Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: 9I9ukbhnoW1wqQ1gZOrfH5fCagKG5/4fGcHffjXCHbA=
Subject key identifier: 74:10:45:3E:0F:5E:70:D6:B9:87:AA:1F:B5:2E:98:19:F6:5D:4A:EC
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 0194BBCEF70FADD333AF2D7EAFABD83E6D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 099A
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: st+DuPFok44KbLmNasdl8VYrfzXi+ROb09/BK3Iki5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f7:0f:ad:d3:33:af:2d:7e:af:ab:d8:3e:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=7410453e0f5e70d6b987aa1fb52e9819f65d4aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:c6:cb:3f:df:25:69:64:35:4d:bc:65:02:
ee:01:3b:f6:1a:c4:0e:b2:52:cb:7a:85:69:55:bb:
d5:7d:c6:43:e4:08:9d:59:9e:db:75:be:f8:f7:74:
75:35:bc:ba:c2:6c:4b:f0:8b:9f:ed:40:c3:33:14:
cd:ed:6e:11:dc:e8:80:75:9d:1b:dc:9c:b9:d7:b5:
c6:09:c7:50:03:77:73:67:f3:a5:c0:86:a9:c3:42:
57:e5:04:1d:a1:05:e3:f6:6f:5e:80:3d:86:b4:a0:
34:de:06:6b:9a:df:6e:fc:81:71:b2:fb:ce:34:42:
e5:8b:c1:32:e1:b1:4f:f0:20:74:f8:33:dc:58:2c:
48:82:49:17:19:36:bc:10:99:0d:ee:50:59:20:24:
bd:3a:bd:8e:16:73:0b:70:2b:9f:4f:4c:45:b6:bb:
8f:be:74:17:cd:77:7e:ec:4c:89:92:80:50:89:c1:
27:d7:8d:5a:c6:e8:f3:a6:fa:58:b8:b8:df:d1:e7:
b3:23:27:43:0b:4c:46:e7:24:e7:c7:0b:91:9c:c7:
c9:6a:a1:17:ff:ff:ff:d4:26:4b:f6:f1:bb:11:1c:
c1:ea:8e:cf:8c:6b:3d:92:e7:aa:25:e2:c0:08:dc:
d4:a5:d9:ac:d8:12:66:2d:a9:b8:3f:46:df:66:8c:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:10:45:3E:0F:5E:70:D6:B9:87:AA:1F:B5:2E:98:19:F6:5D:4A:EC
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:46:8f:9d:33:b7:8b:52:c1:d1:b5:2c:0b:6d:5b:02:01:2d:
66:55:45:d5:f1:d5:01:a3:45:56:67:79:3a:b5:61:ae:5f:1f:
4e:a6:d6:22:bb:86:57:38:95:c1:9a:96:ec:7f:4e:42:22:01:
8b:20:eb:17:bb:4b:73:6a:78:9a:8d:f5:04:c1:9a:c5:45:2a:
c5:c5:60:df:f8:e6:6c:5f:65:c5:69:e6:ba:e2:40:94:d8:61:
c4:e9:86:19:fc:9f:19:5e:14:c9:e5:2d:63:f3:d0:5b:45:15:
79:a5:7e:92:86:be:d4:b8:46:61:17:e9:80:94:71:33:ed:45:
f1:6b:a8:73:6c:c4:af:6b:bd:dc:66:73:1e:88:ff:4a:b7:6b:
d7:04:a6:a4:2a:65:4f:af:07:aa:0b:90:28:3d:ff:94:94:0b:
46:93:3c:9b:37:bd:2a:42:8e:36:ee:b6:40:2d:9e:f7:76:27:
0d:d7:10:1b:50:02:36:97:05:bd:b7:77:bd:11:e1:3e:f1:be:
3b:b0:0c:9c:be:bc:a0:44:ed:91:55:1e:ca:6d:e9:c2:4b:a1:
36:b7:4f:1e:36:3e:2d:69:31:e2:c8:02:e9:5c:4c:05:15:ed:
55:84:c7:ce:d1:34:e4:71:04:79:ad:21:d2:90:d5:f6:5e:0d:
d2:e9:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:20 2025 by rpki-client