Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
File: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json)
Hash identifier: mtAehbGnPo7BURt2vJ6/hwLtgRthjs21vz9LEgrMqHM=
Subject key identifier: 6D:EA:32:9D:D5:08:CC:46:09:FB:87:01:81:74:07:63:87:E0:85:CA
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 0194BD85B3BA3F7BDA94C9036F9F7D789A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: 5EzZHwJ3ZQCuqAi132UcbE97aT1kPKy+PpQO/OMRLS0=)
2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:ba:3f:7b:da:94:c9:03:6f:9f:7d:78:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=6dea329dd508cc4609fb87018174076387e085ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:08:d8:1c:af:cb:50:ad:e9:d0:37:9a:97:
db:3c:9f:34:ea:86:6d:98:3f:99:e3:80:f1:7a:c2:
25:a0:c2:53:b2:63:8f:35:fe:0a:35:82:86:5b:2c:
46:64:58:da:53:68:a4:8d:60:dd:de:0d:35:f6:51:
4e:6d:a2:02:3b:af:5f:0f:fd:00:d7:f7:cb:9d:9a:
6d:7e:78:49:75:c0:4e:70:0c:46:99:a4:3f:0f:91:
ca:8f:00:bb:9c:ca:0d:27:38:c2:56:8c:3d:ac:42:
99:41:cc:6a:05:df:79:49:52:73:ce:4f:f1:04:f4:
62:ae:e0:7f:6b:65:84:49:02:42:69:ad:d0:c8:03:
d0:63:27:8a:25:9e:bf:4e:97:a8:14:76:c5:6d:95:
ed:02:aa:53:a4:77:a5:67:16:5b:d1:71:2c:77:90:
a1:d2:5e:e7:15:e9:18:d0:2b:96:24:28:29:b0:de:
6a:44:07:34:23:e7:db:59:5e:8a:de:e3:36:0b:06:
1a:84:f8:b6:17:27:ec:79:fb:97:0b:0a:62:22:07:
27:f0:07:68:94:17:0c:34:3e:e7:17:7d:99:ec:ee:
57:0f:9c:37:8d:94:84:02:c5:52:c7:c6:06:ad:8a:
ed:d1:f9:8e:99:74:6f:b2:11:93:1a:3a:69:0b:d6:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:32:9D:D5:08:CC:46:09:FB:87:01:81:74:07:63:87:E0:85:CA
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:65:55:5f:d9:7f:95:cc:b2:dc:9c:44:27:e0:eb:d1:85:5d:
5e:10:64:6a:7a:f5:a4:0c:f3:5b:24:f4:ba:d0:03:52:e3:74:
56:f0:e2:30:69:4c:30:b2:a9:e9:f6:62:8a:a4:54:fd:be:2e:
16:be:71:16:90:4a:b9:98:4e:2f:43:40:63:36:fc:f9:3e:13:
01:18:76:3e:d3:8a:f0:94:40:dd:e3:d8:55:b6:f1:a3:7d:84:
67:1f:7e:db:f3:cc:e1:6d:b1:43:29:a5:ff:c2:37:fd:8f:10:
e8:eb:5f:b7:40:c6:91:88:04:cb:71:08:c0:f0:52:52:30:b5:
08:4b:e6:25:3e:15:d8:ef:28:34:75:93:9e:a3:1b:83:39:5f:
8d:6c:53:58:70:2a:6b:6d:4b:c1:3f:1f:8e:cf:9d:15:2b:3b:
b9:d5:59:c5:44:2c:16:03:24:81:49:02:69:de:84:52:1c:fc:
df:10:63:6d:b6:05:5e:ec:99:ce:92:13:2a:04:2f:a3:ce:ea:
4c:97:4f:18:e4:9a:32:15:6f:8f:57:13:02:95:57:ce:99:51:
a8:f1:08:81:3d:74:06:f8:f2:bd:f0:61:15:de:4a:d0:59:8b:
c5:4f:54:8a:16:cc:69:bf:a4:b9:c8:63:41:a6:5e:7e:f5:33:
0d:13:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:34 2025 by rpki-client