Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: gJ4XPAeWklMh2nzkykib1lzXHwsXtrQj1Vut0uLeQUo=
Subject key identifier: 31:91:96:16:3B:17:62:8A:04:DA:1F:A3:DA:43:21:02:86:D4:A7:95
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0194BCE0AEE6B6ACE9F54C9F9F3E9D276E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: 1GTi1OFsW66HSoEbz5Dg0Vct4P8UDPINZ48nE71JkMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:e6:b6:ac:e9:f5:4c:9f:9f:3e:9d:27:6e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=319196163b17628a04da1fa3da43210286d4a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:f4:80:20:1b:a0:57:1a:1b:d9:0f:f5:a4:
24:96:e6:8a:45:e3:54:cd:44:25:22:51:35:71:72:
c3:5e:f5:cd:19:0f:66:03:72:5b:20:dc:5f:b2:bf:
a4:6c:cb:51:db:8c:51:0f:4e:99:81:66:6e:03:c0:
bb:01:04:46:fa:c1:a0:2a:ae:2d:0c:8b:fe:ea:9a:
a4:0e:cd:2e:7e:91:91:44:a1:b6:2e:65:d4:71:56:
90:c6:cd:fc:b6:a1:f0:45:65:7e:9b:0c:ee:7f:38:
ba:d7:d7:c9:47:2a:c4:36:7d:f5:a4:34:0f:40:78:
02:82:90:a6:17:29:ba:77:79:cb:c2:de:09:2d:ff:
ce:60:d3:23:4f:28:8a:db:a7:fe:3a:f0:ac:ab:c1:
d4:e7:77:a4:91:0c:d4:19:8d:9b:aa:93:a5:c3:f1:
f2:46:43:a2:1d:ad:8c:7e:40:dd:ed:1c:47:9e:82:
f7:54:ec:62:7b:b7:99:71:11:37:b9:80:77:f5:36:
45:4c:cd:2e:6d:2f:8e:4d:1e:1b:9b:04:fc:82:96:
99:f7:45:d1:3f:d1:77:8c:2b:25:2e:76:28:16:52:
49:7a:f2:a4:4a:3f:11:a7:68:44:3a:7f:0b:27:b5:
0d:f6:8d:3d:f8:d0:0e:7a:72:aa:cc:e2:aa:e6:7b:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:96:16:3B:17:62:8A:04:DA:1F:A3:DA:43:21:02:86:D4:A7:95
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:4c:0d:db:d1:f5:be:9e:5a:88:5d:c2:d3:5a:46:da:1f:
33:19:1f:8e:57:4e:3d:e4:f9:58:03:b5:f1:c2:2d:18:1f:7d:
7b:bf:f2:55:14:37:04:6e:73:20:ac:06:36:84:19:5c:4b:78:
19:56:5b:c8:60:e5:f8:46:f5:50:9a:37:9e:be:8d:89:e0:72:
4b:90:d4:d1:c6:03:ba:42:16:9b:33:ec:fa:9d:ba:06:d3:68:
6c:2e:1d:c6:52:91:d1:0b:a7:52:33:c3:a1:f8:eb:73:98:e7:
d7:c0:c5:18:ba:f3:5d:0d:9b:e7:be:83:b0:5c:68:57:03:26:
51:a1:48:a8:56:46:c2:2f:d9:f7:b2:11:c2:02:06:5e:49:ea:
2c:f7:6f:7f:8d:3b:0b:5e:99:b3:5c:a4:ce:91:a2:80:b1:79:
46:b9:3b:d1:e5:b1:f3:56:15:a9:7c:c4:53:6c:ce:86:b7:ff:
11:64:a4:80:f0:ea:63:5d:c3:38:e2:49:ab:38:3c:72:97:b5:
3f:14:40:eb:96:4b:45:11:94:48:56:bb:93:da:ef:f9:fa:eb:
69:c9:de:39:65:76:7e:06:52:52:4a:c9:79:7a:86:35:6f:9f:
3d:a1:ac:dc:3f:63:2d:f4:2d:92:2e:6c:e4:a0:8d:4b:7c:91:
cf:ad:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:49 2025 by rpki-client