Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: wVrPPlJHH/QFbBpsdsHiNeHco0SYQx7U0+wztpSCKDY=
Subject key identifier: 03:0D:F0:EA:B0:DF:17:2E:E0:FD:B9:4E:C4:7D:CE:0F:A8:4B:52:24
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 0194BC3C41D1FFA84940EA4AA9CD0692A484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 123D
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: igfAiUFi1k1gWnlmB4WUhVygfx2or/hqFBv72OSd8Ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:d1:ff:a8:49:40:ea:4a:a9:cd:06:92:a4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=030df0eab0df172ee0fdb94ec47dce0fa84b5224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:cf:d4:84:52:80:99:e7:99:fa:d4:6d:0f:
1b:ab:85:74:ab:86:c7:1d:fd:30:3a:ef:0b:92:f2:
74:ed:87:c8:5a:99:c4:65:bb:59:c3:c5:35:8c:93:
b9:40:4a:e1:48:ba:c5:4c:bc:56:29:97:3e:60:ca:
3e:89:72:b7:bf:60:db:5c:c7:b2:01:23:0a:c0:3c:
59:c0:67:4a:e2:b0:48:89:c7:9d:64:98:f7:ac:c8:
b0:6a:c5:2d:d6:cc:91:04:06:ee:dd:dc:1b:fc:36:
1c:92:17:84:02:85:dd:f7:04:27:85:5f:a1:35:f6:
7c:ba:c0:a2:23:05:83:e3:e5:1a:f8:33:0e:65:f5:
53:ad:5e:7e:fd:3f:07:ec:e9:37:ec:fc:b6:b2:31:
bc:66:49:6b:a6:6b:0e:72:11:d4:9a:48:a9:34:ac:
bb:10:b0:4d:e8:41:70:c8:7d:72:0b:e0:53:ad:0d:
a9:30:af:65:52:ae:2e:2d:8b:46:96:fa:fd:3e:02:
a2:c5:c1:f7:fe:bc:36:57:ae:03:be:18:58:e8:cf:
f0:eb:7f:67:b4:88:83:24:1b:79:e1:06:e9:f5:33:
8f:31:57:4b:ff:51:02:75:e7:83:70:20:8e:50:12:
17:1f:5e:c2:af:22:f7:0a:b4:7b:c2:b1:7c:08:aa:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:F0:EA:B0:DF:17:2E:E0:FD:B9:4E:C4:7D:CE:0F:A8:4B:52:24
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:ff:ae:ed:0d:07:19:db:ed:7a:41:4b:69:b9:f1:64:24:
b0:2d:52:2b:0f:fc:59:23:2b:84:1a:04:30:33:f9:c2:c3:9f:
d9:7a:b7:24:9a:8f:4b:63:30:cd:66:74:d9:f5:18:12:d8:18:
d5:af:12:30:1e:26:da:31:f9:67:35:62:dc:75:44:47:42:8f:
00:f1:f9:31:d9:8d:52:a2:b9:68:23:e0:2f:33:ff:fb:af:b9:
38:83:d5:a2:b7:03:20:d0:59:71:10:f7:98:58:39:d9:61:5f:
90:73:c4:a4:ad:44:a3:a8:46:ad:40:f7:bb:89:65:71:85:98:
28:cc:d9:94:cd:7b:ae:54:d0:88:d0:e3:e3:fe:41:81:11:b4:
d9:c0:75:de:77:f5:d2:67:b7:fe:ab:5d:52:78:e9:0c:dd:9f:
f2:cc:80:b7:f9:12:63:fc:f0:ac:2f:13:30:8b:87:da:b8:f0:
ca:b6:af:47:12:6a:b2:1b:db:44:28:d1:85:67:de:bf:0d:bd:
75:e4:2d:4d:6a:80:ca:89:49:79:21:b5:e1:b7:9c:3a:f4:9d:
5a:82:08:bc:6f:cb:6d:f0:7a:1e:c8:82:55:f4:08:99:e2:f3:
43:2d:32:72:ce:d9:5a:88:68:66:55:7e:05:e8:c7:60:31:f6:
a2:99:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:06 2025 by rpki-client