Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
File: UBEgdwLICEl5tIPPyG3vdUPgXO0.mft (raw, json)
Hash identifier: QC8o4Ny7rK2pXjMNSd+rS5rhgp2EnR58p0U4x5uIA8Y=
Subject key identifier: E4:4D:08:DF:83:E7:57:E5:74:AB:B8:C6:9F:C4:68:6E:67:F4:3A:90
Authority key identifier: 50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
Certificate issuer: /CN=5011207702c8084979b483cfc86def7543e05ced
Certificate serial: 0194BBCDC05A3210B542CC5A3913DB2886DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
Manifest number: 0853
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: UBEgdwLICEl5tIPPyG3vdUPgXO0.crl (hash: Uh6xp19db+Thf38pBc3NwukQmlH3UcSQz6ma6l9Re3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:5a:32:10:b5:42:cc:5a:39:13:db:28:86:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5011207702c8084979b483cfc86def7543e05ced
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=e44d08df83e757e574abb8c69fc4686e67f43a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:6b:cf:09:0e:c6:cc:d4:77:01:83:16:2b:
29:b5:5f:dd:e0:2d:dc:7c:f9:d4:68:33:fe:dd:66:
94:1b:75:77:ec:ac:57:1c:4e:bd:99:98:87:60:d5:
97:31:27:93:08:1b:4c:7b:3d:65:08:f5:29:9b:18:
c9:09:ea:ce:cc:0b:bf:ee:01:e2:54:a6:db:d1:ff:
0e:f4:c4:dd:95:57:73:42:1f:af:e5:59:56:e2:a5:
21:f6:3b:4f:df:c3:0a:1b:db:3d:44:97:8d:22:4a:
4d:c2:ee:2d:8a:5b:78:09:1e:f5:b0:c4:15:93:d4:
5b:53:00:3d:8d:00:d6:3d:fe:4f:8f:68:15:3f:0b:
8f:8c:8c:66:97:5d:14:5d:32:04:81:18:61:3b:4a:
93:c3:2d:5f:d2:e0:f7:79:0c:76:79:95:f9:13:4a:
c0:de:ba:16:36:d2:b4:02:53:61:a1:47:e1:0a:79:
cc:2b:7c:ff:e3:51:f0:e8:6a:87:3d:59:4f:0c:2c:
33:bd:a1:42:ac:28:d4:0e:90:42:b4:18:5c:b2:5d:
4f:ee:4d:02:9c:94:99:43:d4:df:66:97:bc:22:91:
16:27:a6:ae:da:5b:59:48:e6:68:74:f5:1d:5c:01:
c7:8c:33:83:20:34:5f:90:0a:36:9d:62:c4:74:61:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4D:08:DF:83:E7:57:E5:74:AB:B8:C6:9F:C4:68:6E:67:F4:3A:90
X509v3 Authority Key Identifier:
keyid:50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e1:15:06:8a:fb:1b:5c:cd:69:e0:a2:d0:3a:69:25:24:de:
6d:d6:e5:5f:1b:b8:b0:27:d0:96:5b:aa:ac:d4:73:56:e6:ff:
bf:09:df:f4:a4:de:d3:27:39:8e:05:79:25:3f:3b:c0:f0:0c:
46:f7:b4:a4:bf:54:48:42:1c:81:51:f3:88:0b:65:9e:5f:d7:
18:20:d4:1d:dd:34:8f:4e:fa:02:c0:77:0b:03:d0:8c:c5:b6:
f3:7e:8d:0e:44:86:33:30:9b:c0:ea:83:05:33:f2:92:62:61:
d3:3f:11:f2:f4:12:ab:50:68:77:85:f1:54:22:9d:3f:db:4c:
06:52:88:0d:70:b1:91:d0:eb:64:95:a2:01:bc:bf:8b:d1:2f:
9a:46:bc:d9:35:3e:05:79:f5:a7:01:60:ed:03:59:28:ee:19:
01:11:12:d7:f1:41:74:2f:89:59:9f:6e:b4:0c:be:61:c8:bb:
06:b3:4a:f5:46:1a:9e:28:f1:37:11:1b:45:51:02:8d:72:0f:
3f:76:4e:01:d4:88:75:e2:17:20:b4:f3:1e:0e:fe:f1:ad:96:
85:e8:9e:90:93:9e:78:5e:80:bb:18:76:d4:36:b2:ba:b0:29:
6e:6b:b0:4f:31:98:28:f5:28:d5:b0:94:b3:cf:ce:01:f6:81:
c6:2e:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:05 2025 by rpki-client