Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: FjU4+urYlKxLkhY3pYpeLPXH7YkJZ7Mkpics/OU/nXo=
Subject key identifier: 31:EF:7E:A4:48:98:A8:61:46:F0:C5:8B:DE:09:9B:4B:EB:67:7D:D0
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 0194BBCEB13731709AEC845E98159792A9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 0E10
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: IJxStmgXZYCZZTBIdnrRDjiD7czRkisiDEkWkgtCm8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:37:31:70:9a:ec:84:5e:98:15:97:92:a9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=31ef7ea44898a86146f0c58bde099b4beb677dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:d5:5a:9f:dd:8f:dc:8a:c8:b6:d1:23:65:
cb:d6:b6:43:1a:e7:14:17:10:54:31:fe:4d:0c:36:
09:f5:d2:b5:fc:84:83:ba:b3:84:b1:ed:9b:29:81:
d0:b7:c4:d7:c4:ef:9e:c1:c1:bf:9b:b4:15:12:84:
9a:a8:63:df:ee:55:56:d5:f9:a8:83:ce:84:18:07:
03:42:e8:1e:01:c1:c1:e7:5b:a4:e7:1f:3f:8d:3c:
66:c3:4a:b7:7a:22:09:7d:2c:6e:85:ed:13:0c:8a:
cb:b9:cb:a9:fc:45:4b:68:65:bc:8e:a4:96:58:79:
70:2f:d0:ae:fb:85:18:61:66:05:71:89:28:66:b0:
04:3c:f8:7b:54:e8:d6:d5:7a:dc:2c:99:55:35:13:
19:6e:97:15:62:cc:23:33:0f:c7:81:06:f0:28:d6:
b0:0e:c1:d4:ce:86:c7:b9:5c:5e:75:0d:fd:8b:d3:
2f:36:fe:59:ff:c0:fb:e6:4b:97:76:5e:6d:d9:2a:
e6:69:1c:76:cb:b8:34:20:5e:df:9d:81:b3:72:43:
4d:b9:a3:e4:87:39:d5:8f:3a:fc:15:35:15:97:ce:
2e:e7:40:0e:59:ac:a7:4d:39:5e:20:90:4f:c5:5f:
7f:6e:46:ee:c7:69:7d:2f:4d:78:74:0c:a7:1f:6f:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:7E:A4:48:98:A8:61:46:F0:C5:8B:DE:09:9B:4B:EB:67:7D:D0
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:dc:f7:f8:99:79:58:c4:cf:cf:fb:a5:75:8b:59:8f:6e:9d:
3f:80:c6:58:30:44:6d:f0:7b:3c:a6:ff:38:57:2e:4a:95:cc:
bd:09:04:dc:8c:84:72:a7:67:92:f3:6f:f7:62:f7:df:64:b5:
5d:87:4a:46:51:2b:ee:ba:95:ea:27:b0:83:70:f1:93:69:92:
e8:19:79:47:07:26:39:0a:bb:cc:3f:36:f2:95:aa:7e:7d:1a:
56:2d:87:d2:f2:04:37:b7:aa:50:25:9d:f0:5f:0f:5e:29:a0:
8d:04:f5:09:cf:74:1b:88:78:93:b7:2c:69:ee:d8:d7:e1:d2:
b2:6c:b6:69:a9:51:21:23:f8:4d:17:98:d5:b7:de:5e:e5:e2:
4a:17:55:99:d3:4d:e6:35:c0:2d:ff:03:87:71:0e:7b:ef:bf:
67:cb:e5:c4:93:6d:48:9a:cc:ba:4a:92:22:9f:17:db:8d:1b:
64:57:b8:a0:20:1e:4b:44:c7:96:4e:d8:e6:95:bf:6b:5a:aa:
07:a1:64:ff:96:5d:e9:23:64:c0:9b:7a:30:75:69:cb:8b:40:
df:22:dc:1d:ca:5d:21:66:fd:99:cf:6d:0a:cb:25:6e:5e:fc:
71:1e:4b:5c:74:24:4f:ff:5c:8c:7f:19:86:ce:47:35:16:df:
9d:a4:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:52 2025 by rpki-client