Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File: ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier: uD0Z29KhNJxAxxsKfbAQsJIIbp1jBBAkPsuwKtApjAM=
Subject key identifier: 4F:84:B9:45:17:2D:F6:2E:D4:DD:FC:09:E0:5F:F2:5E:A6:B6:63:F9
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer: /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial: 0194BCA9C01C5BA5542AB129A289A7F2D071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number: 016C
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: +ui83GJgr613qvadUAsPQowrQRs2oxt6i/nfH1d1aAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c0:1c:5b:a5:54:2a:b1:29:a2:89:a7:f2:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=4f84b945172df62ed4ddfc09e05ff25ea6b663f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:6e:c8:59:f7:0c:ee:7d:d6:bc:11:da:d2:
70:d6:c2:41:1b:70:ff:38:56:15:ec:e1:02:00:48:
8b:f6:b0:c1:5f:5b:41:a1:18:a4:e6:31:9b:ef:2d:
db:bd:b5:b5:39:e1:ea:82:c7:ed:f5:ed:66:d8:02:
75:a7:25:e1:8b:e3:a4:3e:37:8a:a7:c0:d0:77:aa:
60:a4:08:55:62:00:80:2c:6f:c7:9f:43:6a:bf:a9:
5e:70:8a:18:f2:26:c0:8e:6f:aa:a6:d1:5d:2a:26:
e3:78:67:85:01:79:0f:a3:52:6f:18:ff:8e:ad:d9:
6f:e8:fa:6d:e7:6e:55:b2:af:f5:a6:f7:a1:c2:bd:
1b:f7:9d:a6:e2:89:d1:35:bd:70:3d:e8:35:f3:55:
45:c5:43:37:5b:73:81:32:6e:48:46:ad:cf:6d:29:
9c:77:f9:f3:ac:55:03:df:c7:74:7a:d2:2f:e3:5c:
dc:3a:af:5e:91:c3:52:d3:df:6a:70:47:08:95:f4:
1c:d4:93:f5:55:df:77:5b:ee:f1:dd:c0:05:9e:6c:
83:16:ee:b8:6b:d4:29:8c:74:f1:09:e4:e6:7c:41:
a0:e4:6e:33:bd:f5:94:10:69:bd:62:cd:be:0c:eb:
5c:45:72:e1:a4:2f:81:cd:a6:e0:52:d0:d3:e8:cc:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:B9:45:17:2D:F6:2E:D4:DD:FC:09:E0:5F:F2:5E:A6:B6:63:F9
X509v3 Authority Key Identifier:
keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4b:c6:32:d1:bc:ee:ca:05:97:27:87:63:97:49:54:32:e8:
f6:74:76:f7:de:d5:34:ef:2c:c8:99:2d:3e:42:16:df:cd:56:
f5:e2:4b:30:46:78:0e:57:cf:96:74:f6:a7:5d:b5:df:75:97:
79:f0:98:80:85:93:cf:61:2c:ae:51:3b:f0:8c:77:08:d3:af:
84:a6:1b:4c:55:ce:ae:4e:6d:3d:26:a4:c1:31:42:ee:20:49:
ac:6d:08:cf:b3:fb:99:7a:e8:84:9f:84:cf:94:9b:60:a1:00:
7c:7e:06:ea:25:55:b4:44:f1:db:df:40:d3:b9:bc:d7:05:1e:
eb:73:a1:94:d3:d4:31:7b:3a:15:b9:58:f8:86:fa:15:0a:d7:
04:6e:ef:d9:4c:67:62:12:a0:0a:85:a6:97:a8:bc:53:1d:4c:
5a:77:27:b9:b3:57:29:b8:18:ed:29:99:f8:61:f7:12:a8:66:
d7:ee:5e:9d:c6:7a:c2:9a:13:8f:4a:a9:d8:6c:73:99:1e:43:
f6:e1:50:16:40:a2:24:66:dd:58:66:85:af:59:58:66:d7:1c:
42:86:60:d0:12:15:b9:1b:d0:5e:fd:be:4a:b4:cc:5f:b3:22:
8d:9b:4b:e8:0f:76:63:64:bf:37:3d:82:83:88:0d:0c:10:9c:
68:d3:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client