Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier: MvVUMqj0vCM+jaQ3kBztVAqYv4Cfp0zbJtcrFezMeNc=
Subject key identifier: A6:84:CE:DA:DB:C2:35:C3:B8:37:31:9B:66:5B:DC:31:D8:15:79:E7
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 0194BC72EF1B82A5B34355154CE73CC7B62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: tMfjkKlIEnr/43L37f5dLjQPfctTLwEOGdRqaayJWQg=)
2: o24RSXriLAReI_2fGCloRnrM-3M.roa (hash: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ef:1b:82:a5:b3:43:55:15:4c:e7:3c:c7:b6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=a684cedadbc235c3b837319b665bdc31d81579e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:f1:c4:0d:91:a5:2a:9c:b7:5a:29:b1:7d:
79:d6:72:59:a4:59:83:bc:b5:85:2c:c4:b5:ff:07:
0d:0a:2c:ba:d0:47:e5:7c:64:e6:7f:d5:19:3c:98:
9e:86:4c:8b:0a:6f:57:c6:f0:52:ee:42:e4:e1:a9:
3d:5f:2d:a3:86:af:f7:41:71:56:9e:ae:6e:0b:05:
43:86:6c:07:04:6b:78:a8:52:20:7a:b9:64:28:b0:
a3:45:80:07:41:8a:f9:e9:17:1c:54:50:43:34:6b:
7f:ec:0a:9e:3c:21:42:2d:b6:77:e2:c6:87:d9:83:
3b:8f:ad:a4:84:9d:21:70:38:81:5d:7f:5a:40:1e:
47:17:c1:a0:a9:59:bb:23:ba:4b:e4:9a:bb:b0:ef:
21:2e:3a:0a:a7:e5:dc:e0:1c:d6:55:43:75:86:27:
8e:04:3d:b5:eb:43:a3:01:98:86:84:f8:5b:9a:cb:
fe:6e:9d:53:8d:48:36:e4:4b:dc:3b:d0:69:41:70:
e9:9a:99:21:65:d3:40:2e:fc:7b:e3:47:53:40:c3:
0e:0c:d6:9c:dd:6c:1a:dc:ec:57:4c:6e:e8:3c:8c:
35:1c:41:32:d5:22:26:c5:57:05:81:07:d7:3c:40:
45:c4:49:31:0b:b6:8d:02:98:4f:17:0b:18:37:2e:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:CE:DA:DB:C2:35:C3:B8:37:31:9B:66:5B:DC:31:D8:15:79:E7
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:88:80:90:a3:bd:35:d8:76:7d:8f:5d:1e:5d:96:f1:b5:
9f:eb:76:8d:e2:6a:91:58:f6:cf:99:f0:1a:72:64:a1:b0:50:
de:ba:b2:76:69:56:38:26:9b:6d:45:98:02:2a:b0:0b:8c:ae:
9a:70:2a:3b:a8:b9:5d:5d:07:95:71:00:d5:11:6a:27:dc:51:
ee:6f:50:74:bd:3f:dd:56:0e:18:97:15:08:bc:61:48:b8:55:
54:36:07:35:f2:92:2a:6c:39:79:01:b5:05:5c:ea:34:6e:df:
4c:ab:cf:85:40:a1:16:7e:40:7f:a1:8c:15:0e:98:ad:c6:f9:
e4:61:f9:96:db:09:7d:6a:58:d8:ef:b6:b3:0f:47:3a:5c:71:
bd:84:8f:14:8a:f0:9c:16:54:9d:dc:eb:ba:fe:0f:95:61:db:
10:53:bd:af:77:c2:e3:e0:84:74:1b:0b:fb:68:45:65:6e:03:
d2:50:83:fc:14:9b:10:e9:43:75:c9:55:02:10:ac:8d:e0:01:
54:2e:75:bd:e9:a8:90:48:95:b7:61:31:4c:20:35:7d:a6:b5:
01:d2:d4:30:ff:06:8d:5f:15:26:6c:96:75:8d:1f:6f:6b:92:
5a:3d:e0:ec:18:dd:79:9c:2f:74:68:d1:7d:31:d0:23:89:5a:
83:07:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:12 2025 by rpki-client