Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier: LKSc/VjHK8lVKjF6NVmAiN5n6a0DnS5PhyznOwEBF1E=
Subject key identifier: BA:F9:AF:57:66:EB:54:27:C3:6A:00:CB:16:D7:70:BD:48:03:B3:EE
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer: /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial: 0194BD4E7A27486F073A4C8F396F3ECA28C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number: 01B2
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: J/RejCYMEycfV3sFhxkA2CmTkESe7d9i3tM2PHayh7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:27:48:6f:07:3a:4c:8f:39:6f:3e:ca:28:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=baf9af5766eb5427c36a00cb16d770bd4803b3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:8f:87:31:3f:91:cc:f3:b3:8f:ea:d6:b1:
9e:e8:45:80:b3:47:ac:54:11:51:3a:0d:78:32:5b:
7e:8e:d1:ae:14:0e:bb:44:06:eb:77:39:1e:2d:2f:
54:d6:a6:fb:30:e1:3e:c5:c6:05:6f:f1:e0:0a:c0:
a6:a8:79:36:db:52:10:9b:d0:d9:07:a4:de:6a:c2:
e0:36:c6:f6:55:a0:5b:24:8a:73:d0:03:ab:cf:93:
18:52:d1:07:12:a5:39:75:8e:df:48:a4:94:9c:bd:
f3:e6:ea:84:2d:f8:93:5f:37:30:1a:a0:fe:98:c5:
79:41:d8:19:12:8d:e7:49:c2:c1:dd:5f:96:e2:cd:
12:fc:1b:1e:c5:74:8b:ad:17:cf:d7:ea:3c:69:ba:
ca:86:16:a3:91:57:21:77:61:2b:44:08:8c:af:ff:
0a:3f:3d:41:87:e1:8d:cd:39:7a:3e:ae:29:d3:df:
b6:c4:72:c6:93:00:ce:2e:64:c1:92:6f:a5:e3:9c:
28:85:2d:dd:31:8c:34:03:38:f6:49:ec:54:e1:6d:
e2:1b:14:bd:ed:c8:6a:16:aa:51:59:e6:84:c7:5c:
3d:e5:df:9e:67:be:73:a6:55:04:0c:ce:e5:b2:57:
8f:61:30:e1:7a:d1:95:b2:0b:39:52:a0:35:5e:e2:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:AF:57:66:EB:54:27:C3:6A:00:CB:16:D7:70:BD:48:03:B3:EE
X509v3 Authority Key Identifier:
keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:55:b4:98:04:01:25:05:fb:45:f3:93:07:4b:f6:d0:8c:
0b:47:d4:45:eb:2f:bb:d7:87:63:42:b8:f8:d6:4e:66:dd:6e:
53:82:7f:55:0e:62:ae:23:37:ce:fa:90:95:26:c9:61:92:61:
85:28:5a:72:ed:09:84:16:76:f8:13:b8:46:fa:52:e8:21:b1:
e9:54:aa:2a:97:62:4d:f4:19:2c:58:6e:22:7f:a2:90:26:8f:
6b:7d:0b:1c:d6:31:7a:ee:ec:9d:51:a5:59:ef:73:dd:60:c6:
26:97:01:40:a6:7a:0f:d6:10:30:13:98:de:13:1c:d1:85:b5:
94:82:c1:d5:81:1a:ff:88:b6:11:a4:ad:1e:d0:d1:f8:41:d4:
7e:de:4b:bb:f1:ae:c5:27:d5:98:71:90:02:08:ec:e9:d6:42:
e0:54:62:c7:21:46:36:4a:cf:5d:e9:31:76:ab:39:36:5d:83:
c9:10:83:b7:77:7a:4a:38:71:6d:48:3b:a0:61:b6:7a:d7:e9:
58:ef:9c:1d:8d:15:a4:5b:61:13:12:b5:ab:0c:6e:ce:25:81:
36:31:cd:a8:fe:41:1d:75:c3:4a:a7:90:eb:ed:af:93:47:a0:
b9:9e:f2:76:12:0a:20:18:b8:01:71:68:09:05:7f:4a:06:0c:
ca:77:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:59 2025 by rpki-client