Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File: uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier: oJmSwXKEbPChMUXLXDAoa90tFe/Jj46js6RbpISuTP4=
Subject key identifier: AA:9C:0C:FE:89:84:64:9B:C0:2B:4C:B6:53:DD:F6:50:A6:A0:AA:2E
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer: /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial: 0194BD856BC8BDBB6574EAD5695576C4DBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number: 02DC
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: XSy9pmd8AemNUccQdFKXeSAXZEOJQUT/v2BNpKFcLxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6b:c8:bd:bb:65:74:ea:d5:69:55:76:c4:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=aa9c0cfe8984649bc02b4cb653ddf650a6a0aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:e7:46:f8:8c:96:60:8c:81:12:fb:16:bf:
87:19:12:17:6e:9c:19:d1:c4:67:0f:32:72:7f:34:
0f:3d:de:5e:b3:38:70:8a:a2:cb:e5:4e:30:7c:8a:
42:5b:8c:29:17:88:6c:3d:03:2b:c3:58:dc:80:d8:
db:46:87:b9:ad:cd:4e:bf:b9:c9:1f:cc:d9:dc:dc:
a1:f1:40:bc:8c:58:02:86:6c:7d:0d:2a:d2:47:c0:
49:fb:b7:63:80:ae:62:6e:e6:6d:9f:63:29:6c:13:
65:6d:11:58:24:76:41:d5:a6:bc:2e:d8:f7:c5:f3:
fe:46:64:6d:66:25:93:05:8a:1c:55:3b:1e:39:2b:
b7:b9:79:ac:7a:c8:5e:07:76:9c:2b:06:12:37:22:
7c:2d:5b:a0:85:90:af:c1:a4:3b:41:8c:af:c8:ea:
99:86:bd:82:c6:af:7f:96:63:7f:53:4d:4e:c6:85:
a0:72:f0:d4:0e:c4:ec:98:e5:bb:b8:68:4a:9e:2a:
f3:79:30:70:19:10:f5:24:c9:62:88:70:2f:68:1d:
e6:6b:b1:c4:bf:cc:e4:9d:25:f0:e2:87:91:47:47:
89:45:79:5f:ca:ff:62:3d:24:1d:2b:98:c8:1c:bd:
72:16:14:5c:6a:8a:a9:a4:85:d6:b0:b3:72:be:c9:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9C:0C:FE:89:84:64:9B:C0:2B:4C:B6:53:DD:F6:50:A6:A0:AA:2E
X509v3 Authority Key Identifier:
keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:e5:8a:cb:8f:fa:f9:32:5c:d3:7d:0c:44:db:6c:e2:cb:
bc:21:d1:bd:1f:c5:11:c8:65:ef:84:b8:f3:68:5f:ee:04:f6:
12:de:a1:24:2c:70:61:23:25:af:48:46:4c:e3:45:5c:a1:44:
aa:28:cc:5f:7e:b9:95:18:83:71:10:5d:08:8a:38:25:b9:2c:
9b:da:df:84:8b:87:30:66:8e:66:99:1a:9d:f0:ba:ae:ca:53:
ce:74:ec:bf:1f:9e:f4:64:9a:d5:2f:84:ad:aa:ed:45:14:89:
6c:d6:56:54:af:c1:5a:53:fe:fc:37:68:a1:c9:48:c7:df:73:
ca:2e:6b:58:50:51:0a:81:6a:89:f3:44:be:68:cb:80:12:94:
96:64:cd:6c:c9:3b:17:a5:b0:ae:17:0d:ee:17:77:2a:b4:15:
76:1b:b2:cd:7f:10:8a:de:74:c6:40:06:f6:79:a3:31:e3:1a:
6d:de:e9:fd:53:81:16:05:60:50:24:ba:78:7c:f4:61:c2:d8:
27:d8:a3:23:76:b3:a5:cd:04:6d:71:4e:81:39:fe:ba:d5:f1:
72:b3:4d:05:4b:ee:f7:5b:09:99:18:db:08:ed:64:8a:2c:88:
46:9b:28:1e:96:21:27:77:f0:32:a3:84:e1:c8:53:3e:2d:a5:
a9:7f:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:23 2025 by rpki-client