Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier: qiMy7wvE0UuWwDbeTUNIhyptxJ8GVQCMvKxPDL++G5o=
Subject key identifier: 65:93:78:7C:F4:CE:92:65:AE:51:FF:9C:41:FB:6F:4F:AB:7A:79:C6
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 0194BD1783CB220B83B09917A753088660FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: eWIH5kERXXeVg/3ChotmCGq27392d5sA7Sojiiv1lLY=)
2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:83:cb:22:0b:83:b0:99:17:a7:53:08:86:60:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=6593787cf4ce9265ae51ff9c41fb6f4fab7a79c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:c0:d5:95:f3:de:84:b3:53:18:a1:1c:77:
c4:92:35:e2:26:39:ee:0a:87:91:b0:d6:95:a3:e3:
75:dc:2e:8e:bf:85:69:16:4c:30:70:9e:a5:db:60:
f3:39:0c:f3:5f:49:a4:4b:36:15:6c:d5:a8:4f:ff:
ca:72:7d:62:cb:c4:10:d0:e7:53:90:6a:3b:b9:d9:
bb:24:ec:e9:a0:cf:73:a1:4d:87:52:8e:11:c2:a1:
59:28:13:92:48:7b:72:2c:36:58:bc:ff:b6:a7:7c:
2d:78:3e:4f:6a:55:da:a2:d3:14:16:94:a6:bc:67:
23:bd:4b:b6:68:6d:3d:26:80:bd:f6:9e:0f:36:b6:
8f:03:33:b2:3b:53:8a:fa:53:24:b1:da:df:3d:a5:
ca:5a:c9:7d:c2:3e:f7:6a:19:b1:e8:59:79:88:19:
a0:c2:86:ec:57:26:81:c5:15:1c:31:15:38:43:05:
8c:cc:91:53:e1:01:90:e2:de:42:92:b5:10:3e:26:
c3:e5:60:2d:e1:6c:4c:cc:da:e1:53:62:3a:27:bf:
cb:58:e4:ae:30:b7:1d:d0:42:40:d6:d9:fb:e9:16:
5c:4f:5e:eb:13:80:fd:59:08:85:d9:89:0e:ff:fd:
29:d1:95:5e:88:b3:42:d9:29:c9:14:41:f2:16:11:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:78:7C:F4:CE:92:65:AE:51:FF:9C:41:FB:6F:4F:AB:7A:79:C6
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fa:d8:0d:ba:a2:8b:20:f4:ff:5c:90:82:aa:37:7f:05:79:
87:8f:0c:bb:d8:7b:2a:5c:7a:42:bb:69:85:e0:8e:6f:cc:66:
e6:00:c1:db:2f:cb:27:2a:39:d2:3a:34:67:c0:c4:09:26:21:
a5:13:50:a8:75:2a:be:35:b8:96:de:b7:81:93:46:03:0a:bc:
88:64:e8:a2:3b:4d:22:17:6b:f1:df:70:91:45:30:3a:81:a1:
71:78:ac:12:20:59:1e:23:16:ae:36:02:c7:43:55:f5:3e:a0:
be:c5:74:91:64:0c:5f:7b:99:43:b0:1d:ca:a5:7c:fe:73:17:
9e:d0:98:15:4b:68:e5:e5:74:32:2e:2b:db:a6:c8:d1:1b:cf:
4a:01:1d:47:7a:50:90:66:54:5c:0a:9c:ba:a3:e2:1c:b7:3d:
72:07:b1:20:58:39:8d:7b:a0:7d:c0:9a:6a:2d:d6:c0:25:1e:
83:7e:d1:13:5b:fe:24:95:0d:90:df:4e:5b:aa:c4:9a:1f:90:
b0:b6:7b:91:2d:3d:e0:0c:d5:12:c2:8a:67:c5:08:f2:7d:24:
f6:5c:6e:82:8e:6a:5a:de:dc:21:20:a4:73:89:1d:89:db:c4:
a1:f3:a0:25:bc:27:16:64:de:fb:f7:21:a3:78:d1:fd:38:75:
10:76:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:39 2025 by rpki-client