Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File: UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier: bOSt+5QH8WcKaiFXO6Jtod7v82E1aY+Dr8vzfsJdmGY=
Subject key identifier: 1B:A4:97:1E:BE:D2:EE:58:CD:B7:0F:2B:2D:4A:35:60:15:DD:29:96
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 0194BC3CACE35D6C106FC57E5997112C3B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number: 05B8
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (hash: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=)
2: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: jO58bWlQFM8ux9vqDU9rn8rydIpb9PV6Q1mOc6+qyGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ac:e3:5d:6c:10:6f:c5:7e:59:97:11:2c:3b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=1ba4971ebed2ee58cdb70f2b2d4a356015dd2996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:66:d0:ef:78:48:f2:09:93:de:85:90:95:
7e:1d:19:e8:a7:54:b0:f6:4b:e8:e1:43:4b:72:fa:
bf:4d:eb:80:bd:0a:ff:9e:c7:d1:0a:a1:72:6f:e1:
2b:41:8b:d1:44:aa:3f:21:9b:d1:88:15:f8:92:e7:
11:ab:99:a3:b6:8e:f8:02:ea:40:ea:94:6c:b9:60:
e9:0a:cd:80:79:dc:8e:46:03:ee:49:1d:3b:56:16:
2b:9a:8c:81:28:67:e5:8d:84:a6:10:61:95:89:7d:
39:a4:8b:85:e3:29:04:14:c7:d8:3a:8d:f3:ce:33:
b1:ab:3c:29:1f:12:90:85:ca:65:58:4d:4c:0a:a3:
9f:66:de:af:17:8b:15:c9:87:36:24:fe:20:1b:59:
9a:34:eb:1b:c6:ec:63:5d:84:b4:2b:45:f8:9d:b1:
7d:5a:0a:62:ee:67:82:e9:dd:eb:33:93:60:68:d9:
6c:48:9f:3f:d6:2c:66:10:8d:7b:22:64:d6:a8:b1:
b0:98:ab:03:c4:5d:e8:08:7a:73:9d:14:1c:84:67:
c0:22:de:ac:ff:28:6f:8b:35:cc:3e:dc:5a:4f:6b:
1e:74:72:68:04:32:aa:a4:00:9c:b5:88:af:7b:e5:
7f:75:70:11:5c:28:ce:13:c9:3d:ec:2c:28:6f:e7:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A4:97:1E:BE:D2:EE:58:CD:B7:0F:2B:2D:4A:35:60:15:DD:29:96
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:28:df:99:1e:c0:ad:5d:e3:88:ef:a9:b2:0e:b4:45:38:14:
d9:3c:9e:01:0f:af:2a:02:4c:58:d2:45:3f:89:32:08:cd:22:
05:f9:75:6f:fa:05:16:64:49:6a:22:6c:5c:da:68:d8:58:de:
8f:07:df:f5:82:a6:8e:fb:55:7b:0f:db:1d:be:2f:17:98:04:
8a:f9:98:69:04:b2:58:97:3e:72:ac:5d:21:1b:b8:ac:9b:fa:
fe:e7:10:1d:5f:ec:80:2f:43:73:b6:9c:9b:86:5e:0e:d5:c7:
60:6f:0e:24:8a:46:c9:52:9c:48:01:24:17:fb:e6:c0:ea:03:
f5:7f:94:e0:2c:a9:97:85:bb:b5:f2:f3:6c:d8:fd:70:26:8f:
e8:6e:ac:82:b4:fe:7d:79:f3:23:c5:d9:2a:63:3a:bf:df:c0:
0f:00:45:0b:ba:60:18:7b:d6:d2:8d:35:81:3f:8c:e3:05:16:
2d:9c:1e:17:f2:24:69:15:2d:ff:c7:98:a8:74:9d:3c:04:f7:
4a:a7:9e:0c:7b:d1:3c:f0:f8:18:0d:98:7a:2a:b0:9d:61:a2:
f2:2b:5d:9a:2e:38:f7:4c:8d:b4:6d:2e:01:c3:d2:82:0e:e3:
4e:26:f8:45:91:f9:30:e8:68:e4:33:77:fc:70:50:92:f4:7e:
b5:d4:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:26 2025 by rpki-client