Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
File: uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft (raw, json)
Hash identifier: GbxM5KAQcpZSAbu7u3NYYMsIaUvqtZ4DakRwZbaAq2Q=
Subject key identifier: 73:FB:21:29:30:DB:7A:F3:F6:55:4A:45:3D:B0:A9:53:82:F9:36:CC
Authority key identifier: B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
Certificate issuer: /CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Certificate serial: 0194BC3C042BEE9AC57DC72A41C82F9B2C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
Manifest number: 03C3
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl (hash: dC3zorSt+xRHaqnMAJiUsCasrgyrprnwSB0FEpTqjjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:04:2b:ee:9a:c5:7d:c7:2a:41:c8:2f:9b:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88177a9a3469db3acf10a98f6c03931e35515fa
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=73fb212930db7af3f6554a453db0a95382f936cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:dc:1e:dc:5b:8e:4f:cc:34:48:8c:ae:19:
ac:fa:69:39:3a:27:cb:ce:55:7b:f3:c4:32:e5:ef:
3e:0c:f1:2b:c7:92:75:93:23:04:07:2c:6e:e2:f2:
6d:c8:0b:65:0d:0d:6c:57:fd:fe:40:2d:73:3a:dc:
6f:ac:c8:61:ee:cc:fe:e2:3f:2a:0a:78:67:ee:da:
64:30:e8:24:b0:50:d0:2c:ca:97:90:23:ab:fd:ec:
a9:1f:87:fe:cd:3a:6f:2f:28:05:e7:96:ae:9d:ca:
32:e3:08:e3:ca:9a:5b:da:f6:85:cc:98:d8:03:33:
8c:e5:cd:28:5c:96:3a:43:f1:ac:1e:4f:89:9c:23:
18:51:84:3c:05:a2:3d:f0:b8:34:c5:42:22:73:a1:
19:0d:7a:c3:09:cd:0f:3b:f7:07:c0:71:c9:66:8b:
76:e3:6c:59:7c:91:6a:33:ac:a9:29:cf:b1:b4:6b:
9e:e6:0d:4b:95:54:27:c6:0b:7c:51:8e:3c:89:e0:
80:f9:26:f3:f6:c8:6e:2a:02:ab:73:30:69:6c:0b:
7d:06:9f:b1:25:48:95:f9:03:e8:3e:eb:44:f8:57:
bf:40:3a:36:d6:68:39:28:b2:29:86:3f:6b:5c:1a:
d7:26:70:0b:1b:f6:4d:6a:48:e5:ad:40:34:c9:6e:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:21:29:30:DB:7A:F3:F6:55:4A:45:3D:B0:A9:53:82:F9:36:CC
X509v3 Authority Key Identifier:
keyid:B8:81:77:A9:A3:46:9D:B3:AC:F1:0A:98:F6:C0:39:31:E3:55:15:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIF3qaNGnbOs8QqY9sA5MeNVFfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23c0a9-68b1-40fd-a1e7-eb0885b9003e/1/uIF3qaNGnbOs8QqY9sA5MeNVFfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:e0:37:af:58:d4:ee:a4:d4:25:33:10:80:7a:9a:6b:eb:
42:95:b5:f7:1d:a9:d9:b2:04:7f:c4:7d:81:5c:e2:2e:b4:af:
65:d3:6d:a3:92:58:5a:9b:a4:b5:a1:15:b6:7d:37:fa:a7:f2:
11:92:e6:96:fb:3e:e7:29:87:98:df:32:1a:db:fc:9d:cc:50:
15:c7:1f:ef:b1:02:05:f8:e1:ea:0b:83:8f:3a:f3:20:a5:5e:
1b:92:ca:a3:37:f9:5b:ae:1d:5b:22:e1:6b:94:65:d3:c9:08:
ae:d3:c9:cf:d5:b7:0c:2f:d4:f6:9e:5e:b3:12:5b:81:1c:8b:
e8:d7:39:7d:b0:f8:e9:12:43:31:c4:30:a8:79:df:9c:f1:08:
f7:c8:51:c2:cb:00:af:70:1c:23:75:dd:79:44:87:3c:98:74:
43:41:9f:07:91:7a:c8:9e:e0:8a:b2:65:e3:7e:c7:c8:39:8f:
95:6e:d7:de:90:ea:39:a1:8b:61:36:97:0d:ff:e7:e2:5a:af:
42:d0:6a:31:c6:ef:95:e8:52:14:98:57:03:f6:d8:5c:59:03:
b7:10:22:99:56:cf:33:52:50:83:a2:29:40:d7:1d:63:2d:09:
36:be:aa:88:f9:00:3d:c6:b9:5e:d6:b5:23:12:5b:11:c7:cb:
3e:57:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client