N4XESttK0f9BxXABnwtKxThE=
Subject key identifier: 2A:21:A9:73:D3:E5:A9:0C:D3:8E:9A:52:77:20:E5:E7:37:F7:5A:5B
Authority key identifier: F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
Certificate issuer: /CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Certificate serial: 0194BBCDD38E059CA5EFB3B94603037F9A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
Manifest number: 05C7
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: 1-K4RxAyWYdJFsaDL5DohK1je_UY.crl (hash: jnt/UlquXlp8RgeFxeITq896Cs+yAZaSRAhVbwYO+WA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d3:8e:05:9c:a5:ef:b3:b9:46:03:03:7f:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=2a21a973d3e5a90cd38e9a527720e5e737f75a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:7f:3f:60:f1:97:a1:89:4a:3f:0e:de:5a:
6f:37:45:92:5c:77:6d:bc:30:20:f0:6f:a3:35:10:
4c:9e:71:32:b7:07:b6:56:72:56:3f:9a:a2:a5:23:
7e:a6:b0:4a:13:2b:d2:37:ca:e0:df:dd:29:53:4d:
d0:52:9d:91:0d:63:4c:6f:14:39:1f:96:75:55:5e:
10:06:b8:e4:0f:84:f5:b4:85:ab:30:21:6d:55:a8:
22:e2:0c:12:44:77:49:24:47:86:53:99:6c:63:49:
50:a3:f1:81:86:02:51:2c:e9:e0:18:2d:ce:49:4f:
28:1a:b9:df:ae:da:82:8c:31:48:da:dd:84:bb:ed:
92:61:59:93:b2:aa:b6:41:63:8d:78:8f:4a:bf:89:
be:41:1d:2d:31:43:a2:e1:65:bf:cf:41:f2:d6:ae:
8d:61:15:9e:2c:b4:70:c0:ca:49:d4:37:f0:23:f3:
11:77:df:94:c0:83:db:eb:bc:4e:ae:a6:53:d6:54:
26:d4:40:ea:d6:21:21:80:7c:76:96:8a:a3:af:99:
47:59:16:d4:72:d9:02:70:c2:b0:14:97:56:ba:22:
e5:d0:7b:a9:ca:2b:cf:68:39:75:aa:94:2f:5e:5d:
8c:d7:53:ec:ba:58:5d:75:76:56:8e:1e:d5:a3:e4:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:A9:73:D3:E5:A9:0C:D3:8E:9A:52:77:20:E5:E7:37:F7:5A:5B
X509v3 Authority Key Identifier:
keyid:F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:c4:70:36:b3:7b:e8:74:41:77:e9:62:74:53:b6:75:92:
e5:94:d1:57:0d:3e:c4:ab:a2:ba:06:c1:48:5e:33:5a:1e:41:
d6:4b:2b:84:74:cb:d4:f9:a3:0f:a4:6d:fa:d8:89:04:1a:ce:
d2:d7:5f:fe:31:ef:13:be:03:d2:e6:f4:8e:7e:09:1b:32:93:
be:3d:8f:ac:5c:cc:5d:40:c8:56:75:05:7e:b3:f4:ec:95:45:
d6:09:53:1a:c0:e0:8b:5d:bc:d2:a8:67:42:02:62:bc:84:3e:
41:6a:7c:f1:1c:ca:ca:d0:d7:b6:77:13:60:02:4c:c7:b3:b1:
8a:5e:69:e1:d4:29:f3:db:2c:f5:ab:3c:b7:6b:60:2c:9a:21:
fa:6a:c7:51:87:7b:db:e8:0e:74:8a:ef:f6:f2:8b:e5:89:26:
bc:6b:4f:33:59:1e:f0:58:9b:50:56:da:ad:73:bc:95:28:31:
68:f3:90:6e:c6:bb:e0:77:e2:a8:40:a7:9a:e4:51:d2:da:76:
06:96:56:84:67:60:5c:eb:74:d4:69:a6:e7:56:cd:dd:ac:6d:
47:ba:3f:4f:90:85:12:d9:a8:07:26:cd:72:ba:07:cf:86:ce:
6d:8b:5d:da:fa:1d:43:db:d6:1e:b0:15:87:2f:ff:50:97:5a:
38:f9:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:10 2025 by rpki-client