Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: Ul7VF8BEugrLdlbmJVyFw90vhyd9oTTPkw2TFHxcEao=
Subject key identifier: C0:46:63:2B:9C:95:E7:A0:FE:0F:E1:D9:0E:B4:BD:6A:5E:CF:19:71
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 0194BCE0AF673EB7BEA579DF01CAE17184FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 08C8
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 5ppYcCefRGgXrF8Qh2t6+7YI7YrcEid9A2c4xUcwHjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:67:3e:b7:be:a5:79:df:01:ca:e1:71:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=c046632b9c95e7a0fe0fe1d90eb4bd6a5ecf1971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:88:8a:47:c0:04:be:e8:26:4f:8b:a4:45:
4f:1e:54:4d:68:c2:23:91:51:98:29:e7:c7:08:ab:
7d:4a:2d:21:0c:6f:be:c1:8c:fe:c8:fa:54:33:b2:
dd:96:1f:c1:34:27:60:39:e3:dc:79:89:3d:3e:35:
8b:83:0e:8a:e0:0d:7c:31:b3:0a:b4:ed:c5:9c:d7:
16:3a:67:bd:fa:15:f7:0f:86:e7:9b:f0:f3:4c:74:
3f:c5:51:bb:07:62:57:1a:7f:57:b4:d5:1a:f6:77:
47:04:df:93:a1:15:ef:fe:e3:be:d5:4d:21:09:09:
6d:0c:26:1b:28:fe:1c:91:dd:f3:6b:fa:19:15:67:
27:ca:da:51:d4:39:61:0b:e2:3c:9d:a3:7c:db:9b:
22:03:4d:f4:21:3e:d3:d7:45:30:3d:53:af:32:b7:
90:e8:07:cc:c9:82:2d:b1:c7:9d:9d:9f:0b:48:73:
f0:03:76:d7:0b:ff:d4:e8:ad:d6:89:74:8b:ac:f6:
a8:47:ff:65:85:c1:e9:bf:c7:56:1b:d1:ff:7c:d7:
db:f3:bf:b1:ec:84:26:08:5f:0a:bc:2f:33:6d:bf:
77:26:ac:ba:18:8c:80:be:46:27:2f:fb:00:ad:58:
bf:78:fe:d3:fc:34:9e:34:c5:0e:41:16:9b:a0:90:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:63:2B:9C:95:E7:A0:FE:0F:E1:D9:0E:B4:BD:6A:5E:CF:19:71
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:a2:d0:1e:27:ec:cb:94:0b:68:a7:fb:73:2e:30:25:4b:
67:a0:ba:39:2a:5b:70:91:24:d5:7d:56:8d:7f:92:e6:cc:f1:
02:33:6f:10:9b:5d:42:77:47:bf:01:7d:82:a4:1e:69:89:43:
58:f7:c9:f4:8c:ac:fd:d5:f2:09:94:c3:95:65:ed:54:33:aa:
b7:22:64:81:bd:ce:70:5e:e9:72:7b:aa:52:dc:c3:c4:d4:95:
86:ca:57:aa:44:cc:2d:61:67:f8:7a:ad:4f:fc:76:57:f7:da:
7c:d0:6c:62:fa:97:fe:53:ad:ad:99:cf:06:7d:0a:dc:3e:a5:
11:14:30:0c:cc:0c:3f:83:2e:28:4b:08:2e:91:6d:1c:37:49:
5b:6e:d2:25:52:64:2d:2f:d9:96:90:ea:db:64:81:61:2a:8f:
14:0b:17:e3:a2:f3:27:0e:d7:5a:80:4f:17:70:d6:49:74:75:
55:c2:8f:90:2c:87:81:be:d8:6e:e6:5b:8f:46:1f:79:a5:d8:
fa:90:1a:fb:d4:65:f0:f5:fe:b6:b0:b5:3e:a8:38:8c:cb:e6:
59:be:cd:bd:59:27:7f:bb:e3:ce:a4:36:5f:7a:a1:74:d0:f8:
13:a0:34:e1:5d:ab:45:2d:a6:82:f1:2c:d6:6f:b7:d2:ad:21:
0d:62:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:11 2025 by rpki-client