Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
File: uo1nmL3QsriAXUOzRV92c5uUbx0.mft (raw, json)
Hash identifier: 8XmH4tcaVy+UQGEjPvt4F7nNR8EPpihfBzA661z3r3Q=
Subject key identifier: 03:51:19:86:9D:EA:B5:09:D7:EE:C1:DE:B6:8B:03:17:AF:FA:CF:EE
Authority key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Certificate issuer: /CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Certificate serial: 0194BBCE85C6706813339E866E87DF569ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: uo1nmL3QsriAXUOzRV92c5uUbx0.crl (hash: Pvhoir7EekwA8Xm1I+exNy6CPM+lWxtXlU3Poce1uW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:c6:70:68:13:33:9e:86:6e:87:df:56:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=035119869deab509d7eec1deb68b0317affacfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:84:7d:06:60:dd:54:41:22:cb:12:7e:99:
08:8e:d3:1e:13:49:7d:df:0c:13:98:17:0a:57:41:
0b:08:d6:9d:4d:cd:b4:12:f3:ae:97:94:c0:e9:f6:
77:1a:d8:67:d7:4b:94:9f:a8:0d:22:28:46:93:ec:
11:2d:bd:62:91:c8:41:d2:8c:23:0f:b9:67:22:83:
75:50:51:be:cf:2f:83:f5:c5:bc:a1:bd:d9:24:87:
49:6a:8b:73:e4:c4:3d:95:86:cc:57:2a:5c:7b:5a:
55:1e:e6:e6:30:95:53:5b:0e:ee:93:2b:75:b9:aa:
93:d2:a2:3f:94:98:53:eb:e7:53:8e:c9:e2:2d:78:
1e:a9:d0:8a:fe:a7:3e:c3:f3:58:be:7c:b6:cf:e6:
04:1f:c9:71:13:a6:0b:a3:13:91:0f:31:47:62:4a:
e6:ff:fe:4a:ca:44:20:dc:5e:5a:06:c7:9a:83:ea:
fa:f4:19:da:44:7f:a0:af:cb:5b:cd:06:40:d0:84:
9a:47:68:a1:e4:ac:0b:25:8e:23:53:67:d6:c2:6f:
48:fc:6f:e3:c9:4a:0c:f0:7f:10:67:a1:07:07:8c:
94:4c:32:e4:6c:68:a4:0f:b1:7f:69:fb:87:4c:8b:
ae:e5:9f:70:53:e0:33:88:87:33:95:f7:49:b0:42:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:19:86:9D:EA:B5:09:D7:EE:C1:DE:B6:8B:03:17:AF:FA:CF:EE
X509v3 Authority Key Identifier:
keyid:BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b3:3d:9d:55:a8:60:e5:26:9b:7d:28:7d:08:8a:aa:38:4a:
ad:9b:8e:75:de:46:dc:06:af:66:32:19:60:3d:44:5c:76:ab:
91:2c:b9:79:07:7b:63:13:cc:69:14:78:9c:97:91:70:26:8c:
5e:e4:1b:32:43:05:e2:54:3d:cf:77:55:31:d3:d9:f5:3d:36:
91:48:d2:9b:2a:c9:58:9a:58:96:39:cd:28:5f:eb:a7:6d:7f:
6b:b1:17:b2:45:fe:e0:48:8b:cd:e6:33:7e:4e:3b:67:7e:ef:
62:a1:01:3d:42:db:4a:83:72:d6:31:48:5b:1e:f2:54:0d:20:
76:62:49:4d:88:c4:6a:e2:73:ee:d4:48:d1:80:7b:a3:97:48:
f9:e0:f8:bb:ab:9d:22:35:65:a8:4f:89:b3:07:2a:32:e1:62:
9f:e5:88:41:89:4d:8a:7c:f2:65:34:ba:66:c2:cd:6f:1d:47:
da:ee:34:41:2c:fc:be:d3:99:f7:ba:20:8c:ad:8f:e8:65:7b:
e2:5f:03:08:e8:57:e7:d7:a8:52:20:ef:12:c0:13:53:4b:5e:
20:f9:1e:98:7f:36:59:f5:82:64:09:c6:b9:a3:f9:ee:00:2e:
51:49:8c:d7:54:e1:78:13:aa:ee:d9:4f:d9:10:64:0d:db:2b:
0f:b1:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:18 2025 by rpki-client