Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: C/P8cABjtN5vjcr9e4PwzoPwzDcuFPMTqNyUi2YnYNA=
Subject key identifier: 98:20:C8:80:31:91:F3:76:38:B3:4B:FD:18:92:22:FB:CE:8B:B5:82
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 0194BD4E4F8D31802B5F2792E504193B550D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 0287
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: 38SRARiPlqZX0gFjhdztc5C7_lM.roa (hash: dkiUuBXjsldgNm4qMr8SQIBsw8iMYziR9AeYndQSEBg=)
2: AdhGNLC9cWzwE_YkHt8o7pq_cQo.roa (hash: Z86vImiits21PtPo6Ue4gYlS01c4SDwwLEIEnDIK8sY=)
3: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: n7hr56pPfd/gzrqmbAGzh06o+J+Wtyu8iwgO8S25DzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:8d:31:80:2b:5f:27:92:e5:04:19:3b:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=9820c8803191f37638b34bfd189222fbce8bb582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:58:84:93:08:f3:67:ec:d0:12:b3:c5:9c:
f6:ec:c9:fa:c1:03:f7:2b:52:73:72:65:73:4a:07:
e4:e3:cf:3a:c9:00:2e:03:7f:52:9a:14:e4:cf:d5:
e8:1b:97:87:30:e3:d0:10:6f:63:1a:54:a1:38:c4:
4a:d0:43:f2:41:6a:b5:b4:9c:09:64:d7:fb:e3:1b:
44:c6:85:ae:b6:97:c1:88:68:92:4a:a0:1e:9e:07:
c5:8c:dc:58:bd:3d:f0:c4:33:3d:88:9b:bb:9a:ce:
fb:64:73:86:0f:92:ca:6e:db:f8:13:b6:aa:57:4b:
8a:77:60:03:b1:04:71:ec:9d:b1:a9:f0:04:34:37:
fa:15:82:19:d4:c8:e0:59:0e:90:72:81:cc:96:6e:
b9:c4:ed:99:a8:61:51:b8:e9:de:03:12:23:5e:65:
2a:91:dc:b6:ab:a2:25:c6:02:3a:11:7f:7a:b0:6a:
8a:ab:8c:5a:5e:bb:6c:78:73:39:3a:35:a1:68:07:
38:3d:6b:3e:df:ce:04:a3:9a:28:15:0b:29:99:9a:
6e:26:74:f2:1c:f8:05:d4:d9:e4:0c:ae:62:83:04:
59:7f:e7:7e:72:74:e8:dc:0f:54:68:0b:7c:13:f1:
f1:51:0f:38:24:be:dd:52:c2:d6:06:9d:ae:78:b9:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:C8:80:31:91:F3:76:38:B3:4B:FD:18:92:22:FB:CE:8B:B5:82
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f1:b1:1b:64:6d:24:46:b7:e3:3b:67:82:03:86:1a:69:2f:
f1:6a:22:d9:03:bb:1b:f5:e3:bf:78:9c:6b:98:43:a3:04:e8:
0d:6d:4a:2b:bd:fe:5e:45:66:9f:1d:c7:8c:8f:e3:ab:db:b9:
b1:04:0b:83:92:6d:d4:b9:9d:8c:08:39:9e:92:12:fd:ae:a3:
06:cd:53:16:0e:6c:a0:b1:d8:b8:da:ac:f9:2e:aa:a7:e6:62:
2a:8d:67:73:b9:b7:c0:fa:50:cd:1e:c6:50:eb:e1:f7:54:de:
47:ad:d2:7f:15:d1:e3:5e:6b:e0:84:c7:36:11:95:40:cd:7f:
34:f0:32:32:39:65:64:ee:b1:b5:77:12:c0:8c:4a:5b:58:6a:
08:16:0b:90:ee:54:23:ad:7e:cd:a3:9e:3e:0d:71:1f:b8:6a:
d5:41:5a:aa:8d:8e:03:70:ff:64:bb:ba:27:31:c7:f9:b8:ba:
f6:8e:a1:cf:c7:0d:98:2c:88:3e:a9:3c:18:84:78:3f:c8:74:
c7:cd:59:aa:7b:78:36:4e:6a:63:30:52:3d:10:2a:f9:5f:10:
44:b5:76:72:7b:af:76:d8:df:ac:24:15:98:aa:1f:9a:0e:e6:
6e:a0:d4:f4:cf:17:b6:84:fe:52:0a:e0:49:7f:5a:96:8a:23:
df:bc:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:22 2025 by rpki-client