Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
File: uvzQImt58j3kemr95RRLGynii1w.mft (raw, json)
Hash identifier: WBxY9NmW6Iqfv+mwqtV18mHYKwqPrQ2YOVfHeTVEjZ8=
Subject key identifier: 2C:7A:53:E5:06:D1:D7:B0:82:8B:36:D0:3D:59:AB:2B:21:CB:C1:D5
Authority key identifier: BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
Certificate issuer: /CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Certificate serial: 0194BC7288938A0D881E7B8B1D06FC80E4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
Manifest number: 0601
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: uvzQImt58j3kemr95RRLGynii1w.crl (hash: eh17u3JFdQvRzn6x2b9bazIv9fPKI02FuDShrEzhWr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:88:93:8a:0d:88:1e:7b:8b:1d:06:fc:80:e4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafcd0226b79f23de47a6afde5144b1b29e28b5c
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=2c7a53e506d1d7b0828b36d03d59ab2b21cbc1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:e5:63:90:43:0b:1f:1e:c0:79:91:52:dc:
bf:06:e2:8c:42:b8:d6:2d:91:e9:c0:79:43:7f:7b:
32:36:18:a5:7a:00:58:0b:2a:bb:b0:56:3c:95:0b:
0f:89:80:b6:1e:37:a1:38:00:ed:f0:20:98:fa:11:
ef:0e:41:35:e0:83:d5:cb:5c:11:ac:72:4a:36:f5:
e4:16:c1:18:b2:f1:80:49:23:ef:71:ec:6b:48:08:
9d:31:a7:ea:da:63:c9:de:ed:64:50:5e:7a:e0:ae:
80:27:e6:f3:be:6c:cc:f9:1f:0d:c6:8e:1b:84:e7:
8b:e0:5f:c8:e5:f0:c9:6a:69:17:df:8b:99:33:49:
cc:d2:21:90:1f:4c:c2:82:ec:6d:13:b9:f8:e4:15:
2e:61:32:01:ee:6d:dc:b5:04:35:1a:3c:fd:89:0f:
e6:75:f6:58:f3:d0:ff:f4:e7:46:4e:2b:88:1b:01:
c3:79:30:a3:73:e4:87:ea:f0:c4:16:76:70:9e:91:
75:07:a6:06:3e:3f:11:15:d4:c4:5e:71:30:1a:30:
f6:44:af:36:8b:0f:04:62:de:05:58:96:1c:c8:51:
08:ae:5c:32:f8:7d:16:83:e8:ae:e6:cb:99:20:5b:
84:85:99:21:d7:fb:0c:1d:ba:92:9d:f2:89:3d:c7:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:53:E5:06:D1:D7:B0:82:8B:36:D0:3D:59:AB:2B:21:CB:C1:D5
X509v3 Authority Key Identifier:
keyid:BA:FC:D0:22:6B:79:F2:3D:E4:7A:6A:FD:E5:14:4B:1B:29:E2:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uvzQImt58j3kemr95RRLGynii1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a12ce-afbc-4583-9773-c1813947e233/1/uvzQImt58j3kemr95RRLGynii1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:73:23:2a:2d:0a:e7:ed:1d:11:05:38:3f:cd:d5:d0:44:94:
e9:5b:82:46:38:82:0c:a9:b4:e6:8d:0a:63:4d:87:c9:7d:ec:
52:22:fa:28:06:0b:b1:7f:69:86:66:a1:4a:01:1f:18:bb:45:
f3:a6:56:ae:3c:a8:eb:62:18:57:6e:83:ca:62:6e:55:37:c4:
13:c6:ab:97:2a:f3:13:69:da:85:75:d8:08:13:9c:03:d5:49:
80:51:bc:19:16:25:99:b7:85:3c:c8:6d:9d:3a:98:39:5a:40:
1a:a8:bd:33:96:a5:32:81:59:f6:d0:01:05:41:5e:3f:f9:50:
7f:42:97:3a:a2:20:76:dc:e4:fc:10:3b:3d:fe:e6:33:a1:60:
79:4f:07:5c:82:d1:c1:36:6f:5c:40:6d:05:30:d6:9f:19:9a:
14:b8:49:17:16:b6:d3:40:90:d4:b2:74:ac:58:0a:86:ee:92:
44:5b:79:fd:6c:f8:64:70:da:85:5d:3b:59:ad:70:de:ee:c9:
34:54:12:30:99:60:1c:01:47:9a:00:4a:74:9d:23:b9:af:f6:
ed:bd:c3:c8:70:22:26:bf:bc:79:d4:a8:ea:b5:01:de:03:04:
e1:e3:54:53:2c:96:d9:54:94:95:c1:70:b6:63:ac:9a:b9:8f:
7d:da:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:01 2025 by rpki-client