Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: 01EUh3Kb+T6lY1FRNOeoxgoEd4hkGGj4aLxU3YYGhZM=
Subject key identifier: 57:BF:88:1A:EF:8B:FB:1D:91:3B:1C:60:BD:9C:92:FA:E8:AF:24:5C
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 0194BC3C8EDF62BC9427489760090D4E6A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: P9+kbij0P+yIDILHRh5M2vBOYW4OvQiWvZlYV+ql0to=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8e:df:62:bc:94:27:48:97:60:09:0d:4e:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=57bf881aef8bfb1d913b1c60bd9c92fae8af245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:3a:9e:5f:08:76:c4:93:00:56:b2:35:8b:
20:0d:e9:4e:77:c4:eb:bf:3a:c0:2c:ce:d5:2e:80:
aa:11:a3:3f:a3:0f:8a:d3:b2:fd:4e:20:49:38:c2:
1b:f7:3c:cb:b5:7c:84:6e:45:5a:e7:58:46:d0:08:
aa:b3:e4:9a:e8:6c:d8:04:e8:9f:3b:d9:26:a6:e4:
46:67:3b:75:a4:9a:fd:a6:f2:f0:f6:4c:1a:5b:7f:
4b:23:60:be:85:4a:2e:fc:0e:e5:bf:36:6a:ba:3c:
51:74:86:29:a8:77:09:15:53:98:db:3a:9b:55:ee:
45:8a:ed:64:b1:4e:55:92:73:c0:2b:7c:ec:71:47:
a7:b9:0b:85:cd:9b:bc:20:d7:d6:c3:39:d8:8d:c8:
b4:42:a6:cb:1d:be:fd:64:b7:c0:86:89:21:01:0c:
45:3b:fc:d5:96:89:c2:a9:d8:21:51:f3:1b:0b:4a:
f2:bc:25:f9:75:78:da:f7:a6:30:6f:eb:12:09:37:
6e:e9:9b:6c:a6:6d:77:08:e3:3d:d8:22:dd:71:58:
3d:7c:01:51:da:e0:eb:9e:51:6f:2c:d0:47:68:8b:
42:4c:e8:17:c0:9e:46:31:d8:34:bc:2b:58:03:77:
66:05:58:78:df:56:09:4a:c6:ed:67:db:28:06:e5:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:88:1A:EF:8B:FB:1D:91:3B:1C:60:BD:9C:92:FA:E8:AF:24:5C
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f9:e5:77:72:92:7f:57:f8:15:69:e0:7d:e5:3c:9b:24:5b:
aa:7f:fd:6b:9d:ed:be:90:3b:73:28:a7:99:4d:2a:b8:b2:8a:
47:09:d9:00:a4:e5:7d:60:56:76:db:18:73:fa:97:0d:98:e2:
15:d7:ea:19:5a:f7:46:af:46:3e:e9:3d:c8:92:08:eb:e0:f3:
25:a4:96:29:60:55:70:4b:80:9b:16:fe:7f:83:5c:a5:4c:df:
58:b4:1d:6d:04:52:c1:a7:fa:ac:a8:5c:f4:b3:a0:09:90:16:
8c:f8:63:cc:be:a9:40:df:7e:2e:fc:68:13:56:57:28:5a:50:
7a:f7:c3:21:b9:f5:16:8d:d7:89:81:e5:06:d4:d4:28:d7:74:
ee:d0:e2:9f:0d:67:c8:8c:1a:32:09:e6:30:bc:b8:80:94:83:
f6:0e:81:17:01:5a:1e:bd:df:62:4c:cc:58:8e:fd:df:12:74:
ca:1a:35:d5:0e:13:eb:6f:99:c1:b8:01:c4:55:eb:02:9d:3c:
4c:65:47:92:22:68:e3:e8:dd:d5:3b:d0:1e:af:d3:62:29:32:
b9:b1:34:f9:e8:22:20:8d:96:04:92:9c:6a:06:68:74:5b:cb:
2e:18:6a:f5:94:aa:ce:40:b8:1f:f7:cc:58:92:08:5d:10:9f:
b0:81:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:07 2025 by rpki-client