Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: 9bPAxucbFDI1AqQRAL3QhlcHpUFSVmipvC3vg797JPs=
Subject key identifier: 7E:E7:2A:2D:77:92:5D:F4:6A:E4:D5:13:79:B3:D2:36:D4:DA:73:D5
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 0194BD4E8946E6A6E46B7B2C260084DAC821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0C32
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: giezEBV99o917gtz3fn7KuUJIe5JrDDQ9QZC+2Oqotk=)
2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:46:e6:a6:e4:6b:7b:2c:26:00:84:da:c8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=7ee72a2d77925df46ae4d51379b3d236d4da73d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:60:0c:db:62:00:1a:6d:04:fd:be:ce:90:
d5:67:c1:1b:71:4c:f8:e1:5b:e2:33:b7:d4:dc:a8:
0a:b6:05:9b:55:de:7d:56:4d:8a:dc:25:bc:9b:e4:
3c:99:6a:42:9b:ba:17:b2:8e:71:fd:63:bf:44:42:
b0:52:1a:72:b7:2d:8f:22:5c:c4:a2:38:2b:ba:5a:
bd:31:77:73:b5:58:52:c5:e7:e5:df:23:f0:c7:de:
c7:72:d5:d2:3a:d8:d9:94:44:a4:7f:8e:24:3e:b1:
f6:c8:23:ea:d7:a8:83:b6:36:76:6f:a9:93:40:d3:
31:13:ea:dc:ba:41:ad:48:3c:a8:c2:ed:ef:90:27:
ac:84:1a:a7:7b:ef:60:c3:4e:78:0c:9f:e7:f6:61:
c9:0b:c6:bf:ef:6f:32:17:bc:26:fb:8d:03:90:67:
26:c7:bd:66:4b:e5:65:3d:6e:3a:18:48:05:6e:74:
05:1f:c5:c7:5c:4b:65:cf:23:ba:e8:58:43:6a:59:
cf:4b:ec:6d:f4:e7:78:56:45:37:d8:11:c9:7f:a6:
87:e7:78:bd:b8:66:ac:21:98:b0:2f:5a:11:fa:64:
44:40:bc:16:cd:12:eb:b8:68:93:d0:fc:d5:42:14:
55:73:73:24:0e:69:1c:5c:34:0e:49:1f:34:5d:5b:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:2A:2D:77:92:5D:F4:6A:E4:D5:13:79:B3:D2:36:D4:DA:73:D5
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:60:43:04:d9:9e:f6:ef:76:40:bd:8a:be:36:14:42:d8:
30:23:5b:a5:64:a5:3b:34:bd:86:e8:06:5c:aa:f3:fb:34:a8:
7d:ab:29:f2:d8:fe:34:15:d2:46:bd:94:3a:45:b1:d3:59:b2:
20:bb:6d:2d:07:68:42:d4:36:eb:d7:21:ef:a8:ac:14:cd:4c:
a0:2f:45:59:4b:75:4b:e0:69:c2:72:e4:5d:27:df:ab:b4:88:
29:9b:0a:5c:da:67:16:ed:ec:01:d6:18:d2:f5:fb:b9:a9:ca:
3e:43:dd:bc:eb:5e:1d:f9:5f:2a:89:a8:19:d1:5e:a9:ee:f4:
06:e1:73:c4:3b:00:82:f7:c3:dc:25:cf:99:1b:14:62:15:d8:
69:f2:79:dd:c8:d5:14:4d:64:34:4a:27:22:4f:99:99:89:01:
de:45:cb:93:99:dd:77:ad:16:7d:b8:9d:a8:20:d7:d8:1d:bd:
e0:03:27:5e:47:e8:19:32:9a:ee:1a:37:b2:52:13:7f:9f:26:
db:66:f0:9d:c2:7e:78:12:b3:ae:79:a0:8b:50:7e:48:72:3c:
ee:7c:97:ff:28:93:82:8c:d8:be:7d:f1:e0:4b:30:62:e2:e0:
f5:c4:b4:59:43:05:e6:dd:fd:fd:40:1e:9a:a0:24:99:e5:53:
55:d2:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:04 2025 by rpki-client