Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: T7hFz+6+SR+dCMePlHXFv7BNUBqWSPSI4wWhHDptwWY=
Subject key identifier: E5:F9:DF:B5:F7:C4:04:50:56:95:2B:EA:6A:20:90:E8:BE:CD:C5:36
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 0194BBCDBB1303CDC770961FCF6A4884CD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 132F
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: kNR3YQgzTw0EEiMD8KfK5qpQLJjFwv+y9qMbqfSEHlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:13:03:cd:c7:70:96:1f:cf:6a:48:84:cd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=e5f9dfb5f7c4045056952bea6a2090e8becdc536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:47:84:54:8b:b8:dc:29:e4:dd:e0:be:3a:
62:d1:89:5a:b8:19:f6:d3:e4:ac:a6:d4:5c:65:23:
cc:65:1f:d6:97:4c:f8:94:d2:e9:95:8e:2b:b6:0b:
82:14:a8:f8:fe:75:30:bb:95:ff:10:3a:ab:0c:ee:
dd:c3:c5:85:ee:9d:42:9f:a0:21:a2:dd:b5:6a:14:
ea:63:aa:c9:da:d7:d9:44:67:61:01:91:c0:e9:be:
bb:b8:a9:e7:a9:6a:9b:7f:98:22:ed:91:57:68:ca:
89:ab:08:f8:2c:ff:65:5b:a8:67:a9:a5:2d:c6:41:
50:bd:de:f5:7f:fc:c4:d1:5d:d0:9a:5c:0d:98:ec:
c8:23:09:38:45:c5:4e:e6:b5:f0:df:80:b6:b3:e9:
5e:cd:05:2e:e3:5a:59:71:97:70:f7:ac:86:3b:e8:
76:79:e1:bd:a5:a7:0f:5f:e9:f0:43:3a:25:8b:d0:
cf:ec:54:20:07:e8:a9:38:51:29:12:88:c0:d8:c1:
51:8f:28:69:e7:03:02:bb:cf:9f:38:d3:59:ff:59:
ce:21:62:98:b4:07:90:cf:16:28:20:bc:d7:e6:59:
f6:dd:63:63:a4:9f:dd:c4:fe:21:b4:bb:f9:1f:59:
67:f7:25:d5:61:4c:0b:50:c9:48:02:0e:1d:c6:46:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:DF:B5:F7:C4:04:50:56:95:2B:EA:6A:20:90:E8:BE:CD:C5:36
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7a:9c:e9:66:8b:30:24:f3:82:ba:d0:56:c9:17:55:53:27:
50:2e:64:44:bc:02:3e:b2:9d:7a:fe:74:66:94:95:bc:28:59:
b7:6d:70:3f:ba:47:63:98:02:c1:f2:94:6f:71:9b:d4:41:e1:
02:49:4e:d9:e8:60:05:d6:62:d2:c1:02:9e:b4:d3:10:45:37:
e0:30:5f:18:ed:c3:48:41:96:3f:b7:e0:b8:97:aa:64:e8:1c:
67:de:d0:69:dc:db:0d:94:11:43:80:67:c6:dd:e0:b8:e4:cb:
b9:c3:5c:06:30:55:3d:b1:62:31:05:37:58:fe:c5:71:a0:ed:
e4:7d:8c:62:65:91:40:14:4f:f7:ff:4d:a0:d8:fb:cf:79:a0:
29:93:3c:f4:75:02:80:8f:1a:d4:b3:fd:2f:28:bc:b1:3b:0e:
9f:ae:b8:04:59:5a:8a:89:d3:ff:67:df:84:4b:b3:8b:7f:b3:
0d:22:d1:2d:0a:21:06:a0:37:7f:19:db:bf:80:3b:c8:e9:25:
b5:70:84:22:2c:b1:94:3c:da:bf:6b:e1:1d:58:fa:6d:61:e8:
f1:57:21:3e:74:f2:b1:51:34:73:8b:66:63:6f:a4:a8:6f:4d:
b2:c5:65:c9:ea:91:25:c0:ea:a3:1b:01:a9:e1:b7:0e:17:52:
18:e4:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client