Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
File: USt7qR3DDrtBPNBVvUMpLi0UAY8.mft (raw, json)
Hash identifier: 6Dbl4HzH8tmkac7D6BT3WzB1MfUDqNCHdb7VjLj61Ew=
Subject key identifier: 7D:68:31:1A:51:CE:7F:18:1A:71:7D:64:52:0A:8D:AB:37:71:C2:58
Authority key identifier: 51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
Certificate issuer: /CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Certificate serial: 0194BC04D8A2A4A6347A9335C5E3D28F4F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: USt7qR3DDrtBPNBVvUMpLi0UAY8.crl (hash: QPCFFBm/JrHVfZGOqNvEWrTJGestQltmOaTFPJdXklY=)
2: vloVVT9ufVGR6rj5SefMS3qmK1c.roa (hash: /V+TKP3WFA5NtQkzEdfMB+4hHPZcd6oAqeonzaeqn0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:a2:a4:a6:34:7a:93:35:c5:e3:d2:8f:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512b7ba91dc30ebb413cd055bd43292e2d14018f
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=7d68311a51ce7f181a717d64520a8dab3771c258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:45:29:2c:3a:59:6f:ad:ec:38:68:88:40:
95:47:f7:f3:22:b5:be:10:a4:ec:aa:6a:d7:1a:e9:
11:24:4c:90:fb:65:e6:12:90:0c:11:6d:06:d8:6c:
2a:4e:66:1d:ee:54:4d:f0:57:f1:80:f3:0a:e3:cd:
c1:80:99:81:fc:ff:f9:3b:7e:82:d0:9b:d4:c7:f0:
26:c1:f0:2b:8e:98:44:50:cc:58:04:95:c9:16:df:
f8:d0:de:6c:71:e1:e4:ae:5f:c0:cf:66:83:53:37:
8e:3f:8f:0d:40:6b:83:40:5e:ab:99:41:68:2a:75:
c0:28:6e:48:f8:87:93:37:65:01:77:45:30:26:2c:
4f:14:11:e2:d6:c7:d3:1c:e7:64:e4:0c:a2:b5:14:
c9:72:18:63:4c:57:f6:87:52:22:28:de:68:6a:c6:
f0:1d:27:df:e7:8f:bc:e3:66:bf:1f:ec:11:e2:36:
d9:25:7d:26:18:e1:cc:1c:2e:26:c1:84:52:63:82:
57:0f:62:b0:ef:0f:b0:88:98:85:90:26:e9:c2:81:
50:85:57:50:48:0f:4c:f9:61:f8:1a:69:04:05:ee:
fb:36:ee:b3:26:2f:f4:a8:93:82:28:96:cd:95:85:
d8:d9:4c:21:33:8e:84:a3:f1:7e:c1:0d:69:b3:9b:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:31:1A:51:CE:7F:18:1A:71:7D:64:52:0A:8D:AB:37:71:C2:58
X509v3 Authority Key Identifier:
keyid:51:2B:7B:A9:1D:C3:0E:BB:41:3C:D0:55:BD:43:29:2E:2D:14:01:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USt7qR3DDrtBPNBVvUMpLi0UAY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/63fe9e-60a0-4f80-8c01-1673749bceec/1/USt7qR3DDrtBPNBVvUMpLi0UAY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:b8:44:f3:72:c7:df:b7:b6:4b:d8:7e:11:61:e6:bd:1d:
df:5f:b5:2c:89:8b:e2:89:b7:f5:1c:ab:eb:b4:5c:1e:73:16:
ea:7b:58:22:46:7c:a2:6c:0c:26:34:43:8e:a3:dc:53:79:33:
2d:91:63:2e:90:6d:62:f4:6d:25:66:f6:91:d3:f0:75:ab:62:
a3:bd:31:d0:a2:d1:83:03:12:79:cd:24:ef:4f:e0:f7:5a:f1:
82:24:81:11:af:51:05:95:ac:a8:2f:8c:65:5f:3d:65:7b:8a:
89:16:d5:ea:fc:a3:97:e5:6b:94:b2:a8:0d:7c:04:ac:27:7d:
20:59:7a:54:fa:3b:8c:8d:7c:c5:c5:bb:ed:53:37:fe:02:d9:
01:47:f5:65:99:e4:c8:c5:35:c9:eb:74:36:30:43:1d:1c:13:
35:13:c0:ca:53:0a:f7:b9:0e:39:00:d5:70:c7:66:62:0b:a0:
b0:a3:28:10:22:6e:0e:5b:d1:55:a4:e1:45:88:f5:a4:15:d2:
bd:4d:a3:b3:88:ab:33:6f:de:39:83:96:f3:4d:86:d6:be:b5:
ab:99:e5:ad:6d:d0:37:95:aa:90:6d:24:32:7c:b4:27:89:e1:
b9:18:b5:1f:dd:b6:30:31:a7:b0:b2:02:d0:e9:b9:f5:97:ea:
f9:48:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:21 2025 by rpki-client