Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.mft
File: ufHVsG9XAVVf9YiBVN0UG0iJYRc.mft (raw, json)
Hash identifier: EqEYS+SGO/1cEoyBggkH6ZaSdApDH4Pqw1QT9mzyZSQ=
Subject key identifier: C7:3B:7C:EF:D9:C8:DD:29:27:F1:0B:BA:7F:9E:AD:3D:C3:16:5C:03
Authority key identifier: B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
Certificate issuer: /CN=b9f1d5b06f5701555ff5888154dd141b48896117
Certificate serial: 0194BBCE0500C81ABE9C975A9DE7A13982C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.mft
Manifest number: 1441
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl (hash: HydVRz45Z555cslRWEloJza734uFISe1CYfRDBgsEbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:00:c8:1a:be:9c:97:5a:9d:e7:a1:39:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f1d5b06f5701555ff5888154dd141b48896117
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=c73b7cefd9c8dd2927f10bba7f9ead3dc3165c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:a1:75:b0:93:48:ad:54:7c:2e:9c:95:7d:
7a:af:2e:65:ad:c6:49:39:53:bf:2d:9b:68:72:7a:
71:6c:83:4d:86:d7:cd:ae:ce:60:22:f6:fc:f5:3b:
18:18:bd:46:ca:e7:2e:44:e8:3d:63:20:95:da:63:
0c:e3:78:b4:1f:ea:d2:3b:88:40:c3:ac:2d:3c:e5:
fb:d6:98:94:5f:e8:0d:2f:6f:98:6b:ad:9f:9c:44:
4d:2d:9e:61:47:55:ec:fa:94:31:06:c1:ff:7f:16:
2f:c5:e1:1f:92:6a:08:8c:e9:a4:55:84:38:68:05:
31:5c:c9:1e:1a:7d:d0:6c:b9:c7:14:7e:6f:3b:f6:
c1:53:40:7a:4c:81:6b:22:02:1e:6a:aa:8f:67:aa:
cc:10:63:c5:88:2c:8a:ee:f5:d1:7a:8e:53:78:7a:
90:7d:b9:b1:0e:4b:61:5a:62:7c:f7:3a:a7:b5:3f:
67:81:32:7d:d0:33:0f:d9:77:a6:ad:90:91:9c:4d:
a1:97:28:44:17:1c:ef:34:07:37:7b:58:cd:aa:4f:
30:f8:f8:0b:e2:f1:e8:d2:df:ca:86:fe:9a:46:f7:
fb:b9:bb:c9:b6:93:f1:9b:7a:f7:e3:5d:54:7b:0c:
8f:bc:46:32:5e:43:13:5b:bb:68:1d:5b:8a:3a:7f:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:7C:EF:D9:C8:DD:29:27:F1:0B:BA:7F:9E:AD:3D:C3:16:5C:03
X509v3 Authority Key Identifier:
keyid:B9:F1:D5:B0:6F:57:01:55:5F:F5:88:81:54:DD:14:1B:48:89:61:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufHVsG9XAVVf9YiBVN0UG0iJYRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/caf5ea-626e-455a-8708-f5ca8fa7270d/1/ufHVsG9XAVVf9YiBVN0UG0iJYRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:1f:88:2a:cd:89:57:99:72:d1:5e:5e:3d:45:b9:23:80:
11:43:38:ac:e3:d9:88:8c:23:44:60:8a:d3:11:12:aa:01:fb:
5c:34:b7:89:b1:c3:4f:57:42:d2:0f:e3:cf:6f:31:b0:0b:bd:
7c:5d:f3:d8:9f:bc:90:f1:2e:0c:54:31:35:c8:1d:c0:49:46:
0c:bf:71:8e:d6:e5:1f:9e:d7:06:f8:8f:48:d4:52:d9:a5:2e:
5b:b7:de:21:ba:08:74:4c:c7:b8:e1:06:61:9d:a3:32:02:39:
fc:67:a4:46:27:9e:98:48:e8:52:38:59:51:90:ed:9c:1d:d0:
97:e8:45:2f:e9:90:0c:f4:36:b6:13:19:23:37:5a:8d:eb:29:
c8:c9:d2:7e:c7:75:4a:9c:ec:3f:55:32:12:98:52:62:59:48:
01:96:2e:32:dd:90:4d:cf:87:7b:7c:28:80:b9:37:33:fe:62:
32:87:03:db:90:60:4c:40:c5:f9:70:02:a5:a2:2f:de:2f:bd:
07:f7:51:93:94:7b:dc:30:b2:49:c6:26:b7:a0:50:1f:c2:c6:
11:9b:df:0c:1e:67:78:0a:60:8b:1a:2b:0b:57:72:c2:b5:6f:
73:cc:6e:d4:5b:11:a3:65:3f:84:65:07:bb:91:fc:e0:40:9c:
79:a1:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:19 2025 by rpki-client