
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
File: UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft (raw, json)
Hash identifier: wuXruVicqkVY8lOPer3TyOgzO7S2E0/ZnSgEqyWl5WA=
Subject key identifier: 38:BE:D0:45:1F:76:25:B0:F0:62:CD:8C:30:CD:AB:A1:F0:56:AA:8C
Authority key identifier: 50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
Certificate issuer: /CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Certificate serial: 0195D4B081823FD2C7BA88588941490D4B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
Manifest number: 1024
Signing time: Wed 26 Mar 2025 23:01:32 +0000
Manifest this update: Wed 26 Mar 2025 23:01:32 +0000
Manifest next update: Thu 27 Mar 2025 23:01:32 +0000
Files and hashes: 1: UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl (hash: HvXfQh7zVJIm10qGBCHj8yRwaTM5aTHmxFtf1Hnyc44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:b0:81:82:3f:d2:c7:ba:88:58:89:41:49:0d:4b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Validity
Not Before: Mar 26 23:01:32 2025 GMT
Not After : Mar 27 23:01:32 2025 GMT
Subject: CN=38bed0451f7625b0f062cd8c30cdaba1f056aa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:b3:3b:01:0e:4c:e5:20:3f:5d:38:8a:7b:
65:ab:95:f8:be:ec:6c:19:66:e5:9c:90:6a:2a:98:
3c:13:2c:17:31:b9:74:92:2c:9d:a0:bd:5d:88:84:
75:2f:31:c9:e8:c7:ce:10:4f:dd:77:9d:4d:71:6a:
b2:7e:dd:9a:e3:75:b7:1e:83:60:b5:c3:67:d5:24:
55:8c:96:22:a7:4e:33:67:0f:9a:29:45:ce:f3:6b:
e9:ca:9c:ba:30:76:d9:60:f2:de:2e:39:e0:bf:87:
9d:3d:0d:52:4e:35:3f:05:18:8d:ec:8f:18:c0:79:
ae:7c:d6:aa:be:d6:26:d2:3a:e0:b8:fc:f6:7a:f4:
aa:6c:92:51:b8:41:0c:1e:94:68:bf:fb:7f:07:99:
42:99:d1:c4:3a:93:ef:de:23:0a:83:56:e3:03:6d:
94:9d:9f:16:f8:5f:5e:9a:b3:e8:8c:63:d6:64:58:
e1:33:9b:3d:02:99:4b:0d:2f:b6:03:d1:53:27:0f:
43:82:96:44:52:ce:c5:e3:24:2b:56:b1:20:c5:05:
c0:4e:ca:48:76:2a:16:2d:7a:bf:fb:12:03:03:32:
f8:30:b9:8a:78:78:6b:d2:61:bc:d5:90:7f:ef:f3:
7d:9b:2e:42:8b:9c:0b:49:cc:46:75:0b:37:37:1e:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BE:D0:45:1F:76:25:B0:F0:62:CD:8C:30:CD:AB:A1:F0:56:AA:8C
X509v3 Authority Key Identifier:
keyid:50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:af:39:ac:fb:07:da:f6:19:12:c7:e7:c4:7f:e0:42:4c:57:
0b:e8:54:ab:c9:0d:49:1b:93:14:ae:b2:a9:c8:d9:80:56:1d:
eb:71:33:1d:2e:57:e9:23:a5:28:dd:e3:a1:a7:e7:30:c8:77:
e0:aa:30:46:c7:a1:7a:9c:05:d1:95:6c:7b:b4:5f:08:72:8d:
54:18:36:f7:1b:72:cd:fc:70:67:f0:cd:29:e1:58:5b:4d:2d:
5b:82:94:7e:6e:96:72:28:01:28:8b:17:36:c5:73:37:30:7f:
f2:82:5b:11:93:35:85:f7:ee:f0:35:0a:8a:1b:76:e6:5b:55:
c5:c4:b5:de:a6:b5:11:f7:47:b4:7b:0c:7c:96:3f:22:4f:65:
9b:8e:35:1f:da:73:98:4a:23:b4:cd:60:c1:37:1e:42:47:c4:
2b:55:73:d4:92:49:49:23:ff:e0:cc:6c:d4:4c:84:48:3d:8e:
fe:ea:70:46:a8:f0:8d:c3:8b:bd:3a:54:a7:be:17:84:7f:40:
85:24:a5:4e:1b:c2:88:1e:fa:b6:e6:a1:6e:73:41:51:03:27:
55:51:43:69:f6:23:8f:a1:5d:cb:2c:e6:fb:bd:34:e8:73:e3:
c0:81:0a:a9:4a:1a:57:7a:fd:f1:be:a6:c5:de:b9:c7:c2:a0:
f2:6c:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:06 2025 by rpki-client