Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: JRNs/I2e/6MfWyPwDHWNX61EfHJqrc5iqCJNvW29bYw=
Subject key identifier: 5A:B7:57:1A:26:A2:69:F8:58:BF:EB:26:09:EE:39:EB:7C:3D:63:70
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 0194BD1753270A807404E4FAE75EFDBFD37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 117A
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: yHutEYxDCx8wCdTGg8dDeKpwIasg1Q4LbEPciSmxwU4=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:53:27:0a:80:74:04:e4:fa:e7:5e:fd:bf:d3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=5ab7571a26a269f858bfeb2609ee39eb7c3d6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:f1:bd:9f:25:28:42:a0:b8:0c:29:0f:4b:
0a:a3:e4:8b:52:38:fc:8a:08:8b:fa:8d:f7:c4:b7:
d8:02:07:5b:0d:3d:53:09:46:a5:9d:cf:69:af:f8:
87:04:8d:3f:34:23:fb:7e:79:b6:b8:be:da:ba:6a:
92:d7:8c:6d:3b:0f:9d:6e:96:90:d4:42:cc:da:85:
1d:17:7a:17:b8:40:e7:e1:ad:44:08:d6:d2:c2:c1:
24:a7:59:b4:93:c3:45:70:38:00:ce:7e:90:89:80:
e5:3d:76:22:61:bf:31:02:76:a3:68:fb:7d:64:4d:
17:39:5e:4b:c3:07:5c:8c:fc:bc:24:67:91:12:96:
61:a8:1a:d1:7f:97:98:41:78:d8:0b:a6:5b:aa:71:
82:d9:5a:3e:a7:31:25:c8:5d:48:2b:dc:60:0a:46:
17:e0:da:22:a7:6e:70:c8:45:d9:13:c6:e5:4a:93:
99:3c:cf:3f:17:0a:2d:ea:64:79:f3:72:b8:ba:a6:
de:67:e3:3b:43:fd:e9:9b:62:d3:09:33:bc:67:10:
d3:0b:10:11:fd:b5:74:a5:2e:de:20:6d:0a:b2:f7:
ee:11:b2:99:5f:c0:67:aa:dc:c2:87:da:b8:a1:c3:
a0:fd:d2:a6:1a:5a:95:63:0f:25:68:27:f9:7d:cf:
95:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:57:1A:26:A2:69:F8:58:BF:EB:26:09:EE:39:EB:7C:3D:63:70
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c8:8a:a7:4e:1a:2e:53:c9:45:48:fa:a4:12:61:d4:4b:39:
73:20:9a:85:71:7f:fa:f2:66:47:1b:a1:e8:7b:56:c1:90:5d:
95:3e:fa:c8:e5:27:f4:5c:b2:0b:be:dd:69:ce:b4:bc:fc:14:
73:6b:ee:ab:ee:7e:03:9c:1a:54:df:64:48:8d:22:57:3c:c4:
10:70:3e:25:1f:b4:2f:a4:0d:e9:13:f5:d8:10:e4:fe:29:7a:
66:bf:2b:da:50:dd:d8:b1:9a:d8:ac:f1:7c:2d:fc:cd:9d:4c:
08:ca:0f:5b:f0:a6:4b:d6:aa:1f:eb:b8:9d:9b:c7:ae:f4:66:
fd:65:81:3d:7a:6c:46:2d:2b:11:4d:cd:2e:e3:80:30:4e:fc:
61:01:31:2f:fc:3d:7a:06:db:26:88:df:68:5b:13:ac:62:04:
18:89:8d:ea:76:31:25:71:d3:c8:68:f9:4f:d4:3a:75:3e:71:
64:b3:6a:f1:1f:6e:d2:ba:e1:14:f6:33:2a:74:58:34:bd:fd:
b4:af:16:85:6c:01:3e:2c:f5:a3:a9:9b:af:89:57:5d:c1:2d:
39:1b:a1:76:7a:ee:55:ed:8e:24:b6:57:53:17:b0:d3:b7:e4:
2f:00:98:50:89:41:5e:18:22:f4:a7:24:65:ad:d5:49:69:3f:
ef:90:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:20 2025 by rpki-client