Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
File: uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft (raw, json)
Hash identifier: 66MjHJLYMO7z8WfcFUeoJFlppikNXJKTP8r9dtsVGS8=
Subject key identifier: 34:25:92:56:F3:6E:F4:36:3C:13:54:CA:90:02:FB:56:95:60:E1:86
Authority key identifier: B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
Certificate issuer: /CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Certificate serial: 0194BBCEF8BDF98F7DDBEA5EEBF0803184B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl (hash: iyyJ1H49ttN7b9cHtfPPJtjwzx4ooZv1W7lbcVVee3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:bd:f9:8f:7d:db:ea:5e:eb:f0:80:31:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88ff86c4717e0e366f290cd0d628afc46a38f0d
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=34259256f36ef4363c1354ca9002fb569560e186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:7e:87:82:25:b4:60:97:51:06:b5:2f:26:
b4:f7:ab:e4:72:a5:c4:bd:9b:a1:64:07:82:c0:bc:
45:91:af:0b:8e:e5:6f:e5:18:ff:a9:98:bc:4f:ab:
49:26:10:5e:43:1e:e0:09:aa:80:14:10:93:26:2d:
35:15:fc:a8:a8:80:e7:e2:b3:3d:2e:f7:e5:f5:14:
9c:54:33:5b:71:d0:57:8a:b8:f1:5d:62:b4:7a:08:
f0:cf:a0:00:98:5f:22:54:45:f4:b6:d6:82:9d:55:
9e:0c:cc:f2:9e:51:89:f4:13:28:ab:75:2e:4a:0e:
9b:e0:22:c8:a7:2d:42:48:9b:7f:43:2e:89:76:9a:
4a:2f:b9:cf:b0:a6:6f:3f:d7:b1:5c:15:3d:3a:77:
07:3f:73:e0:e6:e4:d0:cf:de:63:a1:cb:9c:e2:09:
d6:72:b6:54:d6:3c:09:42:49:16:d8:ec:b7:d4:e5:
33:1e:81:55:9e:25:13:86:24:53:2d:a3:9b:67:bd:
36:89:96:9a:7e:bb:1f:dc:fe:1b:10:c1:70:d5:72:
8e:f9:54:b5:60:c3:b5:d4:9b:b6:e4:96:0b:18:96:
3a:13:4e:f3:6a:88:45:04:80:a6:e2:b5:c5:35:e9:
0c:87:81:45:e9:45:d2:83:ea:b3:e5:0d:e0:e8:ec:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:92:56:F3:6E:F4:36:3C:13:54:CA:90:02:FB:56:95:60:E1:86
X509v3 Authority Key Identifier:
keyid:B8:8F:F8:6C:47:17:E0:E3:66:F2:90:CD:0D:62:8A:FC:46:A3:8F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI_4bEcX4ONm8pDNDWKK_Eajjw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7e7154-c3aa-45b6-8fb0-191d534c97b9/1/uI_4bEcX4ONm8pDNDWKK_Eajjw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a6:dd:27:75:56:97:4f:15:de:88:32:7e:3f:90:8f:14:29:
27:74:73:3f:c9:53:d6:84:c2:57:fa:9c:86:02:7c:68:4d:e5:
c4:d3:d7:6b:c5:63:92:d4:05:cd:f4:da:5c:e1:b9:92:37:44:
78:b7:b2:5e:ef:fe:42:8f:f8:41:91:cb:2b:f0:79:da:a5:2d:
93:52:42:e3:1a:37:35:ae:a7:f8:2f:f6:dc:f7:80:9f:fb:14:
55:34:ef:e9:a8:58:99:c7:d8:72:55:15:d8:2f:0e:7e:41:0a:
21:e9:47:9d:dc:6f:7f:f1:69:e4:5c:eb:c1:a5:a6:df:2b:a3:
28:2d:57:78:20:4d:f4:82:53:5a:f6:ee:e9:55:9a:f6:2f:cf:
5e:61:a4:34:6a:16:f2:d3:f7:7c:40:ad:7e:47:a5:73:a8:02:
3d:99:0a:ce:e7:a7:9d:33:86:21:29:a8:9c:5c:57:4f:b3:a7:
0e:8e:26:c1:51:18:df:5b:08:9b:cc:eb:33:cd:55:8a:1b:be:
88:5e:b2:ea:42:d9:da:58:c9:d4:54:bb:f0:90:b1:d2:6d:f5:
f5:d1:4a:a3:05:40:25:47:f9:6d:e0:3f:13:89:16:66:a6:4b:
29:b4:b0:fc:1c:6d:80:65:ed:92:ae:15:78:36:a5:f8:d8:ce:
cb:c7:f6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:06 2025 by rpki-client