Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: JLq9YSnw0s5WHNHEwsm0qYQRLmmtlhrZN1t76klLlMM=
Subject key identifier: 8F:29:F7:BB:C5:C6:CC:47:97:8C:20:22:49:25:F8:14:E0:FD:6C:63
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 0194BD17BE29C1DE5963D23E3D7855B10A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 13FD
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: OZeWzP5WgE3Cq5W3XeZSQINkiZ0rcNelhnMaGNXAwm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:be:29:c1:de:59:63:d2:3e:3d:78:55:b1:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=8f29f7bbc5c6cc47978c20224925f814e0fd6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:34:27:09:38:2b:89:68:74:af:a8:fc:c3:9b:
c4:fc:1b:22:3b:95:78:e6:fa:bc:9c:ed:e4:01:83:
47:af:cc:25:85:8f:69:e5:9d:f4:70:1c:59:fd:ba:
43:d7:84:23:76:26:43:3b:6f:a2:dc:09:01:fe:5d:
38:ce:24:04:93:fd:bf:a3:b5:c1:49:7c:d0:a0:c2:
01:47:4d:7f:6e:6a:9a:b5:5c:d4:e3:af:5a:61:f5:
99:9c:df:2a:3e:bf:21:d7:02:28:64:a4:d7:32:e4:
cd:b0:ea:6d:7c:fa:91:4a:3d:6b:8f:73:82:45:71:
ed:c8:5b:48:35:72:73:3e:0f:b9:a2:dc:c1:da:6f:
d0:f6:07:59:25:ac:89:b7:16:17:33:66:19:00:2e:
a4:34:78:89:9b:9e:f4:60:b4:f1:36:1d:72:87:01:
cf:36:60:24:03:c8:fc:2f:9c:fe:c7:7a:e7:96:db:
54:9b:35:7a:4d:e4:79:81:1c:63:35:9b:1c:f8:bf:
97:84:1a:6c:8a:5e:4b:1a:da:6d:f8:80:15:c6:63:
2c:d4:2f:b9:96:2a:db:f7:6e:ad:d8:d4:70:28:f6:
b0:94:56:ab:36:f9:01:af:4e:d1:3b:23:f2:65:44:
48:c8:52:f3:fe:99:d2:d8:00:30:21:d8:20:ea:ba:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:F7:BB:C5:C6:CC:47:97:8C:20:22:49:25:F8:14:E0:FD:6C:63
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:56:2d:d7:12:06:96:58:e1:4c:b3:3b:20:f9:42:6a:96:30:
32:9d:f8:50:52:ad:e7:93:fb:e8:d7:2a:68:3b:cc:0e:4f:6c:
b6:1e:82:ad:c2:e5:4d:91:a5:e7:e1:54:dd:38:f7:2c:50:71:
0b:a1:ea:30:16:32:03:23:84:57:4f:91:e8:0e:41:61:f4:48:
39:46:96:f8:03:87:72:90:d1:7d:5f:eb:ce:e1:b6:e8:11:0e:
dc:41:63:8c:d9:69:3e:e4:72:11:24:5e:e8:27:d6:5a:39:b3:
72:ad:bb:b4:bc:0f:27:ba:f0:8a:7d:45:7f:7d:40:e3:26:e2:
1b:60:a7:bc:6a:bd:d8:e0:d9:ae:78:2e:1e:ed:3b:08:79:58:
64:5a:cb:5b:94:a5:94:55:3c:9f:45:27:e2:de:d9:8c:1f:49:
51:57:7c:bd:1d:ad:5a:64:6d:d8:66:a4:fc:01:8b:39:05:cb:
20:08:91:4e:71:8a:87:3b:30:44:23:9d:f1:aa:b0:f3:87:26:
c7:4f:a0:50:c5:f9:89:14:bf:62:22:93:11:ac:43:67:be:ee:
3c:6a:90:76:f1:5a:e1:71:8a:cd:53:7e:b6:af:04:08:96:bb:
b3:eb:67:e6:57:d2:87:e0:7c:98:08:ad:e4:33:10:dd:ce:46:
3a:bd:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:10 2025 by rpki-client