Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
File: Un0m8LBCyUz2f2JeXY5i4qKudVI.mft (raw, json)
Hash identifier: iL/P/1y95679s66LmJr+igzGA+ZgbKTn49QIh1lyqPg=
Subject key identifier: 62:AF:AB:61:A2:0E:50:C3:9F:32:EA:69:D3:19:AA:77:B7:43:1C:45
Authority key identifier: 52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
Certificate issuer: /CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Certificate serial: 0194BC0529801E0788674BAF62A44F2139A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
Manifest number: 03F4
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: Un0m8LBCyUz2f2JeXY5i4qKudVI.crl (hash: SAVEGTgXn4H+HORUBb95J19x7K5MjTUqsnib6/Wqp4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:29:80:1e:07:88:67:4b:af:62:a4:4f:21:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=62afab61a20e50c39f32ea69d319aa77b7431c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:9c:cf:65:a9:d8:78:89:67:87:ec:43:3f:
40:48:3f:31:4c:4f:82:ca:b3:c4:18:2c:a9:28:75:
9b:ae:d2:01:2c:cd:12:ab:3c:a8:70:b8:2f:e2:a4:
cd:b5:d6:01:07:d8:01:48:9e:95:19:71:85:dc:72:
b5:12:1e:9e:51:4c:20:5d:b9:d3:0f:fe:4c:59:07:
51:ef:5c:69:bf:97:1b:c6:f7:7c:b9:6d:a3:dd:af:
49:48:75:53:4e:b8:8b:61:8a:0a:19:22:42:01:1b:
17:78:2e:15:21:16:78:b8:f1:e3:76:de:c7:50:06:
3b:60:b0:09:fa:00:36:be:a0:ce:3a:f6:3d:78:28:
c7:d5:2e:98:69:74:fb:2c:bd:39:1b:ac:94:c6:f8:
e7:d5:b2:af:2d:3c:3d:22:92:ef:fb:6e:88:41:e6:
71:a4:62:d8:9f:86:30:2c:ab:11:b0:e9:32:4a:d8:
b4:23:0a:4f:42:70:b4:60:c1:b4:8b:40:a1:7c:5e:
d2:82:7a:43:b8:4e:9e:b3:5e:61:8e:b5:7c:57:e8:
1c:9c:c2:77:29:98:82:5a:ac:1a:bb:5d:97:28:87:
fc:84:4c:db:64:2c:c5:19:9f:b0:5d:08:0d:cd:55:
eb:28:e8:6b:7a:54:e4:84:db:19:48:52:04:fb:72:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:AB:61:A2:0E:50:C3:9F:32:EA:69:D3:19:AA:77:B7:43:1C:45
X509v3 Authority Key Identifier:
keyid:52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:84:22:1e:17:d3:ea:dd:58:04:2e:2e:ff:48:86:72:8a:
1d:54:d5:1c:32:78:49:4b:5f:24:6b:66:0b:a3:73:16:04:90:
a8:cc:72:78:f5:23:92:a6:54:0a:49:13:39:42:80:f5:e0:00:
f1:09:c8:1a:a6:62:3c:66:d6:3c:fb:e0:f2:3a:9e:e1:8b:73:
a0:0e:1b:5f:16:89:b2:a0:ea:20:ff:c5:76:50:9b:6e:11:79:
8a:b6:6d:36:4b:80:b2:71:3a:e6:0b:fd:46:52:ac:54:22:ec:
d5:78:53:6d:33:0d:bb:f4:ea:79:c4:dc:5b:b0:05:88:21:8c:
ac:a4:1c:90:17:df:22:e7:3e:f8:1a:e8:38:32:49:a8:a2:fc:
66:4e:e2:8c:f9:2a:16:fb:0e:d3:23:f9:ac:66:16:fd:6c:f5:
4b:10:5b:b2:4a:6f:30:3a:dc:d3:63:7c:81:5e:2e:1c:d1:01:
1f:99:78:7f:3d:fc:e1:08:cd:af:c2:2c:b7:3d:6a:be:fe:12:
f6:08:08:f0:ac:68:66:e2:e7:2f:4d:c9:45:f0:2a:d5:3d:42:
6b:b6:36:38:83:84:31:50:90:e1:09:73:5d:18:48:f8:67:8e:
7e:3d:65:e7:c0:7e:3e:f3:27:32:68:4f:ae:d4:d9:47:0a:ff:
85:4e:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:30 2025 by rpki-client