Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json)
Hash identifier: QxCHS1BXQ7J09Hparb6ZL20CRzKtXuej8AX31ttkuic=
Subject key identifier: D5:9B:10:BB:E7:1A:8F:81:33:3D:54:C7:B8:FC:49:42:21:9F:4E:47
Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47
Certificate serial: 0194BC3C871FA3A57060CC87533B9564F0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
Manifest number: 112C
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: sMCJeZmaBDZ/4Yeb3pIIfvOT44HyREHxwMdL7PFGsBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:1f:a3:a5:70:60:cc:87:53:3b:95:64:f0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=d59b10bbe71a8f81333d54c7b8fc4942219f4e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:84:df:9e:9a:1c:19:7c:ce:39:d7:ea:5d:
4d:51:9d:42:4d:a4:a1:f4:2b:17:18:c2:6e:3b:94:
5f:0c:03:ca:f7:aa:91:fb:23:d8:09:8e:37:9a:2a:
04:2a:76:b6:fe:a3:6a:40:df:94:1d:73:88:9c:a2:
29:b0:0e:23:fb:31:62:f0:d4:75:41:ea:65:6a:30:
22:31:69:6e:4c:08:f9:20:3b:3c:0a:05:96:9a:16:
fb:4a:83:9e:01:42:04:b3:31:67:96:76:75:de:15:
39:d6:d1:a3:9c:18:fe:67:8e:b8:52:6f:c2:31:5a:
e7:55:bb:5d:cd:57:9f:71:cb:6f:da:cf:f7:ae:a0:
d8:24:9f:85:68:b6:0d:56:d0:04:33:c4:58:d4:d7:
6a:c2:bc:7e:8f:06:fe:1c:53:c5:1c:4b:14:20:72:
07:48:08:f7:f8:dd:ab:a6:8c:91:c7:d3:52:a8:16:
0b:e6:46:06:d2:e6:27:9a:69:e6:7e:1f:fe:ae:cd:
b0:24:c0:b1:46:2e:c0:9b:79:cb:aa:cb:73:c6:d0:
9b:65:1c:23:b5:c0:f2:9a:ea:2a:62:12:39:96:d2:
68:2f:e1:76:38:e0:ab:0a:2f:be:08:08:e1:07:58:
b6:83:0b:23:84:89:75:bc:c3:72:22:f3:a5:d6:5d:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:10:BB:E7:1A:8F:81:33:3D:54:C7:B8:FC:49:42:21:9F:4E:47
X509v3 Authority Key Identifier:
keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:73:24:6d:99:58:61:34:24:52:2c:3e:30:d4:df:a5:1f:
1f:e2:94:54:12:3e:a0:dd:d7:1f:d4:e5:63:e2:26:04:5b:7e:
2f:41:40:1d:52:51:22:08:74:8f:e9:bf:50:6f:ca:14:46:ad:
27:bc:b6:44:6a:0f:d2:fa:90:68:42:67:7a:7b:4c:58:98:84:
47:08:56:70:91:88:d5:63:19:e7:4e:35:7b:b2:4e:71:83:67:
5b:3a:14:11:5a:ed:77:a1:04:ed:f1:75:d0:b9:44:4e:99:71:
27:81:2d:97:ce:b6:8a:86:81:0c:fd:b4:4c:dc:30:28:4e:b5:
59:1c:f3:66:6d:6f:fe:f9:29:94:51:a5:09:90:03:e8:13:4a:
f4:c6:96:51:82:f8:38:24:2c:4f:bf:68:7b:87:28:35:42:86:
f3:d3:84:f2:8e:1c:be:4e:61:b3:d4:2f:91:c1:ea:51:57:dc:
6b:85:36:b9:b4:ea:90:15:4a:34:e3:82:ac:e6:1e:66:0f:30:
39:e8:c9:5b:37:8c:32:60:14:08:c3:03:eb:d8:c5:76:92:a5:
93:f6:b4:48:e6:7e:91:15:21:46:99:b7:10:fc:3c:af:86:02:
0a:3d:6a:45:76:9f:99:4d:84:b1:7c:88:6d:ec:18:69:54:f0:
58:46:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:08 2025 by rpki-client