Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: sD8jOEhFYTMS40PSp/g0odXI8fA9XO8W6buV+waJZRI=
Subject key identifier: 02:6B:E8:9D:C3:32:B7:93:A6:7B:63:72:F2:85:B4:E2:01:A3:B1:B1
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 0194BBCE93F8A608C761824A36F34778352F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 1174
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: HFhBAE5kzLEXZ4+u59MqlSWPs8MRT+jJ3HCzKCbZC98=)
2: ieAdYhfL7YWN2SLS2f9hqBVZtZM.roa (hash: hG5CDDVlPm8IgOCRW9955aYuwC+jVZMftA53gP484x8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:93:f8:a6:08:c7:61:82:4a:36:f3:47:78:35:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=026be89dc332b793a67b6372f285b4e201a3b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:f4:33:28:e2:b0:05:bc:69:6b:59:1d:bd:
43:5a:a6:18:55:7f:54:83:24:45:db:6e:b3:fa:e6:
7b:cd:db:24:ef:47:b7:23:cd:0d:04:4c:48:b5:ee:
c8:68:b2:01:ba:cc:a7:87:3a:fc:43:86:6a:24:8b:
50:99:d7:d2:fa:60:ff:7a:3e:ad:e2:01:76:f2:ae:
1f:87:a4:d8:28:ce:2e:66:92:4d:d0:df:8a:9e:31:
fc:91:a5:1f:f4:d7:81:7d:bb:93:c9:25:4c:2e:c9:
7e:4d:b1:c1:56:49:95:15:c9:1c:81:8b:ab:33:38:
0e:1e:87:c5:10:ad:04:d5:d8:68:3a:1f:8b:c6:c8:
5d:01:10:bc:d1:eb:92:9d:bb:0e:de:83:3a:03:4a:
1f:c2:49:e7:7a:62:1b:88:36:78:0a:b3:e2:54:72:
c7:fe:ab:ea:7c:a1:bc:59:54:ea:59:92:67:d7:0a:
b1:50:a4:ca:0c:7b:d9:fb:59:ba:c7:be:06:b5:7e:
bb:9f:75:43:f8:82:f3:d5:0d:7e:c7:13:00:09:ad:
46:eb:25:ca:0c:22:8c:34:eb:66:1f:ec:8a:bf:e6:
e5:5f:5b:c0:67:a9:87:0d:09:aa:19:b6:ae:43:a3:
1c:0b:85:8a:89:70:e8:96:f4:64:4d:a8:dd:85:d2:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:E8:9D:C3:32:B7:93:A6:7B:63:72:F2:85:B4:E2:01:A3:B1:B1
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:af:d6:f2:bc:c5:35:63:de:df:3e:a8:67:73:5b:b0:f5:cc:
bb:b0:17:12:f5:fd:18:41:cb:c1:c2:5d:4f:fa:79:a5:9e:09:
ee:e9:c0:a5:7a:6b:10:9f:64:20:0b:68:44:66:f1:be:19:31:
3c:0e:ae:ba:55:79:c5:08:32:78:a5:72:d6:0b:fb:34:30:9f:
22:d7:f7:55:8e:4c:2f:8c:05:aa:d5:13:76:2f:58:4c:1e:88:
de:64:47:65:00:62:18:72:c2:56:2a:28:7d:92:30:95:e1:6d:
63:89:da:10:73:01:25:3b:bb:98:ac:f5:80:39:02:af:cb:1c:
b2:eb:cd:6b:03:04:bb:74:9d:00:a0:a6:49:25:d3:b0:5a:81:
e0:e0:83:cb:79:44:a7:09:b8:f9:c8:bf:79:8b:18:52:c4:94:
c7:72:28:bf:96:ab:94:bd:d1:e8:a6:cf:df:44:ef:ff:15:9d:
68:21:bd:61:0f:8c:4d:1e:61:e2:d3:1f:77:a6:b7:eb:f9:12:
8d:6c:64:77:27:24:27:9e:ba:5a:56:1b:fc:bb:82:88:9d:50:
18:87:e1:b6:47:63:09:af:e0:98:80:c1:bc:00:f5:b2:d1:5e:
7f:9b:26:0e:67:60:10:60:7b:f7:58:68:74:20:0e:fd:00:b7:
28:5f:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:53 2025 by rpki-client