Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: hLKSzxLdDGxLP2TjSvNI94E5URZ6uVJvx2UMuaITVKk=
Subject key identifier: 84:F4:A9:93:E2:DC:88:C1:1E:72:47:14:01:5F:C1:F0:A2:4F:8F:C2
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 0194BC3C713D1658D001E195A4608170AFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: bvziy/giSZDf+HLZ2OKAtqFrnJLXoTNN44y61k6oaMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:71:3d:16:58:d0:01:e1:95:a4:60:81:70:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=84f4a993e2dc88c11e724714015fc1f0a24f8fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:7b:8d:b5:37:b4:84:73:1c:d5:84:4b:49:
e9:39:00:8c:2d:ad:4a:98:2c:dc:57:8b:f4:2f:9f:
82:8a:45:59:7d:b2:2d:aa:9f:60:22:3c:c3:4e:f4:
9d:b0:71:b8:54:2a:a4:59:61:1a:61:fd:ca:80:9a:
a8:7b:61:67:68:1a:9b:32:05:77:9b:7c:42:f3:c9:
7a:d2:31:02:b0:f4:6d:52:79:1a:f9:1e:b3:5e:2a:
89:7a:57:c5:4b:3d:ef:39:1d:2f:1d:80:1b:54:8e:
be:2d:5c:31:69:fb:7d:f5:d0:52:a3:31:8b:cc:a0:
d7:10:75:aa:d6:f2:d0:a2:f8:8d:df:18:6c:3c:12:
04:0c:6d:20:b1:e5:92:c6:db:2e:14:75:71:9c:31:
4f:5f:0a:5d:f7:2c:bc:80:64:dd:f6:96:49:50:c9:
9e:98:87:a6:93:98:6d:82:23:69:42:66:c8:16:69:
42:b2:a2:38:8e:06:9c:42:71:35:2a:13:ab:33:c1:
68:00:cd:e3:32:76:d7:2c:e6:f3:a3:a3:84:04:dd:
8f:7e:77:a7:9d:1d:38:8a:24:32:08:72:33:77:12:
0d:9e:26:48:99:86:1b:f6:c3:d6:7c:d2:e5:a6:f2:
08:ca:47:57:19:91:ff:17:4a:a8:ef:ee:33:b5:49:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F4:A9:93:E2:DC:88:C1:1E:72:47:14:01:5F:C1:F0:A2:4F:8F:C2
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:1d:44:c8:fe:d3:b2:1e:d0:3e:a7:18:7f:58:95:6a:aa:
18:34:95:f4:04:7e:cb:09:81:47:c2:25:91:ba:82:06:3d:fc:
5e:29:9c:29:63:92:fb:ea:c9:b3:9c:68:d5:c3:1b:51:ab:ba:
f5:3c:6e:c7:1b:68:02:24:51:2e:25:ca:23:5d:dc:90:20:c9:
21:6b:81:37:98:dd:5d:47:ea:94:1f:72:54:e2:cc:07:f0:86:
37:ea:0d:68:26:68:84:9c:9a:83:3e:38:64:cc:10:68:92:42:
c8:86:90:11:26:b9:16:3c:83:56:95:9c:74:b7:33:42:e6:86:
ca:58:04:aa:4f:db:64:59:03:b8:5c:b2:a1:72:2f:9a:5c:60:
b6:5d:43:36:89:77:3d:71:96:33:e0:ab:db:39:90:55:47:8f:
d9:f2:05:33:00:56:84:08:e6:42:46:aa:fd:7f:08:d7:5e:ed:
11:27:d7:69:b1:f4:f3:44:93:7e:6e:fd:df:da:11:50:a2:fd:
d1:e0:3d:6a:5e:04:8f:6f:6a:b8:71:a4:5d:3a:19:ee:d2:57:
40:21:b4:71:31:09:d7:63:e7:eb:1f:16:11:7b:af:b0:c1:ad:
cf:23:99:23:8f:0e:36:28:25:d4:90:76:60:f6:d4:0d:12:1a:
af:cf:9c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:57 2025 by rpki-client