Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: 0rjKZZlgiYz0uvuqdzwPMMzAZuRsaOl5rPQyJSHPTPI=
Subject key identifier: D4:B3:48:00:24:B6:5A:CC:77:19:A9:72:D0:E3:D9:DD:73:5E:48:EF
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 0194BBCE56194EA9F5B7656ECEEEBCF0757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 0701
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: dCLMrsUeim55i67P1I8ReyNqfXmhnE7v9yKoo2WCODE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:56:19:4e:a9:f5:b7:65:6e:ce:ee:bc:f0:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=d4b3480024b65acc7719a972d0e3d9dd735e48ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:a6:b8:9e:41:10:56:7d:37:e4:16:7b:07:
fc:de:ce:41:37:93:58:84:31:00:7e:13:71:cc:b1:
60:e5:d7:ce:58:12:a4:9a:53:23:1e:0c:6f:20:cd:
89:a3:92:89:9c:83:e5:f6:bb:c8:2a:73:01:bc:9c:
a3:11:62:6a:e5:bb:17:9f:a2:54:27:ed:82:42:8f:
05:c1:a4:1c:38:d6:da:c4:8c:72:12:73:45:c7:4c:
1c:73:c1:0c:d3:84:e2:d9:d5:98:a9:8a:8e:97:5b:
cc:be:d8:7f:90:b2:8a:1e:8f:dd:9d:8b:4d:fb:6f:
de:7e:e0:16:85:90:eb:fe:87:3c:75:b3:ed:a4:5b:
71:2b:87:5d:0a:ad:9d:44:49:47:fc:3b:3a:2c:71:
8a:6d:d6:23:9d:9d:79:bb:2c:e3:41:43:7a:2d:1d:
06:cf:81:42:f2:a3:a7:1b:bb:90:76:5b:1f:32:c7:
fe:6a:df:ed:f6:7c:0e:8b:3e:4b:c2:04:c9:e5:7e:
93:ec:25:d9:b7:fc:08:4d:90:15:8c:5c:67:c2:5d:
df:68:4b:1e:ea:d9:57:0a:b7:67:bc:cc:a9:31:31:
f4:01:0b:e5:98:b0:58:94:71:69:4d:93:46:7f:c1:
bd:6a:99:ab:8a:1d:00:1b:0e:32:2c:d3:1a:9b:c4:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:48:00:24:B6:5A:CC:77:19:A9:72:D0:E3:D9:DD:73:5E:48:EF
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:66:7f:af:61:1a:c2:08:09:dd:2e:a5:7b:57:32:70:8d:72:
6e:b1:de:3b:ac:99:4f:09:24:d1:d1:b6:bd:59:4b:b5:b2:4a:
0e:da:fb:af:d1:43:36:34:9d:17:80:3d:bc:9f:a4:7a:45:c6:
28:04:b1:77:e1:47:80:d1:c8:56:1a:9d:78:cb:c8:50:16:b6:
34:a9:9f:a0:c4:da:fa:cc:b7:9d:b2:92:d6:1e:e1:1d:d9:24:
b4:01:65:47:f1:73:c9:56:1f:56:6a:9b:12:da:43:a2:1b:64:
a2:ef:9a:05:5a:a2:1a:ec:74:bd:72:0c:41:64:12:8a:a5:3b:
df:44:b9:7c:cd:e5:1c:4a:7f:08:4a:f0:93:44:c0:e2:93:dd:
78:42:63:d7:43:6a:74:a5:20:8a:51:c8:f4:e9:c9:74:97:16:
91:b2:ba:12:c7:bf:be:f7:72:d7:f4:0f:91:47:91:4c:c3:d9:
cb:89:37:29:0f:bd:68:6b:01:01:e1:4e:fe:14:41:8d:c3:05:
66:dd:62:70:8e:59:56:67:26:97:77:ac:c7:f6:3a:f6:37:bb:
f5:e4:04:63:fd:d1:ff:0a:cf:ef:07:36:d3:d0:21:9b:c8:d6:
82:4f:b2:2e:c8:33:73:79:ad:fa:34:bc:83:2a:be:f4:9c:9b:
17:e0:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:38 2025 by rpki-client