Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.mft
File: uYt5g2r-dTcKaAuxNsG5m8iNRRk.mft (raw, json)
Hash identifier: UwGxWCI0o3sS7WTOWIDfGo0x2oD+sO7u5yX+MYC6SeA=
Subject key identifier: 01:F6:78:25:86:0F:BC:AA:76:0C:1C:FF:E2:53:4E:E4:48:CE:3B:F0
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 018C7C95F2FD02527ABC909BF42BC305A59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.mft
Manifest number: 05EB
Signing time: Mon 18 Dec 2023 11:00:50 +0000
Manifest this update: Mon 18 Dec 2023 11:00:50 +0000
Manifest next update: Tue 19 Dec 2023 11:00:50 +0000
Files and hashes: 1: IvKo7rwYRyClNV6IffbfhuZWcOg.roa (hash: 5CcfcOzTX/UXmFz1cAlyMW+EqEP8jfUFunUTAtMshRU=)
2: uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl (hash: 3sB35pl3SKIHmMA+/B0Y2HcXNoKgbMZ93H5CWNRDS6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:95:f2:fd:02:52:7a:bc:90:9b:f4:2b:c3:05:a5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Dec 18 11:00:50 2023 GMT
Not After : Dec 19 11:00:50 2023 GMT
Subject: CN=01f67825860fbcaa760c1cffe2534ee448ce3bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:12:bc:37:e7:0e:00:d2:b6:7f:48:38:cf:
9f:68:53:c3:21:eb:1c:6d:8e:ce:02:9d:67:e2:3c:
fd:8e:8d:2d:41:21:11:f5:d8:96:be:8a:eb:5a:a0:
be:60:af:a1:ea:c9:bc:07:10:fa:c8:13:5b:c1:9b:
c1:e8:4a:ac:70:e6:db:42:da:45:3b:ba:89:9a:7c:
27:13:34:40:50:25:6a:8b:a9:82:a3:2d:71:54:53:
bb:e2:bd:fb:b7:7b:fb:0b:0e:c7:d2:4f:be:f3:1c:
fc:22:5a:ca:c0:e2:21:97:65:7b:92:51:a8:80:d2:
31:6b:6b:c3:ea:d0:33:41:da:e1:b1:d1:45:e5:f1:
92:fb:7d:73:c1:01:20:87:29:d4:c8:27:02:7f:3a:
78:7a:c8:bd:42:b3:81:c6:eb:de:fc:01:f9:b4:b3:
de:0f:86:1b:35:bd:6e:d5:be:ae:e4:c9:87:f5:2e:
3d:8e:25:d0:f1:01:b3:35:aa:71:11:33:20:a9:46:
85:10:57:57:e9:85:31:55:bf:0f:86:c4:51:33:09:
92:e0:a6:f4:66:8a:da:fb:04:85:fa:08:1d:5b:1f:
77:f9:8e:37:93:9c:d0:3e:cb:82:0f:e3:55:00:59:
9b:43:1f:49:4d:27:6c:be:df:d1:29:0a:8b:0a:89:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:78:25:86:0F:BC:AA:76:0C:1C:FF:E2:53:4E:E4:48:CE:3B:F0
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:5d:1d:85:9b:70:c1:d7:37:0a:b7:35:ad:b1:35:a0:8b:
15:4c:6e:d3:e7:0d:b9:68:74:e8:24:67:6b:75:e0:25:4f:c1:
d7:fb:d4:7b:9a:73:25:9f:11:9d:f7:f4:84:76:88:9d:c5:c4:
56:70:2c:7f:f6:3f:d8:77:80:12:90:78:b3:3f:86:64:26:47:
3e:27:ef:71:9f:7f:da:45:30:2a:28:97:7f:be:f4:cc:2d:a2:
88:cb:cd:48:94:74:a5:3b:2f:7a:ed:45:f2:93:95:a8:ba:8a:
54:94:05:0b:52:84:98:87:88:36:5a:28:de:e4:59:21:d1:52:
95:0a:53:55:8c:bd:3e:c5:12:80:84:87:f1:ee:37:11:68:6f:
46:94:51:c4:bd:19:21:2b:af:80:91:18:19:9a:3b:2d:9f:40:
46:6c:b8:77:e1:f4:35:6f:ba:f8:7a:23:f6:ae:e1:5d:7e:5d:
93:a2:35:6b:92:1f:78:bf:fd:95:b8:2b:e7:1f:90:b3:87:26:
58:ad:02:82:0f:b5:30:7c:53:83:9b:13:f1:5f:21:f0:f2:3a:
9c:a5:44:c9:cb:45:32:6a:55:64:8e:fa:dd:94:1a:8f:ee:8a:
86:0f:15:66:7e:0d:9e:59:23:d2:98:15:81:aa:6e:0c:8d:31:
ab:7a:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:59 2025 by rpki-client