Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: emDb9LclQwaAu4VNLLntxpRDhncrI+SJTmPq4UJ83Ck=
Subject key identifier: 12:A4:1B:DD:B3:E1:BF:EC:F2:CA:27:D9:D0:99:6C:D5:26:C6:24:F5
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 0194BCA9EA3C67D19F48100A2528EE18CF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: 4+cpItRyjG46wXMjNFfIydppUrhlmXwZ+gQv0mM1ooo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:3c:67:d1:9f:48:10:0a:25:28:ee:18:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=12a41bddb3e1bfecf2ca27d9d0996cd526c624f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:bf:b1:60:52:11:e4:25:fa:4d:05:c7:d3:
61:5d:19:2d:d6:51:a2:22:37:c8:53:4b:a3:b7:1d:
c7:f3:27:91:c4:8a:4e:e1:d2:4c:10:09:5d:c0:a4:
2c:35:c6:1e:79:03:89:88:49:9b:86:a2:9f:65:0c:
f2:86:4b:f2:6d:8d:69:9e:ce:0e:84:ba:7a:15:fa:
2d:82:3e:6d:b8:95:f4:92:b4:ed:02:cc:4e:5a:01:
dc:bd:a2:82:ac:cc:5e:5d:10:73:a9:ef:78:b1:15:
60:c9:38:df:0a:de:9d:da:ca:75:9e:4a:b7:52:94:
6c:c8:5f:6e:f3:e3:da:6e:fd:23:18:65:18:cf:c6:
eb:b6:f4:ff:0b:e8:8b:7e:50:27:97:56:c0:57:db:
6b:1c:d0:6c:bd:fa:90:f2:15:36:a5:13:6a:a3:ee:
cb:4f:64:ef:b6:6e:22:6f:54:fd:7a:be:5a:fd:a4:
82:49:34:a6:83:4b:0c:ab:09:0b:61:d7:04:53:db:
1d:9c:e9:bd:dd:d2:75:f2:e2:76:89:49:69:58:ee:
d6:ed:be:c5:8a:cc:07:d6:d1:2f:8d:8e:e6:99:d5:
5f:3d:56:8e:b7:f0:6d:4a:9c:e9:3c:5a:85:58:ee:
6d:ac:e3:43:e8:e7:b9:3a:fb:ae:5a:dd:c6:68:12:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:1B:DD:B3:E1:BF:EC:F2:CA:27:D9:D0:99:6C:D5:26:C6:24:F5
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:47:71:dc:c8:5e:61:a0:c2:10:d3:98:d6:5b:cb:be:97:
67:53:fe:67:25:8e:ed:65:8e:19:ec:6f:49:47:75:97:2f:a9:
a2:df:5c:bb:eb:fc:eb:e0:23:1c:16:e6:4a:5f:6d:5a:5d:ac:
83:9a:1b:7c:54:ed:98:09:cf:b5:07:04:aa:90:2b:bf:7b:ea:
e4:97:dd:fb:5f:8d:e1:96:cf:b1:e3:5a:8c:52:61:0e:ae:92:
7a:74:7f:37:d7:d9:a1:f7:ef:c9:83:28:fe:30:28:ae:61:77:
a2:2c:28:3c:12:31:c3:13:d0:98:02:5f:1c:98:02:ef:93:c1:
e5:68:dd:4d:84:e0:9c:3c:1d:83:ad:5a:e4:67:76:28:8c:4e:
81:31:6d:b7:db:50:64:67:ee:0c:6a:c8:70:73:04:4b:c9:a4:
c9:3e:77:e4:f5:15:31:a4:da:32:e5:94:13:f0:28:b4:5e:81:
d5:26:3b:5a:21:72:19:3f:05:40:e1:c5:90:50:73:bb:88:0a:
3c:dd:0e:d0:92:06:33:e9:31:cc:fd:e4:bf:3d:64:cd:bb:e2:
59:10:f6:e5:43:44:b8:f5:8b:3a:ce:bb:38:54:84:4f:68:1d:
f9:e0:ae:d9:d7:2b:ce:07:69:72:d7:66:d7:d5:94:e6:de:d5:
2e:07:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:00:03 2025 by rpki-client