Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: dgrNgHG24Ysu1QA/AKHTGKZnVUbvkQMCAGhXKADji4I=
Subject key identifier: 49:92:8C:95:80:EE:89:1A:33:5B:3E:BE:3F:66:20:8C:25:D0:3F:EE
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 0194BC3BBC7FB38BD38A09C011D0E3713293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 04D8
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: tEIbe1/4GTMHOz/deDh8ppfD3SUC6K1PAFK6bQAGTKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:7f:b3:8b:d3:8a:09:c0:11:d0:e3:71:32:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=49928c9580ee891a335b3ebe3f66208c25d03fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:f1:4a:aa:9d:19:0d:24:10:2d:14:2f:3f:
88:bc:50:28:ae:c8:ac:7e:b2:a8:41:ae:fd:02:09:
cd:85:5f:9d:b2:ae:c9:ff:8b:5c:16:36:69:a0:0e:
f0:cc:76:ef:99:67:52:7c:78:d5:7e:82:c9:70:0b:
8d:50:44:93:2e:99:72:ee:2e:28:80:6a:6a:79:26:
6a:4c:90:0e:2f:12:19:0f:19:41:b2:db:1a:52:1e:
c4:84:c7:f6:ea:24:1c:2f:1e:5c:bb:e0:5f:04:9c:
80:fd:20:f1:be:e7:45:f3:13:dc:bb:3a:77:ee:13:
00:5a:93:ef:c5:c1:af:28:ea:a1:7c:12:31:1b:8a:
66:40:09:95:26:74:39:8b:96:20:c0:2a:5a:f1:ce:
fd:82:9b:0b:02:ed:c1:89:74:2b:8a:12:b4:35:a7:
54:3c:29:98:81:2f:fa:2f:94:14:b5:f6:bf:09:da:
1b:82:9a:04:03:39:25:51:4c:4f:b1:a1:1f:79:51:
25:5a:fa:46:b8:59:78:2a:1b:14:16:ff:04:db:c8:
12:b3:48:be:e5:73:7a:58:1b:4d:7e:52:ed:3a:04:
47:12:18:22:6b:d9:a9:86:03:e7:e7:fa:54:77:e8:
55:e1:53:0e:9f:82:89:66:90:f7:6f:d5:44:6f:39:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:8C:95:80:EE:89:1A:33:5B:3E:BE:3F:66:20:8C:25:D0:3F:EE
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a5:7a:23:23:38:71:e0:b3:a6:93:6f:02:d5:03:8a:0b:82:
30:d8:34:d0:9c:e9:01:43:f7:96:88:97:02:39:43:0d:87:67:
eb:33:35:d7:c7:b1:2a:42:4d:67:6f:fe:ee:b9:54:06:e4:91:
4f:97:a7:c0:75:8c:a8:44:10:cd:46:cb:8f:62:1e:ac:70:69:
12:c7:c4:d9:0f:b7:d4:f1:97:88:1d:67:16:b6:d0:90:87:f3:
68:ee:32:d4:b5:16:a3:90:b9:a0:ef:b5:7d:49:8c:c1:61:6f:
25:fd:55:09:3f:64:46:17:5d:af:b6:7c:ef:5e:1b:57:71:fd:
46:95:10:61:bb:a2:a3:b3:27:6b:15:3d:6c:ac:bb:72:44:37:
2d:95:ee:64:ce:dd:cc:03:92:74:a9:fb:d2:20:10:35:64:c3:
a6:0e:22:aa:6d:30:90:4d:99:27:03:a5:93:a1:09:18:26:17:
25:75:07:0a:d5:cd:bb:a8:c0:15:0a:5a:91:7d:04:b3:90:74:
7f:a8:52:2b:69:8c:63:73:71:ed:75:14:db:a9:dd:ff:11:75:
57:d7:2d:fe:25:d2:19:bc:ab:e7:35:77:f8:0f:bd:52:62:5b:
9c:03:fc:14:e7:3f:52:cc:e4:43:f7:e5:35:d9:fe:53:ba:11:
0b:73:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:06 2025 by rpki-client