Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: fcefLbJ6TLQU/BIY9HbJXCQzFqRq2DIgcZC7JYBk9lU=
Subject key identifier: 4C:0E:29:18:95:E6:0D:19:20:41:20:EB:69:03:91:02:6A:79:98:6E
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 0194BD17F79DEB89479EFE833C3B315256BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 1312
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: 2VcJFzVDfAwusRihrn7xIjXknfbmgCaMAzadCbbnHo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:9d:eb:89:47:9e:fe:83:3c:3b:31:52:56:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=4c0e291895e60d19204120eb690391026a79986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:e0:65:55:20:68:60:00:c6:40:c9:c7:86:
a9:9a:b2:22:24:b3:8e:13:8d:78:80:4d:28:ed:bb:
c6:16:30:f3:34:e5:7d:14:58:08:5f:05:15:74:fc:
71:70:a5:5b:d9:3f:bb:7e:3b:c6:fc:5a:18:95:4b:
5e:e1:cf:26:77:ef:f2:4d:5a:a1:94:1b:c4:a6:94:
11:01:64:a6:63:f4:90:b7:4a:ef:0b:a0:ed:ef:cb:
15:94:fd:b8:93:db:a5:a9:04:04:65:b3:a1:36:ef:
f1:11:95:0a:0d:23:a3:c6:df:33:c0:09:28:48:e8:
0c:8c:43:fd:26:39:7d:83:57:9a:68:ea:f4:13:b1:
bb:f7:bf:af:fe:ab:9c:ca:c3:fd:79:b2:28:6c:71:
e6:ab:7b:34:12:1a:64:8e:25:6c:02:dc:72:95:20:
13:bd:5a:79:c1:80:ab:15:a7:42:3b:33:83:19:36:
49:62:a9:bb:99:9a:e6:a4:cb:2f:10:9c:13:6f:ec:
e2:f0:2e:e9:5e:d6:6a:f9:86:e5:66:2b:88:30:5d:
c5:93:25:bb:1b:c5:ee:92:b0:e1:20:a9:8f:d7:df:
6e:4f:9c:8f:20:40:19:7b:28:3e:c4:c0:33:e9:6e:
66:2a:8f:a3:5f:7d:5f:c3:bf:8b:86:0c:17:81:93:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:29:18:95:E6:0D:19:20:41:20:EB:69:03:91:02:6A:79:98:6E
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fc:6c:a0:3c:07:aa:b7:8f:29:98:15:31:2e:fd:ba:c1:10:
87:c3:93:e3:8f:58:f8:5c:f7:d1:f6:cc:b2:7c:8f:e7:92:00:
8c:73:56:37:e9:a9:03:55:ce:45:50:17:44:43:95:14:df:63:
33:79:18:b0:0e:34:6a:ed:49:0a:c8:83:bb:5c:39:35:cb:21:
f0:59:ad:13:b2:25:da:be:8f:7e:89:13:00:e6:68:60:0c:3c:
f8:bd:ee:6d:d8:5c:57:0a:c7:e4:96:ee:47:f1:f8:c5:c6:d1:
d3:52:8d:62:05:40:75:a8:99:37:46:29:b2:fd:96:6a:c3:7f:
3a:85:06:15:ba:68:f4:d4:fc:91:ef:a6:ed:4f:2d:f2:cc:30:
f9:5f:b2:ae:f2:12:ac:3c:06:85:d5:58:5c:78:79:83:36:2a:
6e:92:ac:74:36:60:3f:52:df:76:01:6c:ec:4b:f5:ea:82:33:
c3:1b:17:4b:65:08:91:f3:c1:3a:78:ac:5c:b7:b9:ed:99:81:
41:dc:ba:b0:2f:2c:85:69:9b:33:03:79:f2:f2:a4:d0:33:97:
f5:09:d9:c0:40:43:b1:99:d0:d4:8d:d3:03:4b:36:2a:50:1c:
1a:d0:39:7d:1e:c6:13:de:50:89:34:93:c4:4d:30:83:eb:dc:
ec:9c:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:09 2025 by rpki-client