Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: FqBi33P7t8PN/gXGoNwG+tKXN0SLWbckGbRZvnb6blg=
Subject key identifier: 61:98:EC:8E:8A:56:DF:DA:30:97:B4:39:5E:44:01:DE:E1:93:CA:96
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 0194BC3CB6462B55ECB8EC9C6B852948B0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 0360
Signing time: Fri 31 Jan 2025 12:01:22 +0000
Manifest this update: Fri 31 Jan 2025 12:01:22 +0000
Manifest next update: Sat 01 Feb 2025 12:01:22 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: NviixGKaFPaYpaJHgMPm2DsDCoyHe7A1ZO7LxqEKCoY=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b6:46:2b:55:ec:b8:ec:9c:6b:85:29:48:b0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Jan 31 12:01:22 2025 GMT
Not After : Feb 1 12:01:22 2025 GMT
Subject: CN=6198ec8e8a56dfda3097b4395e4401dee193ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:5f:3e:e0:ad:57:f5:d6:57:bf:24:c5:52:
d3:0b:28:09:13:6f:a3:bd:36:e5:de:cf:3b:e1:d2:
5f:13:5d:0b:56:dc:15:51:81:9a:18:0b:88:51:73:
3e:d9:71:40:a5:c5:b0:87:ee:bb:b0:4f:73:d9:73:
66:cf:b4:80:7b:22:7d:60:2e:68:be:8f:55:37:a3:
e6:92:84:4e:16:bc:a6:59:46:38:30:ad:c1:6e:9f:
9d:37:89:1d:20:0a:de:6a:07:d4:b9:74:44:3d:8a:
7b:53:a1:5e:b6:5a:34:30:ab:ee:0b:99:73:84:67:
73:9c:46:07:a3:20:a2:09:de:4c:eb:48:2c:70:07:
7e:5c:0f:67:3b:1e:12:20:b6:c3:d6:bd:13:ed:7a:
84:7f:5b:a2:34:d9:96:b6:52:8b:ae:99:bc:0f:9d:
db:58:2f:6e:4c:2e:79:c2:c2:3e:10:c2:41:c9:43:
83:27:e6:16:23:4e:ad:b8:41:cc:0c:44:37:f5:b3:
57:71:7d:e1:11:ee:0c:17:d7:a4:4d:c9:da:e5:b4:
3a:b1:ad:47:95:e3:8b:be:63:d5:ef:76:ef:d5:71:
4d:6f:84:fc:ad:c5:d8:20:21:a1:77:3d:30:72:f2:
6d:40:ea:bb:13:43:90:1b:26:22:2c:c0:dc:43:a0:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:EC:8E:8A:56:DF:DA:30:97:B4:39:5E:44:01:DE:E1:93:CA:96
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5f:8a:aa:ff:7b:24:f8:32:5a:00:68:db:1d:89:c9:de:4d:
d7:4b:12:8a:75:a1:af:28:ba:b7:cf:86:c8:d6:d7:4b:e8:74:
59:59:8d:6b:3e:78:5a:5c:32:a5:26:44:27:85:5d:f0:5b:07:
04:ea:a5:b7:82:ae:ca:a4:57:05:29:8f:23:a1:03:c4:18:91:
eb:1e:f0:31:57:03:37:84:a8:02:4e:a1:b9:58:22:29:80:4c:
90:21:1c:0a:cc:36:35:3c:9e:b0:1f:e1:44:3a:c7:48:65:4f:
9c:c0:ed:67:ee:e7:c0:26:fe:83:c2:60:4f:cc:b8:6d:fd:cc:
e3:ed:08:4e:39:fd:50:9b:b5:24:9e:5d:83:cc:0f:41:47:de:
ba:38:08:81:18:c7:71:28:7e:69:65:1c:59:06:e8:f2:74:f0:
ea:56:37:14:e9:d9:60:7f:2e:05:67:70:8f:e1:9f:e3:11:12:
fc:ff:f5:75:85:39:26:98:3c:a2:e8:fe:ac:74:3e:cc:da:04:
24:a2:e9:30:fd:1c:9c:e0:76:81:02:0d:0e:96:7f:7a:73:52:
bb:61:c8:12:bb:e5:65:ca:3b:70:72:31:4a:47:a8:84:ee:0b:
42:84:0c:3b:2a:11:f5:40:7d:3a:47:e5:e4:c4:dd:1c:34:29:
15:42:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:40 2025 by rpki-client