Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: 7WFm5oWkE25REV65Zy4JY9AFmfaXM7ETQVZHoGDq6rk=
Subject key identifier: CB:AF:93:FC:A1:EA:60:17:07:D2:21:A9:91:8E:C2:7C:6F:D0:CA:32
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 0194BC72F73042FEEFC0A7264AF11D5CCA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 13AC
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: sBaHgwMGlV2UxqECjfZbB8uIjfeQpwDytSAgrWjyeA0=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f7:30:42:fe:ef:c0:a7:26:4a:f1:1d:5c:ca:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=cbaf93fca1ea601707d221a9918ec27c6fd0ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:3d:8f:1f:9d:06:69:ad:24:1b:5b:1c:48:
be:39:f9:6b:28:ee:84:56:72:31:a7:d2:b5:38:a0:
bb:e1:55:aa:2c:d0:5c:32:27:6b:34:d5:d8:f5:1f:
a6:05:20:99:7c:d5:bf:45:52:9c:78:8a:d5:72:d0:
6c:40:ca:f6:93:da:09:4b:6d:7d:e0:51:18:29:61:
8c:04:50:c9:8a:4c:a4:a0:6e:f7:95:29:c2:10:9e:
df:cc:25:d7:05:d8:5a:05:a9:ed:5b:e0:37:b2:38:
79:08:78:f9:82:97:42:3d:3a:fb:bc:5a:6b:65:47:
97:cf:f7:e3:30:fb:fa:3c:4b:13:7d:dc:06:b4:db:
71:5b:e7:c7:fa:62:22:6c:c4:48:ea:a2:19:19:1e:
c0:90:22:7c:be:7c:00:67:e9:1f:4e:bb:f4:65:bd:
75:85:93:4d:62:94:38:88:08:9b:7b:fa:20:5b:10:
ee:87:46:fd:ef:c7:45:8f:c9:4e:95:fe:fb:64:f2:
2d:77:05:2c:dc:82:b9:e7:53:a0:b3:3d:e1:44:2f:
11:f1:27:ea:db:ad:df:e5:dc:46:52:f1:a0:dc:f3:
9c:61:26:b8:9e:1d:cc:9e:7c:95:f3:ff:0e:c5:56:
6b:62:df:7a:e6:b1:48:58:42:50:6d:d9:15:61:04:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:93:FC:A1:EA:60:17:07:D2:21:A9:91:8E:C2:7C:6F:D0:CA:32
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:23:80:f3:89:0e:47:37:c0:fd:0e:1b:6b:f9:99:e4:87:27:
c2:48:11:cf:ca:09:f4:79:44:6a:84:65:30:6e:a7:4f:9d:2c:
9a:98:22:a3:c6:5a:0c:f4:67:5a:21:63:b1:5d:17:6b:9d:a6:
e4:6d:48:6a:3a:5f:8c:ed:a9:d3:f7:b3:8b:df:ab:b6:5b:8d:
16:09:d6:b9:09:6f:8d:8a:59:df:58:c1:b2:92:d5:33:a5:b3:
8c:e1:fb:d8:b3:e5:69:95:e2:4b:c1:af:b3:56:a1:a9:6b:d6:
78:4c:6d:b4:e8:98:97:55:95:ef:c9:03:28:dd:47:94:77:94:
65:1d:6b:7d:4e:9d:4e:7c:c5:f9:1b:31:60:8e:a4:75:2c:f2:
21:46:4f:b1:01:ee:8c:64:58:39:b3:c0:3e:bb:8c:71:98:4b:
db:02:1c:21:91:a9:db:af:02:60:bd:c8:6f:f5:1d:08:dc:18:
5d:b0:a1:b4:2a:c6:f3:94:93:26:9e:16:8a:31:69:09:61:dd:
3a:78:39:15:b7:20:05:1a:3f:89:75:af:94:96:12:18:6b:0c:
ab:a3:7b:11:a0:5b:33:3a:14:aa:28:12:09:44:2c:af:72:9f:
83:64:3a:84:d3:a7:9a:bd:bc:60:14:14:cc:a4:bb:00:1b:4e:
48:0a:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:50:20 2025 by rpki-client