Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: J5IcXjvamewI+uUqtAkn/xMuiHfLHQWnkEx5lw+bm/g=
Subject key identifier: 23:FC:71:B8:60:D9:B6:A4:3A:45:8B:64:C4:F4:5B:DA:21:50:3D:E6
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 0194BC3BCD0307CF1E4ECE91A27D2AA44523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0C5E
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: BSrqRNNBy48B5gcYLnvJXMh/ivEkYMejPT4LaEjvTmo=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cd:03:07:cf:1e:4e:ce:91:a2:7d:2a:a4:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=23fc71b860d9b6a43a458b64c4f45bda21503de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:5b:8a:be:55:9e:8d:0e:e0:94:ee:5e:9f:
4b:a1:94:ab:28:32:ad:4c:ca:5a:5f:85:c2:1a:1d:
55:64:22:89:99:c1:ad:a4:8f:9b:6c:7c:fa:8c:f4:
1e:56:31:dd:ef:d7:b8:81:62:c4:72:52:87:a4:35:
a0:54:80:24:cf:b5:61:1a:32:ba:5a:c7:ac:e3:13:
d3:f1:ba:fd:ec:a8:b1:d8:c4:d2:03:b7:e5:41:fb:
ce:10:29:6d:16:1e:b7:1d:29:45:e4:45:82:a6:e7:
2f:39:31:69:c5:81:50:1d:72:35:6a:d9:21:68:62:
52:04:1f:a2:43:f4:32:cf:27:76:cc:59:84:65:54:
df:5c:96:1a:cb:4f:4a:2d:d5:ae:a4:20:0f:26:a3:
74:eb:bd:d4:d5:30:11:62:a3:c4:20:a3:4d:f0:e7:
d7:63:4a:ac:5d:47:2a:84:bc:c5:8f:a3:7e:46:e8:
94:0b:fb:c2:33:6f:f0:16:3f:92:91:33:ab:97:d6:
56:52:d0:3f:3b:62:3d:cf:a7:33:1e:0a:d3:bb:fa:
44:24:b3:3f:03:f8:69:a0:19:f4:22:a5:d4:1b:4b:
68:16:a4:e9:d6:a0:f0:71:3b:ee:1c:20:52:fc:34:
99:25:be:85:f3:6f:0d:7c:ef:3d:51:9d:e1:c2:db:
36:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:71:B8:60:D9:B6:A4:3A:45:8B:64:C4:F4:5B:DA:21:50:3D:E6
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:ba:a1:b6:b6:34:d6:51:9a:5e:ff:73:a4:7f:dd:f9:0a:
03:39:35:b9:07:6e:08:f4:38:b6:f8:28:71:dd:38:d8:41:6f:
55:8c:18:2e:78:01:38:36:a4:15:ca:28:e5:2f:a8:c6:62:05:
2c:68:e5:56:0a:1e:a4:c9:64:8a:7f:5f:3c:b7:3b:70:50:bf:
fd:37:8d:88:21:81:96:f2:0c:25:1a:ab:0d:37:af:0f:cf:fa:
77:09:0f:ad:36:58:95:10:46:21:c8:3b:36:e3:49:bf:d7:6c:
d7:bf:a0:a2:be:21:5e:c3:38:5d:1f:2a:a5:2a:4e:30:ec:6b:
23:c3:95:2b:00:e4:91:0a:24:26:f1:37:7c:74:47:28:c7:9b:
7f:15:33:4d:a5:dc:e0:ac:7d:7c:b8:a6:84:dd:59:80:75:53:
63:0e:75:fd:31:98:05:32:48:76:66:bb:af:0e:94:26:e9:60:
f4:12:13:03:34:63:0b:45:17:2e:e5:03:39:61:22:0c:42:5b:
b8:b8:d5:50:c0:ae:1a:8f:1c:b9:16:37:0e:39:5e:2b:c2:de:
5d:9f:78:1e:85:d7:ba:c8:b5:70:68:cf:65:65:83:67:86:5e:
c2:95:41:d8:17:fc:b6:a8:23:63:25:e5:ab:a0:24:fb:58:29:
2b:80:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:44:51 2025 by rpki-client