Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: YgSZCecfnpFAnwRW9JJeSII4sbdehAKMnIwj1yQQlbI=
Subject key identifier: D3:61:58:58:C3:9F:DC:3E:9E:64:7C:F5:57:B2:8F:90:7A:48:1B:AA
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 0194BBCE9627DF0E7613A536EE470F27EA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0AA8
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: pB0n7l6mOVZdpOpfi3Gyhsd+a3Vs1aM+f4bWB83zdCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:27:df:0e:76:13:a5:36:ee:47:0f:27:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=d3615858c39fdc3e9e647cf557b28f907a481baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:3a:78:1f:cc:a7:55:1f:bf:71:0e:a1:99:
9e:01:de:4d:d6:ba:9e:83:be:7e:8a:cd:ad:76:fa:
3d:73:e1:a2:f9:f3:75:40:89:e4:a6:7c:6b:16:05:
ce:24:f5:74:26:54:e7:48:0b:ba:65:3a:ba:f7:46:
91:cf:89:f8:43:7c:53:12:7a:23:3a:40:18:04:1b:
8a:1b:2c:94:ad:d6:48:1c:85:52:21:e1:0e:87:cd:
07:62:c0:1b:96:29:67:b3:29:6f:6a:8b:45:c3:70:
1b:14:45:f1:e1:bc:2e:2f:50:5f:58:86:a7:b6:80:
5a:d6:e4:02:8b:1a:47:e2:87:c2:de:bf:79:e8:f7:
16:9c:c1:3a:b9:37:f3:80:d5:30:76:44:b3:14:21:
9d:f1:bb:36:bc:23:63:92:14:05:8c:94:61:e6:4e:
24:d1:47:7e:cb:0c:32:d0:2f:40:b6:29:e7:0d:7f:
4a:af:99:7d:3f:ee:be:ff:f8:6d:bb:58:36:7e:ea:
5c:86:10:4d:05:66:2b:c1:1a:ef:0a:c1:36:ff:cc:
d3:15:8e:9d:46:7f:3b:90:42:82:57:78:18:f6:7e:
0a:88:57:c6:bc:10:14:5b:a7:2a:72:20:f5:a9:c2:
b0:e6:2c:20:c9:c2:6f:b3:16:83:9b:0c:7c:bf:bd:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:61:58:58:C3:9F:DC:3E:9E:64:7C:F5:57:B2:8F:90:7A:48:1B:AA
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:85:fc:b9:fb:15:7d:33:e3:02:5d:7f:28:45:3c:d6:b0:45:
a7:2d:28:ca:2e:be:6e:ce:e1:bb:32:79:10:aa:4f:25:82:03:
0c:22:31:0e:47:ba:38:27:34:2e:08:a4:77:91:e4:e0:12:81:
13:1b:76:96:55:d5:26:6d:9c:00:4f:a2:18:d5:db:4e:b6:7f:
d4:c0:09:9e:41:01:d8:c7:88:64:2e:2f:1e:24:d0:11:e8:d0:
26:f5:97:4c:88:d8:14:e5:63:75:a5:29:23:e4:ec:94:76:17:
f2:86:97:19:41:04:f9:7d:db:ff:49:e1:0f:1e:54:c4:85:5b:
ec:fd:0b:e5:27:81:59:08:dd:56:04:ef:e5:a8:c2:a6:3b:1e:
06:6d:15:1e:a2:f4:69:ad:8b:31:32:12:ae:8d:d4:0f:79:06:
19:19:b2:4a:48:7d:ea:ae:b1:f3:04:c6:43:38:ec:02:07:97:
8f:6c:5e:3b:55:65:9d:cc:f2:c7:f2:f4:94:e6:27:22:06:ba:
96:2a:6f:f9:68:ee:b8:63:5c:4c:d7:f2:bb:cd:4b:fc:ca:ec:
3a:91:ff:12:70:ba:d6:e5:46:28:6f:37:16:5d:19:aa:89:d1:
f8:9b:12:bd:14:72:4c:ab:3f:a1:ae:78:f3:f0:ea:1f:7d:9a:
7e:3a:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:05 2025 by rpki-client