Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
File: UZAPFNiJz2-neRaxmjkeLA0fgM4.mft (raw, json)
Hash identifier: oxtU7k0y4J3zNk7MmodPedSOt/NH3ORpz6pyiBr3/e0=
Subject key identifier: 3F:EC:3F:0D:7F:22:73:1D:93:88:80:E9:F2:75:8C:CA:1B:47:A1:EB
Authority key identifier: 51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
Certificate issuer: /CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
Certificate serial: 019483CCE530EC2AC6FF02E7940C900EF150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
Manifest number: 0AC8
Signing time: Mon 20 Jan 2025 13:00:30 +0000
Manifest this update: Mon 20 Jan 2025 13:00:30 +0000
Manifest next update: Tue 21 Jan 2025 13:00:30 +0000
Files and hashes: 1: UZAPFNiJz2-neRaxmjkeLA0fgM4.crl (hash: H+N2HhEeSS+5/hGv25Tvvq4g9HDrQuCXnVgjPHLR/BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:cc:e5:30:ec:2a:c6:ff:02:e7:94:0c:90:0e:f1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51900f14d889cf6fa77916b19a391e2c0d1f80ce
Validity
Not Before: Jan 20 13:00:30 2025 GMT
Not After : Jan 21 13:00:30 2025 GMT
Subject: CN=3fec3f0d7f22731d938880e9f2758cca1b47a1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:9d:cf:49:85:e1:3a:f6:54:a0:2c:01:74:
cb:9d:07:4a:2b:c4:4f:bc:71:0f:97:6d:23:41:f9:
a7:60:bb:a2:62:36:19:61:ad:bd:4c:8f:d9:fa:07:
72:85:8a:ff:9a:cd:9d:e2:15:fe:67:7a:21:a1:c1:
b1:a2:7f:3b:0d:0d:45:b1:f2:29:7e:61:47:08:46:
91:ef:94:fe:d2:d7:b2:ac:bd:55:66:ea:ae:8f:3a:
a1:95:c7:6e:fc:20:c1:31:cd:fc:24:7d:bb:98:58:
15:4e:f8:cd:2e:eb:64:d0:7c:a7:c8:5c:51:49:8b:
56:fa:a3:50:46:a5:79:5c:34:da:22:8b:6c:f2:89:
2e:e7:2d:03:c1:db:e2:6d:b6:13:c2:98:4c:11:90:
d8:1b:cc:be:64:a7:05:4b:bc:55:50:b4:97:9c:eb:
e7:c6:80:27:6f:aa:f7:cd:b4:90:6a:9c:1c:3c:d0:
f2:2b:c3:b5:16:6b:7e:98:cb:dc:85:d1:27:6e:a7:
c3:a7:c3:be:ca:6d:be:60:3b:62:bd:79:fd:19:ab:
4b:fd:32:3d:81:7b:59:35:1c:a7:6e:01:a0:a4:1b:
f0:6f:18:53:d2:c0:19:ea:69:64:0c:83:a3:6a:6f:
72:b4:fb:ca:46:c4:c0:5f:2d:4a:b0:4b:8e:0a:e6:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:3F:0D:7F:22:73:1D:93:88:80:E9:F2:75:8C:CA:1B:47:A1:EB
X509v3 Authority Key Identifier:
keyid:51:90:0F:14:D8:89:CF:6F:A7:79:16:B1:9A:39:1E:2C:0D:1F:80:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZAPFNiJz2-neRaxmjkeLA0fgM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/dcfbe6-5adf-4c3f-af41-609ab3f768ae/1/UZAPFNiJz2-neRaxmjkeLA0fgM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:9e:0a:6a:21:54:d0:61:d0:64:1d:6e:ba:b2:d8:40:3b:
14:2a:18:2e:90:3d:a4:02:b2:7a:06:bb:01:a8:9c:e2:9f:2c:
5e:91:c5:d7:41:a2:8f:ce:a3:f5:6f:0a:8c:f2:c2:d1:aa:99:
d0:00:b8:62:c4:4e:cc:3b:5c:32:26:6f:12:c3:30:9f:af:b5:
af:c0:71:36:46:29:0b:36:7a:9e:03:ef:77:68:41:0c:83:41:
93:0f:6d:0d:f1:63:0a:7c:22:c5:5f:83:2b:f4:db:e4:f2:26:
bf:e4:4c:f6:a5:61:59:50:a6:f5:22:aa:e2:ae:30:09:13:55:
32:cc:30:e5:3c:12:22:c2:99:53:9e:11:ad:22:9e:4b:8e:86:
a5:f8:97:5b:16:7e:e8:f0:f3:38:95:06:78:16:14:2e:03:70:
79:ab:81:af:97:80:4d:c9:9f:bd:7a:9c:56:23:b9:1d:27:92:
b7:71:8c:bc:3e:80:58:f2:61:ed:e2:90:b5:41:86:0b:0b:aa:
fd:93:35:c4:93:dd:fe:f8:17:69:59:22:b6:12:c9:2c:6b:03:
d3:9f:f4:1a:77:cc:ee:08:42:d0:73:59:bb:c0:99:0f:00:17:
7c:0c:2b:6e:73:60:47:17:41:6c:59:30:d6:82:55:7d:f4:24:
4f:31:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:53 2025 by rpki-client