Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: nEcaPskG/6+H8kynnwjpI4korTgy4tZzO+aUCZMRriQ=
Subject key identifier: 91:2F:F1:94:6E:3D:D1:80:BE:C6:B0:51:6A:9F:D7:91:16:6D:0F:9D
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 0194BD85ABF27351ACD38B7D816BE2E280A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0D3F
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: MciWb60MRTEKYG7nNsdPObcTdFA.roa (hash: KHNwOaNcZ7u3dM/4d40q21NOgHnTWPbfSPyYUx+Aq9E=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: g3ts5z60023gXkyk87LL++xu76LKAOWb3kWCdF9GQsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:f2:73:51:ac:d3:8b:7d:81:6b:e2:e2:80:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=912ff1946e3dd180bec6b0516a9fd791166d0f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:b3:2d:25:f5:0a:44:aa:0b:fb:5a:cd:83:
84:a9:78:a3:b5:8e:c6:01:fc:77:d6:4e:3e:56:e6:
68:52:0f:db:e5:65:0d:21:ab:e4:e4:71:81:89:e7:
7f:a0:b8:d4:a2:17:6b:8c:01:a3:32:85:ba:eb:1b:
49:de:fb:c4:17:7a:c7:76:83:22:e1:79:8d:b7:87:
70:66:88:cf:b8:b8:0c:d0:a8:12:ae:2c:05:c7:34:
37:ef:23:05:c7:aa:90:6f:bf:f6:51:7e:b5:35:bf:
cb:1a:b0:ed:95:c6:47:39:1c:d5:4a:b1:a4:b7:e7:
d6:c4:7c:ef:de:4c:b4:ca:69:20:b9:11:a2:4a:b3:
90:37:f3:94:fb:01:33:9f:85:b9:2e:b8:5d:59:89:
7f:86:e9:08:37:3a:98:54:fa:de:d5:8f:98:50:41:
d7:37:55:e0:72:6c:57:4a:52:ee:8b:af:69:05:80:
ac:95:09:d2:d8:31:cb:ee:70:6c:cf:54:11:12:2a:
08:4c:c4:30:37:da:c9:c5:a5:b8:35:15:bd:4d:6a:
9a:9f:57:e5:25:b7:c0:ea:6c:59:5b:87:32:8a:e6:
d7:a6:30:2f:a9:12:32:ee:ba:b8:a3:55:82:29:fe:
d7:a8:a4:51:86:4b:d8:b0:c1:2e:1b:11:14:e6:a3:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:F1:94:6E:3D:D1:80:BE:C6:B0:51:6A:9F:D7:91:16:6D:0F:9D
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:60:dd:37:42:76:f0:97:46:06:e9:8d:bf:9a:af:dc:cc:
dd:42:6b:1c:2f:12:b0:bc:8f:f8:1b:2b:a8:e4:6f:53:19:07:
8e:c0:f8:c4:b5:69:10:33:c5:25:4e:f4:69:98:73:68:02:83:
70:d9:4a:1c:ff:58:54:27:77:5a:70:1f:72:a2:d0:88:72:85:
a5:fa:fd:93:7e:ef:97:aa:06:6b:52:de:55:5c:32:04:8f:58:
23:0b:7d:1b:26:e7:00:c5:80:91:5c:d2:4b:c5:20:0e:aa:88:
e3:84:7e:87:57:bd:40:53:59:66:2d:c0:4a:ea:0e:1e:99:d6:
74:34:75:c1:43:d5:32:d2:89:09:7b:1b:52:23:4e:6c:15:9b:
b0:3c:fb:c6:ce:98:06:98:ad:56:a6:ae:02:56:7a:a8:81:fb:
63:2f:62:ed:47:4b:f1:c9:86:a6:50:67:c5:cc:ff:7b:6e:12:
3c:0c:31:29:bf:99:3d:da:f5:5d:20:1d:81:ba:0d:1c:58:e8:
9c:ae:e1:56:d6:3c:c1:a6:91:21:75:54:7c:c5:5b:4f:b0:50:
45:40:38:db:19:28:a1:2c:e1:ea:ca:18:89:5a:18:d3:f2:d4:
ec:7e:41:64:42:d6:da:c1:c7:1e:c2:81:76:86:ef:df:ab:81:
1b:9e:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:47 2025 by rpki-client