Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: k70WK2CjLmRrcDHfm6ehyYmkv/oqYMADQnLko2T9mSE=
Subject key identifier: 05:AC:36:65:48:C6:81:C8:91:91:D2:4A:D3:82:27:8C:05:A1:5B:21
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0194BBCDED506FE3711CAB1AA3A6225FDF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: 44hRvzQlD+tMBIOVhscKwRxET7NOSuegs7mFzNf6d+E=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ed:50:6f:e3:71:1c:ab:1a:a3:a6:22:5f:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=05ac366548c681c89191d24ad382278c05a15b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:05:87:8a:cd:68:94:11:d0:33:de:a4:fe:
d6:04:5d:38:72:bb:90:0f:b9:0a:99:41:90:a2:82:
3c:fd:a6:1e:c4:b7:ce:59:51:97:12:d4:94:67:8d:
9e:48:11:88:2a:5a:37:d7:df:d9:fc:9d:41:1f:2e:
42:7e:bc:39:77:71:3c:36:2f:59:26:21:7c:f1:88:
8c:5e:a9:3e:49:2d:10:2d:fd:6c:2b:80:ba:10:fc:
78:f0:3c:c5:29:7a:bc:2c:7d:eb:f8:eb:8b:19:92:
fe:3e:56:78:38:9a:5e:5c:fb:42:36:0d:02:bb:8e:
92:8d:0c:f0:f6:05:8c:1b:a3:87:ef:49:40:0d:82:
6e:26:41:30:c2:f3:0b:fc:00:84:76:39:3d:2a:38:
08:c2:20:d2:b7:c0:f0:d6:fd:35:a0:17:f6:87:be:
3d:34:e7:16:88:49:1a:e6:aa:0b:fe:9b:e4:a1:b3:
06:af:ab:c9:54:30:9e:c3:7c:5e:81:64:08:29:22:
9f:0c:de:dd:0d:8b:c5:89:ba:23:1f:4a:bf:ea:bf:
c8:a5:06:87:60:83:dd:dd:d9:2f:ec:54:eb:a6:3e:
51:e3:e1:c1:a4:db:2e:2e:6c:e1:1c:a1:e0:07:4c:
6d:c1:99:b3:7e:a7:48:b2:34:b7:3c:08:87:32:2c:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:36:65:48:C6:81:C8:91:91:D2:4A:D3:82:27:8C:05:A1:5B:21
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e5:4f:46:bc:91:b2:aa:b9:8b:bc:ef:1c:26:55:1f:0a:f7:
f1:57:f8:30:13:5e:6a:cf:01:e8:df:25:6d:4d:ba:ff:6f:a4:
52:f8:54:a8:dc:16:90:c1:cf:27:57:5b:6a:dd:88:dd:22:0b:
14:61:af:f5:1e:5a:64:fe:31:fc:26:6a:5f:62:ee:00:35:4a:
87:19:3a:58:33:8b:42:55:a1:b9:cc:b4:1d:d8:de:bc:fb:fc:
4f:cd:c8:60:65:0e:0a:34:ac:a4:b5:6c:56:40:4d:3c:5b:b2:
7e:75:0e:d0:02:f7:33:23:aa:f7:8c:c4:0f:3a:b2:66:c5:ed:
79:97:d6:4b:4b:80:9e:d0:85:5d:f6:ec:90:17:e4:53:e9:f0:
62:86:18:5b:a5:f4:43:ab:28:77:54:1d:cc:5b:eb:a5:b0:71:
b2:31:4a:d0:7d:a0:28:08:2f:44:e0:3b:c9:f4:96:88:7f:82:
f1:7b:88:69:b2:da:3f:f7:7e:5d:c5:d6:0c:fb:af:3c:0d:3a:
45:c9:88:fb:ea:85:c8:0b:7c:fc:91:57:b5:53:34:93:ef:b0:
b3:5e:25:ff:55:73:aa:d1:81:5c:17:9f:76:36:4e:c3:23:40:
a7:9b:64:76:8e:71:0a:b8:aa:f7:b8:07:0f:22:0a:64:d7:e5:
f0:47:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:03 2025 by rpki-client