Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: CLhn9pqNq9/KAmgvGCxUohN2ENGXHWq5A4tzwcmYPzM=
Subject key identifier: 97:AA:58:A0:9D:03:C6:35:81:B9:08:B1:CD:D3:FA:51:A8:4B:0E:AA
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 0194BCE0E2583FAB0A96B8FAECDA54BE9E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 04D9
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: aCrl9pk72JBPoytGlx1bVbujDBuWey/e6EI5WRle5oE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e2:58:3f:ab:0a:96:b8:fa:ec:da:54:be:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=97aa58a09d03c63581b908b1cdd3fa51a84b0eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:d8:9f:d1:54:dd:e5:72:8f:63:21:ca:24:
b8:c2:36:17:8f:87:d7:5d:03:6b:d4:5f:ce:30:19:
11:98:0d:20:d7:85:14:eb:90:a5:93:2b:17:fa:67:
66:91:24:e4:0e:de:ec:39:00:14:c0:02:51:2a:c2:
df:5f:a0:5e:e9:4a:b4:42:6d:f5:54:29:21:60:be:
78:a0:15:3f:f3:23:17:b9:21:a6:d8:3c:f0:69:9f:
93:32:a8:7a:ee:06:f5:6a:16:c1:57:37:b6:8c:e8:
ec:52:44:af:e2:9a:d0:e9:fe:9d:42:e2:b2:36:dc:
1c:c3:2b:00:26:72:59:6f:39:7b:31:c7:85:4b:e7:
eb:64:f6:df:ab:d4:2f:e2:5c:8a:0c:ad:a0:0b:f9:
07:7b:2b:44:45:3e:f3:c4:78:d5:e2:2e:71:a2:79:
02:23:60:ef:aa:92:3b:6e:f8:d2:05:37:04:79:a0:
80:f6:ca:b0:00:82:55:bf:23:c6:54:cc:34:0d:53:
fc:9e:06:92:4d:53:1a:2c:1a:70:8e:41:10:fa:96:
f5:a4:6e:27:ec:7c:06:e0:13:6b:ba:cd:11:94:bb:
91:8d:19:30:14:54:be:f8:03:a8:5e:6a:a5:f6:57:
88:de:75:52:31:c8:b9:e6:5f:95:3f:dd:4c:77:0f:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:58:A0:9D:03:C6:35:81:B9:08:B1:CD:D3:FA:51:A8:4B:0E:AA
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f0:ea:e0:2c:2b:bb:bb:e3:f5:32:d9:a2:06:e9:2d:5d:08:
d4:67:bb:dc:41:a4:cf:ae:a5:07:19:c0:9b:02:23:39:49:77:
a6:49:87:df:56:f7:66:38:88:de:48:ab:61:f0:a1:1a:27:19:
13:de:ac:2f:4e:9d:2f:3d:f7:18:40:ba:bc:26:58:da:74:d6:
7b:c0:a7:be:78:5b:3b:5e:a5:ed:3f:f2:66:f2:1f:bd:a5:5a:
69:df:a3:95:c6:ce:10:e0:13:18:99:45:ce:67:c3:d8:af:e6:
a0:ad:7f:63:f7:21:4a:51:d0:95:df:e9:38:48:8f:00:8c:d0:
6d:ac:87:5e:72:0a:1c:66:dd:5c:ab:41:61:a3:56:59:9e:f0:
8d:d8:b5:03:fb:bc:35:2a:f3:37:4a:f5:59:f4:78:35:ba:b3:
0b:7e:e0:a7:3c:6c:18:b4:f2:32:0c:a9:ab:f8:88:fd:01:2f:
6b:d6:d8:18:75:86:64:51:b6:77:cc:25:60:f4:d4:7d:41:eb:
1a:d2:96:0a:9b:a9:6c:eb:f7:51:42:fb:40:d5:72:34:1b:17:
07:f6:74:f2:a3:25:48:e0:4f:b8:63:33:e7:52:d2:95:a4:cf:
e8:fd:98:5b:27:84:7d:60:e4:7a:9b:92:22:f3:78:d8:3e:57:
67:75:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:29 2025 by rpki-client