Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
File: ulnZ9a887kQgFLc1lhxzuWkmDhk.mft (raw, json)
Hash identifier: TPkX2SnP1ArCZ2PX+1j43EXDMUC/SXy90YITwKdrWb0=
Subject key identifier: 68:75:3B:92:A6:BC:3F:86:FF:DE:63:20:D5:33:A7:C7:E6:01:6B:E7
Authority key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
Certificate issuer: /CN=ba59d9f5af3cee442014b735961c73b969260e19
Certificate serial: 0194BBCDB01F7FDE6E020BCB357FE53F5C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: ulnZ9a887kQgFLc1lhxzuWkmDhk.crl (hash: dK1+OWEaDD2NIVRNXOVnj0QpW7y0aOMXAns2RqERiVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b0:1f:7f:de:6e:02:0b:cb:35:7f:e5:3f:5c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba59d9f5af3cee442014b735961c73b969260e19
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=68753b92a6bc3f86ffde6320d533a7c7e6016be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c8:1b:ef:11:1c:86:17:ff:74:20:14:0b:43:
00:ce:d1:ca:88:f6:c4:fd:9b:bb:fb:7d:30:8f:b7:
70:ef:66:4d:f1:f9:56:d5:40:0d:e9:4d:0c:6f:8b:
e9:ce:4d:c7:d9:ce:06:77:72:6d:27:25:be:4f:84:
a8:ce:cb:61:9b:5c:dc:f4:83:6f:90:8b:5a:c0:80:
fd:72:cd:46:80:d5:2f:bb:d2:1d:6d:11:d0:b9:79:
dc:94:53:2d:ce:61:58:cb:a4:5e:b4:5c:8c:c2:10:
fb:bf:a6:70:32:8c:e0:77:12:89:24:e0:8c:e1:ab:
88:19:6a:c3:d3:a9:a9:2e:d9:de:90:1c:79:c5:b8:
24:c3:bd:d3:a7:33:9e:ca:02:53:5c:6f:f6:e2:77:
7d:91:74:ce:be:9d:7e:58:bb:bb:2c:8d:17:73:e5:
f4:5f:b2:dd:5d:e4:63:f9:01:55:65:d8:dd:06:12:
a1:9b:ee:bc:a1:5a:a6:2b:90:f2:8d:71:4e:99:d2:
7d:6c:8f:8d:b4:0a:e7:65:c9:93:7c:61:c7:08:7e:
9a:0c:5f:3e:27:cd:ad:5d:17:ed:6c:9f:44:b9:ce:
99:e0:06:61:da:4c:3e:10:0b:37:b8:fe:3d:a1:4e:
50:f2:41:85:c7:17:78:f5:68:3d:90:02:e5:91:a2:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:3B:92:A6:BC:3F:86:FF:DE:63:20:D5:33:A7:C7:E6:01:6B:E7
X509v3 Authority Key Identifier:
keyid:BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c5:f3:ea:ad:b5:05:94:20:f6:48:80:ef:9c:79:8e:4d:39:
4f:20:48:db:7d:95:46:e5:82:53:10:d6:a4:dd:14:5c:b3:74:
e7:77:e1:1b:74:ce:10:11:03:5b:9b:04:04:82:89:dc:16:ef:
fb:f6:4e:a6:1c:a8:3d:cb:60:0d:b4:23:0d:41:b7:30:1d:6d:
da:e5:dd:8b:38:7d:24:d4:eb:0c:53:7d:bf:4f:02:23:c2:e6:
fb:f3:ce:a9:36:67:15:2c:51:58:2e:97:40:44:1c:64:46:0a:
55:54:23:61:af:03:1d:c2:ff:ac:6e:c0:f6:13:29:80:e5:35:
bc:c1:0e:fa:75:72:64:07:10:2a:8f:9d:cf:6d:88:6b:62:4c:
80:54:6c:38:71:ef:68:d5:61:a2:9d:0e:06:32:57:dc:09:96:
ba:a2:81:eb:b5:87:1d:b3:21:2e:70:25:a4:55:19:e4:d0:a0:
5e:6e:86:09:98:ea:f5:57:cf:1f:35:3a:10:00:a9:74:86:15:
6f:de:fc:9e:ac:38:8d:82:99:f9:3c:d8:fe:c0:f1:85:01:de:
77:5e:fd:6d:bd:5f:f6:4b:e1:e9:26:56:65:54:82:03:8c:46:
97:d9:d1:50:e7:07:0f:09:52:f1:d7:7d:0c:95:88:6b:b3:76:
13:5e:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:18 2025 by rpki-client