Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
File: UGG999pVZ22XGIK-7pAhvF-zFy0.mft (raw, json)
Hash identifier: BsMvU9qKA7dbiK+jGjVIeKr0fFZ3rmBYBw9KpIR/ASs=
Subject key identifier: FA:E5:96:BC:4E:5B:5D:54:D2:7D:33:FC:DD:D3:B4:74:98:05:A6:76
Authority key identifier: 50:61:BD:F7:DA:55:67:6D:97:18:82:BE:EE:90:21:BC:5F:B3:17:2D
Certificate issuer: /CN=5061bdf7da55676d971882beee9021bc5fb3172d
Certificate serial: 0194BCAA0CDF224EF861F868FFAA8965BF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGG999pVZ22XGIK-7pAhvF-zFy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
Manifest number: 06E1
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: UGG999pVZ22XGIK-7pAhvF-zFy0.crl (hash: 83qABKYxO3I/S4dF0OV4cjAftfL6Tx16AI5gJo5kBPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:df:22:4e:f8:61:f8:68:ff:aa:89:65:bf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5061bdf7da55676d971882beee9021bc5fb3172d
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=fae596bc4e5b5d54d27d33fcddd3b4749805a676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:b9:6a:c8:43:45:28:8e:46:08:cc:5a:c4:
0b:e1:05:dd:02:7e:db:10:d7:dd:db:59:5a:c4:45:
11:21:aa:1a:2a:7a:db:f9:da:ce:80:ff:ec:61:f4:
ea:d2:92:3a:66:50:60:08:1f:89:91:f9:77:dc:5c:
c5:92:5a:b5:14:87:51:46:5e:f4:f3:5b:4e:b5:33:
06:e0:fa:60:01:bb:ee:ce:a4:d6:31:82:59:2a:51:
e8:5b:eb:2e:b0:a4:08:2c:68:7e:27:1f:42:10:19:
73:d0:6a:ea:ab:52:d5:65:52:91:5c:b3:89:ff:ab:
3a:a1:60:cc:30:06:71:55:11:6f:9d:62:cf:07:41:
93:5b:86:b0:83:33:e2:5b:aa:e3:df:9f:7b:fb:e5:
ec:46:22:e7:e1:98:76:22:65:96:8e:02:de:e0:d6:
6b:95:66:de:d6:28:fa:a7:96:38:6e:d0:69:f7:bb:
db:b6:ef:c0:1f:6f:fb:0f:16:90:3e:8c:6e:ca:f1:
4b:dc:f0:83:09:ed:f7:bc:e3:d0:9a:54:9a:83:7b:
b1:f9:6e:03:22:4f:c7:04:5c:62:46:f1:97:af:b1:
b8:82:24:fc:69:b8:0f:fe:71:87:a5:d6:0a:09:1f:
bf:e0:67:46:b9:ea:93:c1:6f:30:ec:10:86:c4:ef:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:96:BC:4E:5B:5D:54:D2:7D:33:FC:DD:D3:B4:74:98:05:A6:76
X509v3 Authority Key Identifier:
keyid:50:61:BD:F7:DA:55:67:6D:97:18:82:BE:EE:90:21:BC:5F:B3:17:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGG999pVZ22XGIK-7pAhvF-zFy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/6278c4-64df-4f8f-ad34-68384ffd6e6f/1/UGG999pVZ22XGIK-7pAhvF-zFy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b2:f1:6e:38:f4:f8:84:fc:1f:56:a2:52:48:22:75:69:bd:
37:5c:59:86:31:f6:2d:5a:92:9a:ba:9d:70:df:78:52:b5:6c:
22:a1:18:f5:d8:18:af:37:e8:05:c8:aa:f7:46:6f:c7:3b:8b:
d1:95:d6:64:aa:a7:65:30:f0:4e:e7:92:77:8d:5d:cd:ee:d5:
6f:4f:d8:33:2c:34:2d:70:85:31:92:d6:1b:67:43:c3:90:ad:
a7:be:05:9d:04:aa:ea:04:4e:5f:3b:3b:48:0d:af:29:b5:ee:
ac:2d:9b:9e:9d:11:c9:c7:14:3a:23:bb:ab:fc:1e:3f:94:fc:
4a:2e:27:3c:38:04:5f:94:b6:d6:e6:06:91:e0:a2:08:f5:c6:
b8:c7:54:96:ec:46:89:f9:04:c6:9c:ae:0c:0d:3d:24:a8:13:
8b:01:02:16:d0:4d:99:ff:dc:76:b4:7c:cc:9a:77:b9:a9:55:
60:e9:44:4b:41:4d:a6:fa:f4:98:d1:ba:66:be:3a:30:93:88:
c9:eb:7c:da:d5:74:8b:64:5a:af:b1:f0:96:f7:62:bc:24:2e:
ec:7f:be:c4:41:3e:84:ed:52:d2:cd:49:72:ff:69:f9:42:c0:
03:b6:36:d4:9f:24:6a:cd:5b:02:e0:e8:36:a5:e5:57:c0:90:
39:30:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client