Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
File: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft (raw, json)
Hash identifier: rZRj6kp2/1JB/o4yJ7INURR6xQVkXSrbzDym6H5G97s=
Subject key identifier: 63:85:62:4B:4E:48:68:A3:DC:2D:5A:56:26:F9:93:D8:BE:D1:B9:97
Authority key identifier: 52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
Certificate issuer: /CN=52f25bd05ac148851fa2a463ad0de070818404f7
Certificate serial: 0194BBCE44ACEA3A25712BDDAC4045778B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
Manifest number: 0854
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl (hash: BGiLukN60y6mKMW7bCOolIv8A4k5u4quypmGFwZHj0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:44:ac:ea:3a:25:71:2b:dd:ac:40:45:77:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f25bd05ac148851fa2a463ad0de070818404f7
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=6385624b4e4868a3dc2d5a5626f993d8bed1b997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:66:f4:2d:0b:e6:2b:d4:1e:ff:ff:46:8f:
72:f8:d2:76:e4:37:bd:72:39:d7:48:eb:2a:82:c5:
47:6a:5f:be:df:e8:9d:0a:3b:ae:b1:d0:c5:2d:df:
72:93:d8:22:4d:51:1e:70:04:d4:a3:ab:4b:30:6c:
49:98:bd:d3:0d:6f:5f:39:f2:8a:73:c8:a2:03:4a:
4a:89:6c:73:87:2d:c8:3c:f3:33:be:e5:e0:00:3c:
13:dd:e9:e2:79:02:7c:86:de:88:4b:8a:e6:ba:33:
19:6a:fa:d7:08:f4:e8:00:35:38:c4:d1:1f:f5:12:
2c:2d:79:1a:75:a4:4b:fc:f0:85:f9:9f:0b:21:6c:
6a:78:ef:94:94:14:d6:46:ea:f8:59:9e:27:55:53:
0b:2b:74:39:a6:63:28:83:2d:c2:eb:c2:2c:3e:47:
98:07:e4:95:b7:44:4c:08:58:fd:b8:02:63:c6:a1:
57:2d:34:5f:63:a5:47:56:bc:07:89:38:cc:7a:e7:
2b:86:6b:a1:51:d1:ca:fc:e8:64:ef:98:b6:1b:82:
e4:c3:5d:41:fb:9b:10:86:ac:35:82:ee:e5:fc:bc:
ec:39:fa:8b:e2:16:a5:1b:94:1a:51:a4:10:31:e3:
82:7d:b9:24:e3:39:53:db:80:8f:ab:9b:3b:38:6d:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:85:62:4B:4E:48:68:A3:DC:2D:5A:56:26:F9:93:D8:BE:D1:B9:97
X509v3 Authority Key Identifier:
keyid:52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:27:03:21:80:dd:59:b8:00:cf:10:79:23:1a:6f:bd:5c:
68:ad:aa:c0:75:d7:a0:71:69:34:c3:c6:d8:7a:f3:70:65:f9:
36:ac:87:8f:51:8c:d6:84:d0:f4:84:22:bf:8d:cc:cd:82:2a:
d2:af:64:a4:d7:db:e4:e7:b7:38:2b:5e:20:ff:46:27:be:5d:
31:b3:04:dd:6a:f3:63:09:bf:3e:aa:15:b4:33:1e:20:4d:8a:
7b:03:c6:ef:7e:10:d0:a4:7f:1d:51:0e:e4:7a:2f:ab:89:71:
43:db:93:bc:05:0b:fa:9f:d0:54:5f:6c:99:f6:24:ff:ce:21:
38:e2:8c:46:33:83:35:d3:cc:67:36:d8:95:c0:16:3e:b2:a8:
cc:0e:f7:9b:ac:a1:b8:1a:22:9c:37:fe:e6:c8:07:db:31:70:
90:39:73:4c:90:9b:01:64:0b:e4:45:f9:ee:d7:af:56:b8:be:
27:e6:71:87:05:f5:5d:ec:c0:a8:6b:3e:eb:e4:86:37:ed:61:
93:ba:57:fc:6b:81:9f:4c:34:e1:31:11:bd:70:5b:69:7a:c1:
9a:5e:0d:17:b4:2a:7d:4b:4a:f4:3e:22:0e:ef:1d:b8:d2:8c:
2c:3b:ed:2f:32:51:84:58:a1:c2:ee:5a:ae:8d:f7:0d:89:c9:
48:35:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:18 2025 by rpki-client