Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: MfroAnbTpqPDC1VZerDQzKcsQhVu07QaSmSkh1eJtNo=
Subject key identifier: B1:47:7D:28:2B:51:F9:A1:5E:A7:A0:39:65:A2:28:62:6D:E6:34:4A
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 0194BBCEDF4D88AED50576599B5EF8318695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 05BB
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: xtZVuBJfQ9pBS0TfM+2kC7N1LzSuwn1uiJgxsstSe3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:4d:88:ae:d5:05:76:59:9b:5e:f8:31:86:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=b1477d282b51f9a15ea7a03965a228626de6344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:64:32:ae:5c:9f:79:60:18:3e:e8:0a:60:
00:a2:6c:9b:69:f7:4e:4f:24:45:41:de:c7:71:3d:
7c:e0:b4:96:00:04:d5:95:db:b5:e3:17:ac:25:59:
14:f0:20:ca:59:0f:ca:de:ce:99:33:5a:2e:f5:a2:
75:58:0c:38:26:84:5a:78:e3:79:76:7e:f4:34:11:
30:f0:a1:c6:0a:b5:36:9d:73:85:65:4a:50:97:df:
01:83:db:2c:5c:07:f3:96:5c:a6:c4:c8:61:34:3e:
ff:4f:1e:0f:d5:21:d6:2c:39:f4:75:15:a1:a5:d8:
2f:c2:ab:bd:9b:d0:98:63:a3:3a:f4:71:6c:29:f4:
a5:36:a6:d7:8e:1f:88:46:b1:90:58:0d:95:34:fa:
9e:80:b4:95:61:34:91:9f:37:fa:8a:f9:88:83:a5:
62:8d:fa:9e:5a:76:8f:72:03:c0:db:09:5e:11:e3:
fe:98:1f:18:c1:50:88:89:99:26:31:5a:a8:4b:44:
b7:89:64:fa:28:94:18:ab:1d:22:5a:3c:a1:90:95:
e2:66:fa:df:2d:c0:29:ed:ba:66:4c:88:9b:8d:61:
d2:a4:d7:38:7c:47:ce:2a:e4:a2:52:7e:cc:34:61:
86:60:c6:6f:65:89:bd:69:c2:d9:34:15:25:cb:74:
d9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:7D:28:2B:51:F9:A1:5E:A7:A0:39:65:A2:28:62:6D:E6:34:4A
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:db:65:74:4f:06:ac:24:50:d9:10:2f:67:04:2f:17:43:5b:
59:ae:b3:c0:7e:24:1a:35:f8:3e:2e:f7:52:da:9d:55:74:d7:
58:b1:b9:6c:33:14:d2:2b:50:e1:c1:8c:c1:ce:e6:c1:6b:65:
7c:8e:ff:99:1b:cb:b9:4f:92:5f:94:84:07:94:32:a3:6a:79:
4f:60:af:bf:0e:0f:05:d0:85:d5:f9:d9:37:28:30:b9:2f:c2:
d1:02:93:c6:aa:21:dc:04:c5:5d:66:13:fb:73:3a:10:65:54:
7a:a8:f0:0c:e7:3e:1f:64:26:b4:ee:e7:12:54:81:21:c1:01:
1a:bf:7c:5c:1c:aa:e2:ed:fc:0b:90:02:a3:95:b3:59:9b:27:
6a:91:5f:5f:01:74:47:c2:79:cf:e8:5b:47:37:65:18:4b:b2:
a1:d9:59:3b:72:04:70:2a:21:95:6d:3b:4f:e3:1c:7b:5e:db:
d5:b6:72:d2:fc:4c:8d:97:71:ad:10:38:a9:64:1f:4c:e3:8f:
40:60:a2:9e:d2:3e:5a:a3:cc:c3:36:18:f1:72:9e:5a:fe:15:
09:19:35:3b:b4:f8:09:69:f2:96:14:ff:db:50:49:00:40:54:
d4:00:8d:e1:e0:cb:a3:d2:c4:00:f7:d7:04:12:ae:9f:17:37:
ec:fe:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:24 2025 by rpki-client