Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: CEU+TFxyeZpj5lo4qtpT9zNS4r2vTxxtwVC7+umWipM=
Subject key identifier: C0:A5:69:13:EE:8C:59:FD:9D:B5:A3:B2:9E:9D:7B:04:58:1E:45:14
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 0194BBCE4E92EE4E6622D7C2B3E521EADB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: 9cBHm2j8SaT8TbrToAIiUpcA5Slg/RU9S2eJJAI0ue0=)
2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:92:ee:4e:66:22:d7:c2:b3:e5:21:ea:db:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=c0a56913ee8c59fd9db5a3b29e9d7b04581e4514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:9d:f6:3d:0e:aa:86:a3:37:00:70:7c:3e:
91:83:94:18:44:16:a4:ce:82:c8:f5:a6:1d:8c:3e:
ed:c4:d3:48:11:6e:c0:6d:b4:b0:04:3a:e6:64:c1:
b1:71:17:a1:b6:22:ae:63:2a:6e:17:a8:99:73:6c:
31:35:82:a9:f7:cb:ee:5e:3e:38:ac:00:7c:b2:1b:
49:55:51:44:fa:69:12:bb:46:c3:f3:01:70:91:28:
88:a3:3b:57:c3:f0:86:ca:e1:84:3f:d1:7e:00:8a:
3c:a0:69:03:07:1b:56:a7:5d:3e:53:9e:1c:6b:44:
d2:91:92:c0:c8:9c:2d:ed:16:ed:28:6d:d9:50:eb:
a3:7b:e3:17:e5:48:05:b6:17:f9:9c:68:82:f5:3b:
f8:9f:6f:32:87:e4:ce:17:f0:4f:7a:e7:d8:4d:f6:
6b:cb:74:49:4d:d9:ae:04:da:22:40:7b:6d:a2:42:
df:2f:39:12:9b:72:44:1c:5d:e8:8f:24:42:9b:d4:
a5:41:77:68:db:76:28:98:7a:81:9b:8e:d2:f2:ea:
c3:9f:ec:12:fd:f2:d8:3d:d9:74:9b:cf:59:39:d8:
64:a4:7d:a4:2c:f8:18:f8:03:c9:a1:e4:d3:80:fe:
4f:b8:49:e8:ea:6e:81:f5:f6:c4:95:3a:9e:ba:1f:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:69:13:EE:8C:59:FD:9D:B5:A3:B2:9E:9D:7B:04:58:1E:45:14
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ad:36:97:95:eb:16:a4:84:80:eb:7e:2e:4e:92:3a:cf:6a:
04:5f:6f:57:7f:34:95:95:bc:fc:58:de:c0:d4:0e:f4:51:d7:
c0:95:07:f7:23:63:56:bb:f1:cf:85:b7:46:58:8f:fe:d4:e2:
e3:d0:5b:cf:19:2c:52:a5:e7:02:36:42:14:f9:22:8a:cd:cc:
fd:a3:e5:92:96:7b:69:9c:e5:7f:2b:00:f9:b0:cd:c2:3a:47:
dc:12:f8:75:7e:1f:15:90:b9:c9:92:94:b5:e4:70:d0:20:81:
74:ca:43:51:ff:0e:7d:73:99:80:c2:c6:ea:f6:42:bb:8f:66:
6d:92:6a:49:b1:18:5d:a4:87:59:5a:d4:5b:38:31:ed:70:4c:
89:4d:fe:14:56:ea:e9:a3:4a:33:12:dc:3d:1a:69:d1:cc:26:
f9:ed:ca:26:a4:27:6f:21:fb:ed:2d:c5:ee:9d:70:93:ed:27:
8a:44:d5:3b:86:3d:26:82:17:62:c0:fa:46:4b:8d:1f:e8:d0:
4e:41:1a:06:3b:62:86:54:aa:d1:e6:d9:f9:a4:56:39:9d:48:
f9:64:f0:8d:b3:84:27:fe:ef:e8:15:ad:46:e6:5e:b2:08:22:
40:a5:4c:64:95:55:b2:f5:7b:e0:17:97:ce:82:83:d6:68:5b:
28:5a:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:32 2025 by rpki-client