Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: /VJRoBkn5iJmCVjXdz2tATrYOglJgrOsxsNd8jCxD10=
Subject key identifier: 73:23:61:FF:50:6B:BA:C8:1B:1A:18:AD:E1:28:51:BC:D4:D2:FC:0E
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 0194BD17CD5D395EBCB2139F609AD778B98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: CDV3JW8bkxgbOahyaa5HqCqbk1yg6TjOuY5efyCVBfs=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cd:5d:39:5e:bc:b2:13:9f:60:9a:d7:78:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=732361ff506bbac81b1a18ade12851bcd4d2fc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:15:f3:cc:ea:4c:27:1b:71:ab:26:5e:26:
97:25:3f:98:41:fa:cb:23:a8:91:a5:dd:f8:76:f2:
ee:4a:c4:ee:90:01:ac:6d:28:fd:ea:78:50:8c:77:
d7:2c:43:07:84:b4:51:1d:05:f0:bb:98:70:30:af:
34:07:5d:cb:92:da:0f:13:82:a2:63:08:00:89:7b:
f5:fc:7a:9e:1f:aa:47:4a:84:ab:e4:67:23:df:a0:
5f:0b:d9:36:b1:00:7f:da:a2:80:8d:83:cc:c1:19:
b7:32:bb:9c:f1:a4:14:07:1c:c3:1f:6e:63:d7:b9:
d0:40:12:7b:86:6c:b2:25:dd:36:c3:b5:b9:f0:14:
c0:13:aa:cf:d1:45:64:79:fe:40:a3:2a:a5:e3:2a:
91:fb:b8:45:0a:e7:58:0c:24:6c:a6:62:79:bd:40:
5e:0f:c7:b3:ea:fc:95:78:05:b0:aa:13:43:5b:3b:
72:da:1f:f2:2e:2b:4c:6b:82:61:8e:e2:7b:c0:be:
1b:2f:a8:e6:20:43:77:39:ec:37:38:46:94:6d:65:
7b:e0:94:af:50:e7:a3:ee:3b:5a:d8:8c:ac:77:bb:
b0:09:81:c3:4f:89:f1:54:ef:8c:46:a9:2b:c0:9b:
8b:25:22:c8:8c:2a:b9:93:17:f0:72:04:ff:df:d0:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:61:FF:50:6B:BA:C8:1B:1A:18:AD:E1:28:51:BC:D4:D2:FC:0E
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:c9:cc:74:26:68:3c:b8:99:4e:16:70:f2:61:7d:c0:94:
6d:44:5a:7b:8d:be:1d:f7:7d:86:d8:ff:6e:49:f1:40:b9:58:
87:2c:02:7d:a8:ca:87:20:5c:22:4b:db:a7:9a:04:b7:d0:e9:
cb:ad:04:3b:1f:52:c0:56:e4:24:32:48:8e:6c:ba:65:d3:64:
2a:6a:ad:17:10:18:da:cb:2d:15:5e:aa:54:89:4f:10:62:b3:
d8:3b:27:c3:15:a4:4e:da:e2:cf:7a:80:13:ff:03:ae:09:d6:
d4:de:92:c7:c6:dd:ea:23:1f:d0:3e:c8:fe:10:75:be:54:67:
2e:8e:01:08:2c:a3:e9:3b:ce:b3:bd:d7:14:52:af:71:bc:a9:
e8:ee:77:0c:ea:4c:5b:a5:c7:51:8c:fd:9d:0f:b4:90:23:5a:
20:fe:bc:eb:73:af:6b:a1:fb:47:dd:17:db:be:2a:55:23:99:
83:f2:49:be:63:cf:4f:d9:d0:d6:45:96:a0:de:0b:86:98:80:
88:8f:ad:7e:c0:49:a2:80:75:95:f4:8c:92:4b:3a:a9:e4:2c:
c1:c6:4f:50:52:df:ae:a9:be:28:e6:09:dc:2f:97:59:96:7e:
bf:f3:2e:72:31:4f:55:5c:6d:e4:12:76:04:e2:0d:07:0e:d5:
d9:43:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client