Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
File: urOPSeByR4vlU-z_NjXz3Zd1gQE.mft (raw, json)
Hash identifier: aIeUC/o51ZbVCwDfbJ6L7b+PknKniP0vX4zrWKCyZEE=
Subject key identifier: C1:35:2A:D3:0F:59:A4:6D:16:6D:F4:15:97:18:34:36:18:38:90:AA
Authority key identifier: BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
Certificate issuer: /CN=bab38f49e072478be553ecff3635f3dd97758101
Certificate serial: 0194BCAA2BCE750D210E5EE50D96D29058CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
Manifest number: 0E19
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: urOPSeByR4vlU-z_NjXz3Zd1gQE.crl (hash: Z//W3925fIGyDhFE3sqi6ZYQbTK8wOtic760ZFB64jc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:ce:75:0d:21:0e:5e:e5:0d:96:d2:90:58:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab38f49e072478be553ecff3635f3dd97758101
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=c1352ad30f59a46d166df41597183436183890aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:a3:63:78:05:2c:9d:e8:8b:33:ed:39:e8:
9e:5d:d0:52:b2:5f:cc:4e:7e:fc:51:b1:25:11:e3:
50:ba:86:19:f4:c3:e0:18:2f:0c:ea:ec:33:c5:16:
6b:2c:75:09:ed:4c:7c:34:a4:e7:6c:b6:3b:ea:f7:
3a:e8:cd:a2:21:70:b9:02:ee:da:67:c0:9f:bc:51:
fb:d9:d8:3a:d0:07:60:42:61:52:68:4a:1c:41:76:
4b:b6:08:7a:19:d3:8e:26:91:57:f5:cc:e9:50:96:
ed:ef:8c:53:36:a8:f0:0d:04:65:ad:00:b8:f7:0d:
b7:37:26:4f:61:82:0c:d1:29:f4:9e:f1:b8:2c:8c:
d2:c7:f8:93:f2:cb:1c:af:d9:6b:20:ef:5b:93:25:
db:03:b5:8b:cc:d2:86:26:64:02:ed:16:05:be:5a:
15:69:f9:59:de:ce:80:83:1f:16:eb:bb:0b:46:5b:
6d:92:b2:d6:b0:08:a3:29:51:fb:a8:52:67:c7:49:
a8:db:79:f0:e5:50:ab:70:f9:19:68:cb:29:92:8c:
b7:3d:0b:4a:a5:26:73:55:bd:8d:14:96:79:27:d1:
10:dd:6c:2b:98:93:e2:41:6c:da:f5:71:b7:62:f6:
49:d4:f3:f4:eb:5a:66:ae:0c:50:19:82:17:ec:a2:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:35:2A:D3:0F:59:A4:6D:16:6D:F4:15:97:18:34:36:18:38:90:AA
X509v3 Authority Key Identifier:
keyid:BA:B3:8F:49:E0:72:47:8B:E5:53:EC:FF:36:35:F3:DD:97:75:81:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urOPSeByR4vlU-z_NjXz3Zd1gQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/392b23-a5ea-458b-bc38-349b52338dbd/1/urOPSeByR4vlU-z_NjXz3Zd1gQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:65:22:b2:e1:15:e3:77:cb:b5:75:85:4a:fa:46:6c:bf:e3:
2e:d3:b7:1a:ea:64:43:b7:b4:3e:0f:0a:74:65:92:75:4f:71:
b4:a8:58:ac:69:31:36:44:a7:76:ce:ba:62:8e:a6:7e:1b:92:
4f:2a:de:e9:de:4e:37:db:b9:60:e3:57:03:2b:42:e9:9a:72:
32:01:2a:94:ef:a7:ae:9f:58:c1:2c:8d:71:98:54:31:48:ab:
05:a9:01:27:e6:10:7e:28:5e:04:9f:63:00:96:c3:f4:a2:58:
f2:76:03:f1:54:53:fc:f6:bf:6c:e0:49:6b:8b:5c:82:d3:77:
83:df:d5:7a:05:2b:67:4c:3f:ec:fb:b0:35:b0:94:94:23:c1:
2e:d9:ab:ae:5c:10:e5:6e:4f:ed:a0:ea:63:44:01:43:06:9e:
4f:64:d0:ff:aa:1c:21:cc:85:f1:a7:0e:ee:81:f6:17:63:80:
76:6b:6c:bf:ba:04:34:4b:d3:1b:f0:c9:54:9f:97:47:be:52:
44:62:3a:96:34:1b:3c:51:fe:f6:59:be:5d:f1:3c:59:8c:d1:
9b:67:43:82:60:fb:dd:e6:57:26:93:fb:c4:53:b6:c7:89:e2:
f2:43:49:91:69:88:32:3e:05:b7:5f:57:c2:49:66:a0:b2:5e:
60:02:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:22 2025 by rpki-client