Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: Pyq5h6X0JHzEIBB9Q5sshdtH4NCnoJmFf4E3ucWaxqU=
Subject key identifier: 88:46:F4:44:EE:EC:91:3A:E3:B1:B3:65:36:2C:5A:7B:89:A8:0C:C5
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 0194BC72D1334F38A93FC4522FD4BA52D72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 134C
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: H2Ci6kZHGV4T2SDSAl+GfQWqIi0BK5xHuNLcf9ML4iE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:33:4f:38:a9:3f:c4:52:2f:d4:ba:52:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=8846f444eeec913ae3b1b365362c5a7b89a80cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:53:d9:aa:31:04:09:a6:1a:5b:37:11:58:
76:1c:72:1f:2b:64:2f:0d:f0:63:67:b8:2a:d1:00:
1f:21:5f:dd:7d:6d:7a:a9:a1:64:33:49:b2:72:7e:
77:db:10:73:a1:31:7f:a1:87:ae:db:db:5f:e2:1c:
10:99:3c:bd:e2:b1:01:c8:65:d8:e1:2e:23:ec:6f:
c9:51:5a:5a:d3:d1:08:8d:d1:58:36:15:b1:95:42:
de:79:38:d6:ad:6a:43:55:f0:4f:b6:17:2e:d9:6a:
47:fe:21:23:17:16:17:20:64:6c:ae:cc:a5:c7:52:
c4:cb:14:3a:59:d0:24:82:27:b9:52:89:38:88:0e:
c7:be:50:89:45:86:b0:04:0d:35:3a:16:9a:00:14:
6f:9d:34:8e:55:5d:69:2e:7b:09:1d:3f:a6:9a:5f:
12:0c:e3:ba:50:10:da:28:a9:69:4f:cd:0e:66:24:
2f:00:76:d0:42:2a:40:62:5f:a4:9f:53:2a:5b:34:
bd:c7:72:3d:0d:91:80:b9:e0:70:80:e6:11:10:c6:
91:32:4f:01:95:ce:4e:6b:87:28:d2:32:11:8d:3a:
7e:88:53:4a:4b:cd:a5:5c:cb:e5:06:17:54:df:a0:
ae:4d:30:67:a7:4c:c9:2b:05:9c:37:8d:f3:42:3b:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:46:F4:44:EE:EC:91:3A:E3:B1:B3:65:36:2C:5A:7B:89:A8:0C:C5
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:c0:95:e8:b7:ff:47:f0:b2:aa:35:01:ef:d4:a5:89:9d:
87:14:39:52:c5:42:fe:4a:16:7e:3e:25:57:45:56:98:d3:db:
77:30:3f:de:d7:de:f4:c9:ec:84:e5:ba:f3:97:f7:5d:36:a3:
cc:b0:d7:33:ca:ce:e9:62:f0:22:d5:e9:92:a9:42:b0:ef:9d:
fb:86:95:8c:c6:b2:08:dc:fe:1c:26:ce:c9:0a:c1:73:45:35:
5c:94:f9:e3:49:40:2c:9e:17:e1:f6:99:d4:67:c9:7f:cf:d6:
57:09:58:1b:b4:74:6b:67:db:fa:a9:84:24:eb:48:19:f4:2f:
62:31:0e:d0:9c:ba:42:24:4c:8f:aa:a3:55:ef:ec:5a:0f:c2:
3a:c1:cc:54:19:27:bb:b6:bc:63:87:73:e6:a1:e0:da:74:06:
ae:8d:37:66:1f:b0:b1:dd:48:7a:7b:08:91:bf:67:46:d1:db:
5c:32:5c:b0:98:5d:e0:11:b3:df:62:d5:d4:17:d0:b7:18:88:
a9:b5:cd:63:6f:2b:c6:4b:98:b0:e0:78:da:d2:61:cd:0e:ce:
e7:7c:42:d3:cb:98:f1:11:1b:86:9f:c6:21:49:a3:39:ee:2d:
2c:7a:c8:14:14:89:27:14:0d:5f:49:4c:b4:fe:9c:59:6f:08:
3e:06:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:32 2025 by rpki-client