Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: IHt+FtLYXTuGIR7Y4/5DoRIblw7j6ohrtmcHpOUyuGg=
Subject key identifier: 86:31:84:03:15:E2:23:69:3A:4B:4F:08:06:1B:D2:A5:B2:0D:BF:2A
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 0194BC3BCDC019BFB4E21135C5D44E784259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 3BGSsazfJf8DV-j0E3wTBcOWujk.roa (hash: PB1pHmSm/Egpw9UdFofIpc3WMt/5B941IfxXaR4CROY=)
2: DFgAMB_c4WeZyOx-eglKZBMeXuM.roa (hash: X7EnRSIwEjRtkMbUxZKI4C9GzuFGjpE6JJQKft4XunM=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 3b7Yt6DcP9DXCxJReXnYhWegMLY41FSOU7glWTC6+9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cd:c0:19:bf:b4:e2:11:35:c5:d4:4e:78:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=8631840315e223693a4b4f08061bd2a5b20dbf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:2e:4a:e3:67:2d:d4:b7:5b:fd:34:eb:c2:
ba:e9:95:56:45:d6:9b:fe:6a:2a:79:f9:c4:16:ba:
bf:8f:2c:fc:9d:f7:7f:5b:b3:42:f1:16:4a:da:a0:
91:e7:ae:43:07:aa:fe:2f:2c:0b:33:f1:ba:62:d1:
d5:09:a1:6a:27:6b:cd:c7:fe:be:67:53:4d:56:ed:
30:53:61:31:4e:82:5f:4f:12:5f:15:57:b6:aa:9c:
ad:a4:69:3f:ba:00:a6:33:1a:c2:2e:91:d0:8f:c1:
3e:7c:4e:8e:19:e9:26:a0:48:ef:46:ac:ff:4f:f2:
8a:70:05:78:92:a5:dd:15:f3:06:a3:b3:ec:82:f7:
a1:85:65:ec:0a:9a:bc:0b:d7:90:fc:cf:ad:6e:12:
1a:68:92:d4:9d:73:96:b6:98:70:e4:f9:c7:5e:e1:
7e:e3:52:15:46:bc:f7:16:93:14:7e:cd:93:c4:60:
6a:55:98:3a:07:39:05:99:56:50:85:46:44:fd:ff:
06:7b:b6:bf:1e:36:df:90:77:05:02:a5:05:83:aa:
71:d5:e5:17:f8:d6:ed:58:db:b6:0a:b6:00:c0:04:
bc:11:6e:54:1a:a7:fb:72:b7:e1:ae:16:8d:e7:df:
1a:af:62:4e:0f:95:8c:6b:09:08:3d:74:ad:61:f2:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:31:84:03:15:E2:23:69:3A:4B:4F:08:06:1B:D2:A5:B2:0D:BF:2A
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:19:32:2a:0d:47:1c:b2:ef:2f:fd:91:e2:2a:4f:57:4a:
9d:4e:45:8e:67:8e:17:eb:80:45:24:e2:2e:f6:98:f4:88:fa:
5f:e1:ca:52:94:af:16:90:ef:ee:f9:cb:5f:4d:66:f3:9b:8f:
8e:ca:c1:b8:d9:eb:de:c2:6c:00:5b:41:95:e9:49:db:26:57:
75:e8:e4:01:80:d5:16:6f:62:50:5b:b0:44:b1:8d:d8:ff:35:
b9:d8:2b:8f:75:9f:75:43:1d:68:c5:98:53:ec:38:6d:0b:d3:
2f:a2:05:2a:17:17:04:bd:de:5c:0e:31:81:3b:c1:08:d7:45:
a8:82:fd:3c:48:87:ec:ea:55:da:65:21:1e:b4:c8:b9:8c:09:
93:ce:d7:24:dc:6e:02:0a:c9:86:07:0c:dc:b7:23:e7:bd:b0:
8e:00:73:b6:79:82:fa:5d:5c:30:cb:cb:a1:7d:83:5f:e6:2d:
8b:c7:14:3b:f1:81:7c:09:e2:df:13:ca:cc:0d:9b:68:c2:b1:
b9:58:19:87:26:70:01:d1:88:69:33:02:ab:35:20:ef:4b:c4:
ba:cf:a6:8b:40:53:b2:2c:89:15:e4:58:8f:eb:78:de:32:bb:
65:ba:e6:9b:e5:2f:b1:5e:d6:de:08:e9:51:1d:19:d8:08:8c:
02:4e:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:27 2025 by rpki-client