Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: 2JRyZlU9KlLXr/CSlo3rXAwg+RJSt4XqrlBEFI2PqdA=
Subject key identifier: E1:43:F3:9C:61:18:EE:4D:8C:C8:C9:FC:77:66:77:2D:E6:86:D2:93
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 0194BD4E5A7D17B26404FBD6369FA18B4DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 06F7
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: 9VTkAD++IpbDsmp0cvRJIFf1NTBIjwraKMFDjHGq280=)
2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:7d:17:b2:64:04:fb:d6:36:9f:a1:8b:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=e143f39c6118ee4d8cc8c9fc7766772de686d293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:f9:5e:cc:8b:5a:27:68:c2:73:0d:35:9e:
11:42:96:32:f9:db:e7:f5:58:04:3c:9f:e1:42:5d:
31:a3:5d:40:d5:70:8f:fd:6a:29:ff:2b:c0:2c:23:
c2:b6:79:71:ab:01:af:1b:ec:3e:30:fb:a1:58:15:
9b:0b:f6:72:12:a6:f2:e0:cb:f3:cf:92:94:12:58:
a9:c9:e1:82:e0:d4:2f:e3:c0:03:b0:57:56:6f:89:
2a:61:7a:73:ff:3b:65:d9:2f:2e:06:34:1b:db:d1:
5c:cb:83:cd:cd:44:a6:e5:b4:a6:3e:eb:62:a8:ae:
ff:e8:f3:ca:52:72:50:f9:5b:bd:e9:7a:aa:3b:ac:
04:0d:b1:bb:9e:89:9a:26:6e:c5:ba:23:18:39:dd:
80:db:dc:31:fe:c1:13:5d:d7:80:a8:1d:65:90:cf:
54:b8:ce:d6:4b:30:4b:ea:f1:12:ea:db:7b:ca:fd:
0f:14:72:8a:64:d7:64:58:4b:3b:3d:b3:27:8d:2e:
b5:e3:55:77:a5:bc:b5:ce:d7:ff:98:e1:6b:3f:db:
68:b1:33:91:22:90:7c:2e:96:46:93:f1:ec:30:e5:
c1:eb:df:cb:fd:23:f3:1d:4d:ab:66:6d:dc:9c:1b:
57:80:aa:8c:4a:b0:0f:ca:95:67:95:04:b6:0a:e5:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:F3:9C:61:18:EE:4D:8C:C8:C9:FC:77:66:77:2D:E6:86:D2:93
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1b:c4:fc:0d:f2:75:39:8a:d3:ed:ff:01:29:7d:b3:ff:a9:
27:06:d8:7f:17:79:2b:ff:d1:fe:d4:00:de:d6:cb:05:e9:76:
58:9a:2f:2f:f6:39:56:b9:68:67:87:37:b7:f3:6e:a9:fb:f1:
98:1a:e7:75:65:ca:2d:d3:01:43:fe:9a:1e:65:04:15:80:57:
2c:af:c8:cd:f1:73:d2:82:0b:08:1f:1d:1c:93:df:97:7e:6b:
07:41:0d:ed:e6:8f:0a:71:4d:7b:94:84:c4:2f:19:7f:65:0c:
ce:77:61:a6:8d:00:a5:4b:73:eb:81:c6:24:3e:22:d6:d1:9e:
4d:08:d9:2c:a8:7d:7c:8e:8e:40:ea:d0:95:d1:60:14:30:7b:
64:fa:7d:b6:e5:91:16:6e:25:cf:18:85:54:f7:d7:ad:a7:19:
bd:cb:f8:6c:d1:66:92:03:d1:e5:e9:50:18:a3:b0:eb:6d:70:
a3:09:1f:34:be:8d:2d:a6:b2:e5:db:8b:df:f0:bb:a6:ed:b1:
a7:34:14:d7:1c:53:4c:c4:d2:2d:91:11:fa:d3:26:33:cc:48:
fd:42:03:c9:ca:1b:4e:7e:9e:23:43:6f:d0:7a:91:29:e3:50:
dd:47:c6:96:8f:07:50:75:35:11:dc:d4:e0:51:13:0a:d6:f3:
9f:c8:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:42:08 2025 by rpki-client