Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier: VtdWjlJELLA3kQlX14PaLQQlCMGH7+BCn2CfWh9ySdc=
Subject key identifier: 45:92:BF:AE:35:59:92:4C:F2:46:A6:3F:30:85:52:C4:F0:C7:F7:D1
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial: 0194BBCECB496817364AEDE8CC83D404FAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number: 0C07
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: izXW3VKv02K1YVgKh7trXi0jonpgfSkP/K5bJcMRqbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:49:68:17:36:4a:ed:e8:cc:83:d4:04:fa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=4592bfae3559924cf246a63f308552c4f0c7f7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:c7:f1:06:c2:29:a0:50:11:3a:c8:01:a1:
34:ef:07:96:e3:d6:05:73:07:6f:fb:74:4e:2b:8d:
ac:df:4c:46:4f:3d:da:15:77:8c:a0:a4:dd:55:27:
b3:86:a4:14:4d:f1:29:b2:ba:5b:59:c4:4b:6c:08:
76:c2:13:a1:a7:83:2d:07:9e:0e:98:d5:0f:61:6a:
b8:ee:62:25:58:0d:4b:b4:91:33:57:46:61:fa:4e:
89:2e:bb:19:28:18:66:2d:0f:98:b2:09:af:9b:cb:
47:e1:e0:39:02:2e:ba:26:72:96:26:38:3b:cf:49:
4c:d2:d2:b5:5f:e9:52:1c:f2:45:9c:04:8a:60:66:
52:3c:99:3c:4d:81:f1:9e:70:a8:24:bf:84:b1:fb:
71:15:b8:ac:8d:27:0d:f1:c8:cd:0b:40:1a:96:f0:
89:c8:c2:46:69:a2:3a:5f:12:05:51:cc:65:32:d1:
e6:df:bb:7a:5b:f6:c1:a4:06:fa:e4:29:94:a7:60:
c7:53:ae:12:f8:76:d7:0c:1c:47:53:04:64:fc:c3:
64:82:62:f4:0c:a6:75:40:af:33:56:7b:c1:b4:88:
57:72:71:3a:c3:a7:cc:a0:71:40:6a:bf:2c:4a:f8:
7f:6b:37:61:b7:c0:4b:a1:7a:0f:87:3c:c4:bb:27:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:BF:AE:35:59:92:4C:F2:46:A6:3F:30:85:52:C4:F0:C7:F7:D1
X509v3 Authority Key Identifier:
keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:fa:38:7b:88:96:70:c1:d0:8f:6b:4a:fa:b3:9f:da:02:
1e:bc:f2:fb:7f:cf:4f:47:7e:22:b4:9f:42:5a:ce:ec:68:b7:
3c:cf:7f:bb:bf:6e:07:40:ad:06:6d:5a:bf:cc:5b:58:46:3e:
8d:d4:39:a1:bd:2d:b5:e5:1e:fa:93:b1:19:4b:d5:ec:5c:db:
2a:43:ec:3d:dd:7f:57:18:87:ee:2b:9e:2e:e4:0b:31:ec:4b:
be:68:62:de:08:3e:72:f0:77:de:26:c9:81:c9:0f:dc:53:ce:
ce:30:95:40:df:2e:ef:49:53:c7:60:8c:61:56:4f:f4:b0:65:
f9:ff:ff:9f:40:50:18:8b:95:ff:97:1c:6a:85:bb:43:f7:3d:
fa:78:15:0b:18:dc:f8:3b:f9:c6:cc:67:b0:a5:66:57:a5:df:
19:de:ff:55:9f:06:f7:51:c5:c1:4b:ed:53:98:f5:c0:0f:73:
e4:d3:61:c1:57:c9:68:76:93:d7:fe:3a:57:2b:66:b5:53:ac:
50:3e:86:5d:ee:55:e1:38:22:db:13:4f:8f:fa:11:89:dd:57:
5e:cd:ff:70:c5:b8:74:8b:dd:c5:14:ba:bb:cd:83:0b:17:f0:
b2:62:62:3a:1d:ea:f6:5f:5e:00:30:87:da:65:e2:a7:a2:63:
04:51:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:51 2025 by rpki-client