Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: wvuNeyO2FjMz+taNl7nDfLlEzKUX91Y1ljKjMjTCnTY=
Subject key identifier: 43:49:E5:F3:47:1B:E4:95:0C:E0:37:21:77:C3:78:C3:EE:A7:7E:68
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 0194BCA9EEDA507C2F0886AFB031F02BE621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 110E
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: fMkSmYdUo/6ehOtW++mwyuD+l5Sr0VQoHxkB8Kz+wHA=)
2: gTDuY8r1VNymJYjX19G7pBZoVz8.roa (hash: DFZawHbPH3fUqxF/xfDF3iDUtDCENnqE3cXs8GAuxpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ee:da:50:7c:2f:08:86:af:b0:31:f0:2b:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=4349e5f3471be4950ce0372177c378c3eea77e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:e5:a0:79:e3:07:e6:7a:8d:0f:12:7b:1b:
59:7e:b6:e8:67:08:cb:13:d9:28:f9:c8:8e:59:a0:
7f:5d:5a:c7:fb:be:a2:77:ef:60:d1:db:e7:5b:4e:
53:41:e1:7f:44:4d:02:db:ae:b1:02:60:79:a7:a1:
63:d5:ef:ce:bb:da:08:a4:25:f0:4c:a3:b4:51:be:
d6:92:a7:01:e8:0d:7c:c8:b5:b2:2b:60:7a:31:61:
4e:a1:73:b2:10:7a:c8:0c:18:9f:0a:67:42:23:2f:
9d:9d:05:c4:81:8b:16:3b:19:07:55:57:69:f2:79:
97:0f:f9:0b:ef:86:d8:ca:b8:78:b5:c2:ea:67:ff:
43:48:ed:9a:48:78:e6:54:7c:79:05:be:1f:47:61:
c7:15:04:0f:66:4b:bd:fa:bd:2c:89:6e:ee:31:f5:
06:88:75:fd:34:10:e6:0e:6e:9e:c9:35:1c:ba:43:
9f:b9:3d:20:21:a4:ce:1c:66:a6:3e:1e:a1:61:45:
2d:c7:3c:fd:1c:22:ce:82:cb:02:a9:7c:4c:0a:2a:
52:7e:13:21:9d:b6:21:da:e0:ed:44:86:88:f2:85:
9a:1c:91:fd:1c:e6:39:ca:06:3f:14:63:93:48:6c:
bc:33:82:c3:e3:eb:37:dc:72:0c:e2:85:2d:d7:89:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:E5:F3:47:1B:E4:95:0C:E0:37:21:77:C3:78:C3:EE:A7:7E:68
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:09:51:93:cb:a8:e3:21:7c:02:3e:c0:98:70:5d:36:cd:99:
15:10:93:b9:9f:0e:76:4a:fe:4d:8e:ca:c2:d5:9b:af:93:fc:
45:de:3f:b5:66:b6:3a:ff:45:e2:9a:c6:04:41:15:cb:f8:f6:
8e:82:22:65:a6:e9:21:ab:73:2f:ab:a3:b8:59:75:dd:eb:e8:
82:54:57:f5:b9:58:3e:89:f2:34:13:8c:09:0f:3f:d8:78:76:
70:de:1b:ca:b8:b2:9a:ff:69:77:8c:c9:07:a1:f0:20:5c:bf:
7f:71:e9:3f:aa:92:b3:36:a5:65:25:79:68:e7:2d:52:cd:54:
ff:e4:3b:d1:e1:30:e7:bf:55:4e:5e:07:8a:76:ad:11:6e:d2:
3f:73:8c:4d:81:be:fc:4b:b1:6c:b3:2e:8e:51:5c:fe:8f:92:
5e:46:4b:bc:9d:b1:4f:19:80:00:b9:80:29:05:f1:50:06:7e:
03:53:e7:21:a5:02:d0:1e:c8:5e:1e:9a:6b:f1:ce:33:c8:4b:
92:65:fe:5c:aa:8d:59:1a:c9:a3:7f:60:10:03:31:7a:5a:88:
cc:1a:cf:b6:59:d3:6e:1b:a6:0c:49:42:e8:c8:1e:10:ac:0f:
72:38:27:ae:90:70:ca:c6:7b:32:09:4f:bf:71:95:47:2b:8c:
16:20:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:58 2025 by rpki-client