Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier: B/9Bp1Si/IP6H+ejeqzpyOowElmZiESZHwJIThMZ2EI=
Subject key identifier: BA:DA:4A:D1:4D:78:88:53:F0:D6:96:57:02:64:8B:98:9F:29:2A:15
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial: 0194BD17AB91DBDC84975F7A6DB3A9020927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number: 03CF
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: dESPMJg1rV6zL1jzBI0IO4WoKFigt4YlEJwBwOKf334=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:91:db:dc:84:97:5f:7a:6d:b3:a9:02:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=bada4ad14d788853f0d6965702648b989f292a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:fa:2a:76:81:1a:b0:a3:0a:fb:7d:20:15:
58:1e:e1:2b:0e:ce:aa:4f:94:28:2b:30:ba:d0:bf:
4b:79:a0:72:7a:64:18:4f:36:97:22:8f:bf:03:25:
cb:f7:99:17:49:9c:c2:51:fc:44:17:77:19:22:1e:
c4:58:77:5f:c2:c9:5e:1e:9b:a1:fb:8c:e2:eb:1c:
9f:4a:21:8c:88:bf:a7:a2:dc:fb:29:cd:ca:40:b1:
f7:79:fe:e2:06:01:2b:28:a2:89:be:d2:e7:1e:7b:
14:8d:1c:73:e7:14:9f:5d:0a:1a:0b:dc:9c:1f:f7:
74:1f:49:0e:ee:6c:ef:d8:da:c1:56:f8:dc:31:4c:
33:9a:fa:24:57:2c:3b:18:33:12:d3:7a:28:fe:9f:
04:30:20:93:21:7b:9b:1f:8e:5f:6f:76:19:77:2f:
54:41:5a:b4:ee:b6:28:2c:ef:9d:41:d7:a3:40:e8:
15:0f:62:f1:5e:d4:e8:ed:61:e0:d2:84:1e:b0:3a:
ea:b6:1f:d7:cf:bd:98:79:2b:b4:98:25:29:62:93:
54:ef:02:b8:74:c4:f7:b9:11:e6:96:d1:66:b3:24:
77:7f:51:15:2a:76:68:01:b2:1f:2b:0c:db:43:16:
2f:c3:02:a6:78:6e:d8:8f:3e:63:7c:1a:60:71:a8:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:4A:D1:4D:78:88:53:F0:D6:96:57:02:64:8B:98:9F:29:2A:15
X509v3 Authority Key Identifier:
keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:9f:6b:ca:ce:9b:f3:53:9d:aa:32:b7:ba:4b:f3:d0:1c:
1a:d1:cc:48:56:dc:2c:09:b7:36:bb:81:12:55:ad:4f:48:db:
dd:68:78:7f:33:f0:c1:4f:e8:e5:6d:0d:d3:db:b5:38:0d:d0:
6b:de:10:3a:96:bc:45:95:d8:fc:b1:05:66:b9:38:5f:20:39:
15:74:91:80:e2:6d:2f:00:a4:ee:ef:5a:e6:49:82:be:de:68:
aa:81:05:0e:81:9f:ab:4b:5f:77:02:b9:79:4a:94:95:74:50:
f0:07:d1:26:4d:31:82:14:82:fd:e1:7f:7d:3d:90:2b:20:5c:
26:20:cf:ef:75:27:58:d6:7e:00:f2:bc:20:84:e1:fb:71:17:
21:29:67:6e:b8:b2:a4:d2:71:bc:be:16:a1:87:91:8d:be:77:
cf:5e:20:59:be:61:75:f8:37:49:b5:d3:a9:a0:a9:dd:8c:67:
43:07:b1:80:66:af:34:b3:b2:9d:5d:79:b5:01:ef:fd:c3:75:
63:de:25:63:64:1f:51:4d:2b:93:39:51:01:38:68:d5:4b:41:
0b:c2:28:ca:26:9e:e9:7a:97:1d:31:96:56:75:ae:b5:30:51:
b9:82:bf:d7:2b:f5:1b:0f:42:40:20:ea:bf:36:f9:2e:bc:8b:
95:62:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:18 2025 by rpki-client