Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: N5/7rO07gk/mVyor8Y/vJQroxxtTwftQL3Sn82PG2Nc=
Subject key identifier: 60:26:21:68:28:EC:F5:59:27:EF:CC:BA:E3:F0:BC:42:56:76:F4:F2
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 0194BD17A885C19E8042B932BAE645506DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0BB5
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: dFKzI6psdmWxeEJLc0lUQQQ5ub3wwFVwDnOmzRP7hk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a8:85:c1:9e:80:42:b9:32:ba:e6:45:50:6d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=6026216828ecf55927efccbae3f0bc425676f4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:95:d6:11:ba:7f:29:9f:8e:bf:47:8c:80:
58:dc:e2:8c:bf:e0:c9:04:43:bc:75:e7:48:70:a3:
15:38:03:cf:ec:b5:0a:c7:16:9e:a8:aa:75:a4:e6:
b6:03:37:a8:b5:f8:5f:ad:fe:49:bc:d3:69:82:d4:
46:94:d6:c1:84:33:d6:ef:be:15:bb:ce:f1:c8:72:
02:67:9e:e9:0c:64:45:1f:8d:b1:2e:a9:90:40:81:
52:d4:85:69:6c:92:4b:59:54:c5:f0:24:89:6c:cf:
13:fa:7e:d5:91:4c:32:62:01:43:5f:8b:24:1d:cb:
17:a5:bf:3c:14:75:f6:c2:d3:23:bb:25:71:45:28:
5c:11:a2:78:10:0e:61:f6:4f:0b:b6:46:e7:c8:5d:
5f:e7:3d:f6:fe:56:43:0c:82:a6:c6:00:77:9d:b2:
d0:20:f3:91:c0:53:6a:8b:a2:f4:d0:b2:84:5f:21:
75:02:fc:6b:f3:c7:7b:db:c3:69:a2:50:75:b0:49:
f3:85:c3:17:65:b3:b5:24:c9:75:53:de:e6:ec:e1:
0e:f0:b2:9f:f8:a1:93:56:b3:2b:3a:db:c0:9c:01:
63:32:c2:18:48:e9:89:ca:b8:58:c5:67:c3:fd:e1:
bf:b3:12:a3:e7:63:aa:1f:51:2c:2c:82:4c:3e:f6:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:21:68:28:EC:F5:59:27:EF:CC:BA:E3:F0:BC:42:56:76:F4:F2
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d3:d3:ff:3d:49:06:ad:31:95:2a:56:36:1f:1d:76:4e:bf:
78:31:8a:b7:79:96:dd:c4:42:9b:e1:78:03:21:16:ec:2e:f0:
6b:b9:f7:19:7f:f2:f1:00:98:34:a9:0e:6a:b9:5e:da:de:fc:
bb:77:e0:10:ab:19:b3:4c:9b:8d:f9:b5:5b:18:15:fb:b8:74:
8a:5f:dd:26:ce:53:3c:16:7e:bb:62:71:78:15:03:8e:23:50:
af:e7:8e:10:4d:36:1a:70:98:ca:01:f9:cf:35:fa:1e:45:a4:
1a:b0:36:ea:3a:ff:47:f0:58:d9:02:d9:62:02:f9:82:94:b1:
d9:5f:6b:41:62:7e:9a:cb:95:60:2a:e3:7e:31:7a:a5:4b:9e:
eb:aa:24:48:a1:24:6c:c3:89:1e:c4:8b:db:93:af:79:6d:ab:
b6:22:77:4b:29:84:13:c5:31:93:f0:0a:15:a5:61:c7:0e:09:
b7:1c:7b:97:cc:98:c5:e1:3c:b8:83:cf:bf:57:eb:1f:d2:89:
e9:fa:bd:65:fb:06:63:09:18:cc:1d:a6:a5:c8:e5:e6:8f:db:
bf:3e:61:f5:65:41:f6:a0:ab:48:17:ec:27:de:3e:3f:63:be:
81:84:58:63:86:6f:0e:a4:70:8e:cd:03:df:9c:5a:eb:a9:db:
3f:39:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client