Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
File: UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft (raw, json)
Hash identifier: WZfQFGJSYk53oC/hI1wQVIHmKi9Y6FZ9M7k52OfJxmA=
Subject key identifier: 61:18:A4:B5:F8:14:0E:0D:10:69:7F:2E:3C:90:63:6B:85:03:F7:5A
Authority key identifier: 52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
Certificate issuer: /CN=52a65c628483a756688bb158c28ab7c0d47de27c
Certificate serial: 0194BC3C1B7C2175B00B13041A2A3217A8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
Manifest number: 01FC
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl (hash: /9uDebNiGRuNbNn0/x27cl08vvfcZNSZ4vsHmIV/ekU=)
2: tqDHXiS7i5dxh3CeCoDJkGQqezg.roa (hash: l6w/oRDzimMT8gSmQ7FtqRNlVcpqgstHkEfCIU2SJhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:7c:21:75:b0:0b:13:04:1a:2a:32:17:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a65c628483a756688bb158c28ab7c0d47de27c
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=6118a4b5f8140e0d10697f2e3c90636b8503f75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:8c:eb:68:ec:dc:d9:72:78:71:b6:c2:33:
fc:eb:2f:8d:1c:ba:19:a7:84:7d:1c:8a:39:c8:c8:
00:61:c9:38:d0:f6:15:f1:ba:ae:c6:c2:89:8c:eb:
bb:90:19:c4:e7:ca:20:9a:ea:8a:22:ba:96:65:1b:
46:34:08:fb:82:5c:5f:20:eb:a7:3f:a8:42:40:6a:
60:78:80:b9:00:91:2b:21:ee:48:97:27:82:15:2a:
52:8d:79:bc:8f:53:dc:1f:75:b8:2e:c4:a4:82:3a:
59:b4:6d:ff:82:fe:07:66:28:cd:c5:df:fb:43:35:
c6:03:4c:99:24:08:13:59:b0:4d:64:7c:27:91:56:
96:ae:8c:ad:f3:cf:0b:07:6e:2b:e4:5d:41:30:58:
0c:0c:1b:21:0d:bf:7f:ed:96:f6:8e:87:04:4c:ca:
64:81:28:04:9c:6c:ff:4b:15:e1:d3:83:e2:23:95:
b4:dc:ca:09:d5:1f:4a:bb:50:37:ea:bb:94:32:74:
76:4a:38:d4:d6:42:57:f1:08:cc:4e:22:97:c2:a8:
7b:cb:7a:ed:e2:a9:8c:de:7d:df:98:31:ae:a7:ec:
02:fb:fa:8d:56:1a:95:b5:af:7f:97:8c:c7:e7:45:
6e:1b:fc:5e:bf:2e:42:48:bc:6a:60:ee:88:a7:f1:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:A4:B5:F8:14:0E:0D:10:69:7F:2E:3C:90:63:6B:85:03:F7:5A
X509v3 Authority Key Identifier:
keyid:52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:31:d6:e2:5a:23:15:cf:d4:4a:45:ed:08:ee:cf:73:1a:b0:
ac:fa:de:65:6d:b0:d1:2c:d5:30:ff:bb:f8:e2:ea:00:cb:e2:
fc:22:e2:47:7e:b9:c5:a3:a6:5e:2e:60:d9:e0:f5:4e:3a:4a:
a1:99:a4:1a:36:a5:41:80:5f:c8:2c:a8:23:a6:e8:47:e1:91:
6b:2c:43:61:3f:de:c2:84:1f:93:54:67:80:0c:bb:d8:f2:56:
13:79:f7:28:5e:e7:52:3a:ec:81:14:e6:cc:b6:62:b6:a4:3e:
d5:02:f8:2d:59:37:c8:8f:22:a3:4d:98:76:8e:79:13:fc:51:
b0:aa:8c:c3:75:e4:3c:c9:00:f4:d7:5e:a7:47:86:de:24:9c:
98:6c:90:bd:a1:8c:e4:34:21:85:9c:80:c3:be:22:f1:4a:6c:
c5:5a:98:7a:45:28:8a:b2:82:41:9a:ea:c6:24:77:57:4b:e3:
63:c2:50:78:9c:c6:df:a9:f6:4b:e9:6d:d6:55:6d:84:fb:41:
fc:a8:2b:cb:5e:fe:16:bd:6e:de:49:0f:40:79:2e:0e:37:57:
57:96:bb:aa:f5:93:16:b0:c1:1d:d4:0e:91:49:96:90:3f:37:
90:be:f0:ee:1d:ac:07:d7:a2:07:cc:d0:1e:6c:72:0d:34:e3:
24:af:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:28 2025 by rpki-client