Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: B/wclnrMG5sifl0PLHPZoP3sBmrsWZkH0J2eaCnbHyg=
Subject key identifier: 2E:06:5B:85:21:4C:7B:78:01:99:23:A1:34:B6:83:E5:5A:BE:6B:73
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 0194BD85B5A413810E413FB5D1F4C9D05E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0CAE
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: PrJQJT3uctgSQDhbXg7t6tQ4QrM.roa (hash: gya9esJQBziUpHHO9F+UZbaGJJEGL38CeXZKg65ppYM=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: UF9O5vA+dMgi+JHwnwxyxj0iNHUQdp3eQeIyY5IlWEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:a4:13:81:0e:41:3f:b5:d1:f4:c9:d0:5e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=2e065b85214c7b78019923a134b683e55abe6b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:a7:4b:fb:b2:18:36:f6:ee:d7:4c:07:1f:
2c:ce:c5:38:18:ed:95:b1:ec:01:59:34:ae:78:9f:
fa:a1:77:ab:9c:70:1d:ea:02:8b:c6:9e:39:17:93:
93:5c:3f:3e:69:2a:bb:0d:74:0b:ce:44:84:fb:5e:
a8:90:bc:63:06:14:fb:0c:ac:34:96:9f:6d:b9:e8:
c8:62:81:55:e8:4f:a4:f1:20:d4:ee:9f:65:fd:a4:
35:b5:b8:64:14:78:b9:53:1a:ff:c5:92:20:4c:1d:
45:14:d2:1f:b5:cd:04:78:b7:7f:f0:31:e2:61:5e:
b5:3f:93:8f:5f:70:de:d2:aa:b9:bd:64:d2:ce:7c:
b5:3c:28:e1:3b:a7:c1:7f:01:db:8f:c8:3c:34:69:
14:d6:23:55:ed:bd:2a:54:94:30:ae:c8:32:86:52:
15:ad:40:05:1b:bb:f6:27:b7:8b:6c:0d:f6:38:59:
18:98:b0:d9:b5:2f:63:98:aa:46:81:da:60:97:30:
fb:2c:8a:6c:d1:42:2a:d3:25:b8:a6:02:9b:e3:3b:
3f:18:3b:60:fa:db:30:18:f2:73:28:41:e5:37:74:
9e:46:bb:c1:d4:ab:96:d4:0a:2b:ce:16:b6:7e:dd:
cf:00:79:4b:da:66:a4:78:70:6d:09:91:c8:83:18:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:5B:85:21:4C:7B:78:01:99:23:A1:34:B6:83:E5:5A:BE:6B:73
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cb:21:52:80:c5:a3:29:79:6b:03:e9:2f:8a:a2:33:8b:5e:
f9:d2:2f:ae:f9:9a:18:df:10:39:ef:fc:75:2d:f5:dd:be:2b:
20:90:4a:5b:c4:b7:80:63:12:46:88:1c:70:23:25:6e:ce:53:
cc:6a:9d:96:3f:31:9a:7e:db:95:b6:d9:2d:cb:6e:7f:ad:9b:
ec:ef:4c:6d:a7:e3:01:e5:9c:6b:1e:99:9b:a9:fe:f3:68:73:
ce:6a:d3:20:09:b6:46:02:9c:51:0f:24:e4:5d:cf:90:0a:da:
dc:b3:a7:b0:14:f5:ec:e4:39:e8:25:9a:96:5b:16:fb:c0:1a:
97:4b:0e:a7:f0:fd:50:91:33:ac:c3:a5:c2:b0:a7:bd:ae:7d:
bf:77:37:dd:77:d4:ab:63:a6:3d:bc:91:51:04:10:04:37:0a:
0d:36:45:42:93:5e:3d:34:81:75:d4:c7:ab:87:a3:d8:8a:eb:
3d:31:df:80:43:1d:97:36:36:3a:99:23:0f:03:42:52:5c:ae:
76:26:08:30:9c:2c:c9:a7:85:d9:59:16:40:3b:90:1c:1a:ed:
09:da:43:84:88:28:30:00:98:5b:9d:fa:35:a7:55:f3:fc:ac:
af:0c:6b:4c:ac:f3:06:e3:a4:de:a6:b3:d1:03:db:9d:52:72:
4b:14:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:04 2025 by rpki-client