Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
File: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft (raw, json)
Hash identifier: u0AuPi2RBgZflrDwx6xPR5Mx/nKaA6Dqloe6BJhpn/s=
Subject key identifier: A6:76:93:7C:B3:4A:1F:6F:74:37:54:87:39:97:46:88:15:BF:07:E4
Authority key identifier: 53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
Certificate issuer: /CN=53e3aedd91be82451342dcd1c9828345db661a5f
Certificate serial: 0194BD4E68DC87F37BEFD897A83C08B30D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
Manifest number: 06B6
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: If5j4KjsWFg3kwDUxrHpbFCCjpg.roa (hash: iGbVOgQjxfoZ4tZTHfIMlZvCv27war8Yd/ywUcGl39o=)
2: U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl (hash: jR3IRPh9JLuDjwul1OROedvlBjtdAWa2AIBwN+CGDqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:dc:87:f3:7b:ef:d8:97:a8:3c:08:b3:0d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e3aedd91be82451342dcd1c9828345db661a5f
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=a676937cb34a1f6f743754873997468815bf07e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:f9:31:79:28:4e:1e:e0:60:80:fa:5d:a8:
a8:0e:92:03:ee:e7:68:b9:7c:4a:23:49:b9:43:fb:
e7:f6:19:e5:7c:2a:b0:40:02:59:b5:ed:03:74:82:
7e:ca:b2:66:62:bf:ea:61:ee:31:f1:be:f0:b3:0e:
bd:93:19:5b:d6:76:01:87:11:65:a5:36:7b:c1:00:
55:46:8d:cb:64:6c:6f:f9:7d:5c:22:41:e1:8a:6a:
34:b7:7e:97:e8:fb:e0:7e:0d:33:14:e4:c4:ec:5d:
f5:d4:b1:21:17:da:95:8b:f0:d9:41:8b:4d:9c:dd:
e8:f4:08:8d:f0:69:67:81:95:fa:57:63:c8:af:54:
9d:d9:68:5b:57:74:15:ad:b6:7c:33:9d:84:67:e1:
d9:fc:fe:b8:38:ab:6d:3d:7a:d6:66:8b:c7:26:0b:
3b:ed:20:ad:29:95:42:6b:4c:7a:ca:a6:53:62:5b:
7f:26:49:8d:ae:ee:0e:73:4a:4b:3c:a5:fe:44:5c:
c2:01:cd:b3:43:ce:0f:e1:89:4b:2b:cc:55:2e:db:
b1:03:89:ab:f1:f2:9b:2a:8b:39:5e:b4:73:8f:b2:
f4:f5:7f:13:ce:14:97:5f:94:4d:0e:b8:d8:38:5b:
10:44:97:3f:22:41:cc:ec:68:20:93:9d:6a:69:9e:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:93:7C:B3:4A:1F:6F:74:37:54:87:39:97:46:88:15:BF:07:E4
X509v3 Authority Key Identifier:
keyid:53:E3:AE:DD:91:BE:82:45:13:42:DC:D1:C9:82:83:45:DB:66:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/04e8b2-c76f-4629-95ad-a7d945af14e5/1/U-Ou3ZG-gkUTQtzRyYKDRdtmGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:28:ac:b1:84:70:95:ac:ed:ba:c1:fe:90:6f:c5:18:d7:a4:
fc:dd:1c:05:2d:be:75:d3:77:f7:fe:25:b9:67:cc:05:b4:c4:
f1:21:04:b9:02:ed:61:1b:17:e3:41:1b:d6:9b:cd:fb:32:7b:
e7:6e:37:84:6d:90:26:e5:c5:52:a7:c4:b0:1e:fc:4a:1d:ad:
36:06:47:18:27:47:4a:dc:4e:3d:76:6e:a1:92:66:67:69:b3:
df:c2:45:b2:2b:53:13:df:d2:66:4c:81:ea:80:47:95:a0:a2:
38:4a:30:97:dd:9e:0f:cb:21:07:5a:2b:61:32:32:5d:dc:dd:
0d:9d:05:4a:7c:c3:f2:45:45:81:0d:1d:9a:3a:a2:d2:4d:fa:
60:12:6e:23:2d:c7:cc:29:d0:41:36:95:0a:b9:f4:3d:22:fa:
4f:26:3e:cb:a4:4c:cd:0c:4d:2b:23:26:13:c1:58:5d:88:73:
99:be:23:74:21:60:4b:25:15:c6:e9:dd:bd:ae:e9:50:54:3a:
b8:0c:5a:99:c2:90:c9:67:b9:22:3c:58:27:cb:4d:28:41:3d:
0a:81:d5:ae:b5:91:30:09:72:0f:d8:26:67:52:9b:1c:cf:00:
05:fd:22:1c:5c:7e:c2:5b:49:27:95:eb:56:91:9c:c3:ab:3c:
25:58:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:00 2025 by rpki-client