Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: xbOd+lLRZns57EC2ucaOp0q7YDPAW+izC14sYpMUyco=
Subject key identifier: 2D:64:48:10:A7:25:63:1D:63:D6:40:DE:23:B5:4A:D1:6F:30:7A:6E
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 0194BD85A75C671ED1C9A6444EB0F22F986D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0C36
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: V1VSG4lKSPxIInBH+nKYH1O0j7G0RqPBVPMmo2TWWYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:5c:67:1e:d1:c9:a6:44:4e:b0:f2:2f:98:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=2d644810a725631d63d640de23b54ad16f307a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:37:d3:12:09:6e:26:d1:f5:56:11:aa:76:
87:e5:73:64:58:a9:01:11:ed:40:1c:fb:5a:eb:d6:
c4:ac:f4:76:b8:1c:46:d8:49:2f:ba:7e:63:84:1c:
97:43:62:de:5f:f2:b0:da:ea:2c:4a:9d:c0:ca:26:
af:d2:84:96:75:04:af:01:08:f8:d8:25:82:fd:44:
a9:4c:6d:45:f1:76:e5:e3:6f:46:10:23:df:6a:61:
cd:b1:69:09:a8:99:45:e0:3f:1d:ca:b1:ad:c8:46:
9e:ad:31:80:af:c2:44:9e:97:e5:7b:98:f2:1c:e2:
53:76:2b:ba:7c:de:1c:da:7d:58:1e:1b:2a:ae:7d:
79:de:c3:48:fe:c5:e4:11:72:20:db:fd:23:69:e0:
18:9a:af:43:be:3f:89:44:f0:d8:cb:e6:8b:a0:81:
e6:e9:ed:68:1c:07:74:f8:8b:1b:46:69:bc:c4:6d:
7d:92:dc:d0:42:a7:6d:7b:99:fc:7b:89:37:00:76:
d3:30:a5:06:d4:57:d9:83:0d:dd:d8:19:2e:de:16:
20:00:52:f4:34:af:18:16:85:d0:11:ee:27:cc:42:
d5:9c:e8:0b:90:24:55:0d:57:7b:7c:ec:78:32:df:
c9:02:1c:ff:eb:4c:49:a3:43:c9:8f:95:36:2a:cd:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:48:10:A7:25:63:1D:63:D6:40:DE:23:B5:4A:D1:6F:30:7A:6E
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:59:8e:a7:fb:71:82:fe:2c:eb:43:a5:e9:fe:9e:12:3c:36:
68:35:88:a1:4a:a5:db:ab:63:50:d4:69:c0:c8:b0:82:1e:7f:
08:90:c5:74:00:69:79:22:ae:2e:cd:0f:b9:f3:71:9f:98:87:
59:f5:24:05:2f:29:e7:3b:1b:ca:71:21:b9:b7:3a:9d:d2:66:
73:b5:7a:c9:ad:02:71:39:86:1d:b1:29:01:78:49:d9:f9:2d:
43:3f:f4:87:78:1a:bf:97:82:26:8c:7b:23:1c:5a:8e:74:37:
f6:4e:35:7a:50:bd:bd:ab:6a:48:0e:83:d4:47:ce:64:07:ec:
e1:0a:9b:19:4e:3c:68:11:bb:9f:03:f3:16:9d:22:47:ae:d9:
52:f7:2b:d6:78:2b:99:b3:90:dc:d2:55:6c:f3:a1:19:c9:4d:
7c:4d:50:48:9b:29:36:9f:13:a5:a8:b4:c2:3a:a4:5e:df:da:
ce:d9:2f:c4:c6:bc:e3:44:7e:f3:78:1e:39:37:7a:ce:c3:19:
1a:0b:ab:6c:9d:21:a9:84:53:87:0a:bb:2b:07:04:17:89:22:
91:e3:63:81:a5:a4:3f:7e:2f:7e:ec:af:96:e0:ff:6e:96:71:
99:2e:fa:6c:bc:dd:c4:42:32:5f:7c:dd:42:3c:a8:10:d7:08:
48:d4:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:54 2025 by rpki-client