Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier: nUkRUhFT8pVOwSH9ontSAzcJlFuZhagO2QocjV8I588=
Subject key identifier: 46:7E:99:1F:43:6E:E1:5D:38:1E:37:0F:66:7D:9C:CA:9D:84:24:83
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial: 0194BC731E6245BC1EA1A3F7F234EEC01EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number: 0317
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: vmrSVCRjqAAkl+HSsujzyIS6eSwvHjJAE4ClbteqZUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:62:45:bc:1e:a1:a3:f7:f2:34:ee:c0:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=467e991f436ee15d381e370f667d9cca9d842483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:d4:1c:ef:ef:a4:c5:ed:f6:05:50:92:9b:
4c:9f:54:09:80:2f:18:ab:34:ca:f8:08:7e:e9:62:
6f:1f:c3:e0:f5:ba:e3:91:ee:c4:39:77:0e:c8:d3:
71:c4:45:83:1b:d6:28:02:a8:fa:a1:82:e0:65:11:
50:b7:90:6c:14:fc:9d:0c:c4:52:c0:af:42:ea:7e:
0b:21:e1:9e:df:54:f3:6f:fa:4c:ab:b9:f6:68:22:
b1:a4:fb:61:18:17:25:1f:ac:70:85:d3:5c:51:88:
33:d3:b3:e4:9b:1d:61:2a:ca:a7:72:74:47:3f:38:
0b:dd:32:89:c6:91:26:32:27:e3:bd:83:e6:be:73:
1f:1f:28:0a:e5:8b:29:28:a3:8d:ea:2e:6e:1f:78:
3a:27:bc:22:5d:7c:c4:70:a5:64:46:61:52:85:35:
01:1b:10:b3:e7:af:7d:e8:1b:26:7b:64:25:98:fe:
e8:e2:d7:f3:b9:13:5e:d9:57:b6:f7:88:19:5c:72:
b0:a2:85:2a:8d:46:98:88:07:d4:aa:96:ca:32:fa:
a0:69:b7:93:09:8b:49:82:4d:f8:61:00:97:93:10:
08:42:48:2e:9f:e7:3b:8b:64:e2:08:5f:78:1f:84:
b8:16:97:8b:15:eb:0f:c4:0d:7b:ae:eb:99:c5:41:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7E:99:1F:43:6E:E1:5D:38:1E:37:0F:66:7D:9C:CA:9D:84:24:83
X509v3 Authority Key Identifier:
keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1a:15:f0:5c:1d:32:ae:bb:40:48:46:03:18:bb:e7:01:ec:
6c:7e:42:88:1a:70:a3:51:be:77:6a:68:68:86:c0:0b:05:f5:
e6:5d:2d:78:06:31:4f:f7:db:13:2d:15:3d:2d:ff:67:74:c7:
91:ce:34:a2:f3:fe:55:fb:51:8a:72:4d:69:8f:97:b3:0a:aa:
c7:64:19:62:6e:93:e1:f4:11:28:5c:08:ae:d6:3d:15:ba:a3:
ba:28:88:4b:1f:11:b5:31:fb:0c:49:79:2a:ca:38:dd:3a:0b:
f1:4c:96:b7:f8:a6:b6:f6:6a:ae:3a:e1:1b:4f:e1:e9:a2:e2:
fc:f5:59:d1:43:80:be:bb:47:db:57:0a:0f:50:22:e5:71:bb:
d4:26:3e:bc:58:4d:7a:85:86:58:3e:95:d4:ec:01:9f:39:66:
02:49:c4:a2:c9:f4:14:5a:3f:da:2b:75:0f:98:37:b4:55:15:
eb:8e:b7:50:85:92:53:6e:a1:4d:ae:7c:02:47:fa:d8:a5:f1:
3b:3c:c8:cf:e4:72:72:03:df:78:a3:7f:63:4d:85:11:bc:b7:
44:fd:c7:a2:3f:71:f5:b7:23:79:cf:65:40:40:2f:cb:f3:69:
0b:21:19:f7:ea:a5:b1:0b:36:7e:22:9c:7a:fa:a5:a2:7d:17:
40:5b:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:59 2025 by rpki-client