Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft
File: U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft (raw, json)
Hash identifier: bI6MRMJYoK9hq3NtqK4C0GAd1ugBvv2MEQ/Fmt211AY=
Subject key identifier: BB:C5:DF:68:BB:CD:60:7E:C5:95:27:9A:36:6C:D1:4D:10:3B:31:66
Authority key identifier: 53:8B:06:2C:B5:42:6F:00:E6:53:73:EE:F4:E4:CD:8A:1C:27:F6:8E
Certificate issuer: /CN=538b062cb5426f00e65373eef4e4cd8a1c27f68e
Certificate serial: 0194BBCEB7664360AC7C738F8142E55F7510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4sGLLVCbwDmU3Pu9OTNihwn9o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: U4sGLLVCbwDmU3Pu9OTNihwn9o4.crl (hash: xHYaR3FT7Zcb+VHz497uVME/I/6g6FjDRFB5/JJBEBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b7:66:43:60:ac:7c:73:8f:81:42:e5:5f:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538b062cb5426f00e65373eef4e4cd8a1c27f68e
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=bbc5df68bbcd607ec595279a366cd14d103b3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:34:c1:dc:fd:74:19:ce:df:4d:5e:54:63:
36:b9:89:c0:cb:07:07:f0:77:19:37:cc:33:80:64:
6c:0a:93:dc:44:f3:fc:83:5c:f8:3e:a7:34:b3:6a:
16:a2:0a:91:26:c7:f3:1c:a4:7f:f0:02:27:d7:c7:
86:56:7c:ce:2d:2c:3b:7c:03:09:d0:86:5c:5d:86:
5e:5e:5a:ad:ee:a6:42:b4:58:60:94:f4:09:2b:b1:
15:f0:37:97:24:e9:6b:3d:41:e7:18:06:a4:ba:ff:
94:4d:b2:d7:de:f1:bb:76:d0:19:d9:d9:78:73:de:
6b:84:d7:26:7f:fa:b7:8c:e6:2b:f5:02:2c:1f:b4:
cd:87:93:f6:83:d9:4a:c2:64:49:9e:ae:72:f9:e1:
e5:c8:f4:65:7b:fd:73:36:00:9e:ca:59:98:c4:2e:
b4:2d:30:74:1b:dc:c3:51:36:67:c0:cb:05:a0:6c:
76:36:e1:f1:45:72:dd:3c:19:ad:99:29:db:9b:28:
2b:86:70:dd:87:a0:85:bc:05:77:eb:8c:d9:fa:2c:
ba:26:8d:9e:f2:71:a7:25:ea:82:61:c2:dd:e8:14:
53:35:20:62:cb:09:56:2e:ee:04:94:56:77:e7:d5:
a5:98:dc:6d:53:90:2a:a1:3e:58:20:1c:cd:15:61:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C5:DF:68:BB:CD:60:7E:C5:95:27:9A:36:6C:D1:4D:10:3B:31:66
X509v3 Authority Key Identifier:
keyid:53:8B:06:2C:B5:42:6F:00:E6:53:73:EE:F4:E4:CD:8A:1C:27:F6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4sGLLVCbwDmU3Pu9OTNihwn9o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1d457b-40bd-448f-a915-20c8ab92696f/1/U4sGLLVCbwDmU3Pu9OTNihwn9o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:f6:16:c0:c8:be:30:b5:21:59:31:bd:54:5b:04:88:34:
93:fb:c3:1d:d3:fd:7b:f9:00:4e:19:78:05:e3:f9:0b:72:31:
2f:62:34:24:76:22:d6:ca:22:35:f0:b6:a5:82:2d:62:17:e5:
38:5c:03:52:2b:a2:b0:b5:21:dd:07:42:16:8b:c8:ae:82:f5:
28:6c:bb:c2:f8:a6:e8:b0:6a:eb:79:a6:5a:f9:73:ae:26:83:
c8:0b:b1:24:8a:d2:66:63:ba:28:51:cf:0d:07:a1:e8:43:e6:
d3:e0:7f:b0:a5:2e:08:2d:d2:72:25:69:02:5b:3f:70:15:54:
b8:0a:cd:be:0b:23:e3:31:00:35:81:1b:51:cb:18:a9:5d:af:
06:76:ed:eb:fa:ab:ec:5d:13:07:3b:1b:40:ec:6c:2f:bb:ed:
ed:d6:46:e6:05:a4:5c:dd:ea:54:58:0e:7f:22:9e:ae:32:da:
9f:76:13:2c:a9:4d:3b:12:34:3e:d7:7c:97:af:5c:1d:60:15:
51:5c:42:9c:97:ab:f9:b0:25:3a:cd:5a:47:91:76:65:51:29:
ba:7f:73:c6:e0:e3:42:a8:c1:77:84:ca:09:f1:2f:c3:e9:4e:
2f:7d:5f:c5:97:1a:72:bb:7e:9b:d5:79:54:7e:ad:60:8d:1f:
77:b9:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:51 2025 by rpki-client