Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: ga+GjHv3Z+6dpg5yvkCKJa7rw9skrsXEW3oMfTyC3v0=
Subject key identifier: 4B:BA:63:8E:32:77:43:61:2C:26:4A:D5:DE:3E:84:1B:24:C3:3C:80
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 0194BC04B8F072BABDF46F5E4A5E39BF3584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1185
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: xuOo148lw2Tfk+STi+S16vmG6+Rc5zGjfxl/C/BtrNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:f0:72:ba:bd:f4:6f:5e:4a:5e:39:bf:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=4bba638e327743612c264ad5de3e841b24c33c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:d8:f7:c8:5f:87:9a:3a:78:ae:22:87:ad:
6a:13:39:69:ab:be:a3:af:5c:bb:6d:15:00:a6:1b:
81:d0:58:b8:c7:26:6f:a8:7a:e4:14:05:04:79:ae:
8b:02:9a:06:06:eb:0a:04:6c:5d:8e:c5:6a:0b:30:
13:f2:89:3d:05:94:ae:6e:86:9a:08:50:f6:93:c1:
8d:80:e7:af:e2:a0:43:87:db:06:c1:79:73:64:75:
d5:dd:96:d1:f1:c5:b7:2b:8f:d7:d3:14:80:5b:03:
04:5f:8c:87:cd:1a:24:8d:6b:2c:fa:79:4a:e4:9d:
5a:9d:93:b8:1b:16:13:f6:db:9a:c7:44:6f:72:8e:
83:95:7e:3b:28:f3:93:c7:0f:12:52:89:95:22:c1:
00:f9:17:72:0c:f0:7b:06:fe:2a:fe:6c:bb:58:f8:
86:35:9e:eb:52:e9:88:9b:ac:c0:83:a8:c5:0b:9d:
18:59:51:96:6a:ef:89:de:a9:d4:68:fc:28:d1:f1:
f0:77:72:e3:55:dd:5f:fc:04:07:c9:a7:7d:a2:f2:
10:bc:85:30:f9:54:2b:10:e4:06:e9:96:61:c8:c8:
4f:59:26:9f:70:b0:fd:54:4a:e9:e3:e0:37:42:ec:
62:ef:99:97:22:1b:61:53:5d:16:12:8e:0e:18:aa:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BA:63:8E:32:77:43:61:2C:26:4A:D5:DE:3E:84:1B:24:C3:3C:80
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:49:3c:12:f1:eb:72:e5:09:b6:a4:4a:d0:8c:14:65:95:
c5:6b:95:6d:e9:b4:1e:63:cc:63:7f:d7:d4:c9:c7:21:30:39:
78:a0:93:5c:64:9f:cc:5a:71:26:d7:7e:0c:ae:78:5a:8a:67:
c1:8c:01:74:58:c9:79:eb:09:20:6e:d0:08:d7:79:39:27:0e:
e7:22:c1:ad:e2:57:2b:4f:d0:d1:dd:5e:2f:7f:6e:1d:0f:4c:
fc:31:7f:b2:08:f0:3b:2d:b4:a1:72:e2:8b:b3:dc:53:58:cb:
19:25:40:32:39:60:68:a0:b7:f9:74:5e:66:cb:54:26:d8:79:
9d:4f:31:1d:59:5f:e1:56:58:c9:04:79:37:a6:28:5c:92:65:
88:55:37:85:be:58:73:2f:aa:c9:b5:db:9c:3a:2c:a9:19:a8:
89:c4:20:06:09:c2:22:07:d8:fb:46:13:20:9c:d3:ef:92:17:
32:a5:f0:a1:c5:ed:b6:1c:62:6d:72:22:eb:e0:6d:09:e6:88:
64:cc:93:74:a7:4d:21:53:a6:db:71:ea:df:30:8e:d7:2e:9e:
60:ca:dc:68:35:b6:c3:5a:c0:a0:5a:11:66:91:e3:e2:7a:87:
1f:62:08:b1:1e:f7:b6:6f:28:c3:9c:50:7f:8c:27:72:ed:72:
9f:e5:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:23 2025 by rpki-client