Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: jHf6uJbX5WE+5FtLdQI8v5jCXJd4jUF74BFMOwLse74=
Subject key identifier: D7:3D:56:1F:06:97:8D:B5:02:3B:5C:AF:96:69:6B:0A:5E:EB:DB:42
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 0194BC3C6C6C0C2FB9F936B394658F4BA676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: 7Y1EPc94EQDQPSFXGC22B0k3phN8lOLb4NUC7e8lvgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6c:6c:0c:2f:b9:f9:36:b3:94:65:8f:4b:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=d73d561f06978db5023b5caf96696b0a5eebdb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:9b:bd:c6:7a:2f:d3:a8:1b:e8:ad:6d:25:
cd:41:b3:6f:ff:75:99:40:5e:35:5b:29:65:a6:8a:
06:05:a2:5c:df:01:6f:4d:a4:eb:da:2c:d1:77:96:
a7:ca:e0:7b:bf:92:73:5e:e9:91:59:92:38:b9:2a:
28:a9:e6:ea:52:a4:32:89:44:67:85:b7:2b:49:4d:
c8:10:06:08:c7:e9:03:fd:d5:cd:23:25:56:2d:1c:
fd:74:98:f3:2a:c5:63:6d:f3:40:e8:2a:f8:59:75:
0f:2c:38:fa:76:c8:ed:f1:16:ea:f7:a2:6f:29:6a:
d2:f8:3a:51:e6:0e:a8:68:69:4d:62:0d:33:82:48:
22:25:59:37:17:d8:94:a4:d3:cc:df:7d:2c:e5:aa:
f6:8c:75:6c:79:61:74:d1:a8:a2:79:4c:ac:b4:60:
23:66:cd:e5:0c:41:e8:a9:5e:b4:a5:f8:b8:97:45:
33:4e:54:01:41:a6:9c:c0:fd:c0:5d:8d:34:59:68:
71:c7:c5:d3:84:d8:f1:e2:11:f8:4e:ea:6e:94:5a:
ed:a9:ca:88:79:ef:fc:ef:88:ff:6d:1e:ac:b7:07:
76:bd:b6:bb:a8:f5:e7:98:7e:35:59:06:49:8e:92:
2d:db:57:5d:f6:49:35:d3:0f:59:1b:91:c7:d3:0c:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:56:1F:06:97:8D:B5:02:3B:5C:AF:96:69:6B:0A:5E:EB:DB:42
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d3:4e:01:96:5a:e6:ef:3f:6c:3e:22:20:2e:5b:39:f7:41:
01:d4:55:84:47:82:ec:b5:59:21:d4:0a:0f:d2:94:d9:8f:ce:
f5:f1:62:4a:68:55:d8:2e:64:87:03:26:fa:91:70:2d:3f:36:
eb:0e:00:5d:15:68:cf:7e:20:6b:94:9a:af:17:8e:d4:37:2c:
d8:84:15:a6:25:42:58:2a:d3:d2:6c:7c:9c:d4:84:6c:d6:a0:
c9:2a:bd:0b:f5:98:0c:07:db:21:6c:44:bf:19:96:b4:cd:b0:
72:7c:a7:49:b1:b9:96:c0:56:ee:6a:99:7a:f2:56:67:95:51:
6e:9d:b2:42:84:e7:ab:e9:34:dd:7a:ee:53:00:07:a1:34:87:
88:ee:17:88:df:4b:d2:81:51:07:f7:91:f4:be:30:70:1f:b6:
ba:79:dc:cc:35:a6:3a:c8:de:2a:3f:50:1a:2f:6f:98:30:c7:
18:a5:64:5d:58:a1:59:2b:6b:70:ee:d5:c1:f9:0f:a7:99:7f:
41:f7:d3:fd:da:33:07:7c:b6:74:84:a3:9a:67:d2:cc:83:dd:
7c:82:4b:64:f8:c7:b1:cc:4e:7e:27:0f:95:01:d0:93:14:7f:
6d:62:f8:b8:40:b7:77:30:a3:e6:57:de:ca:e8:00:1f:e3:81:
b3:3c:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:41 2025 by rpki-client