Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
File: UrEszH6hBoww14yVXFa5djvPO00.mft (raw, json)
Hash identifier: I7U7Q7OgaDM+elT3FKQ6/1AdLHtwuzutfcJWSBAxuL0=
Subject key identifier: 5D:FC:7A:F0:81:D5:E0:7C:47:05:5D:9E:0D:EF:3C:84:36:4E:BC:EE
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Certificate issuer: /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial: 0194BBCEB3C4E675F7362100CADAF649A2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
Manifest number: 0770
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: DHimsh5cf4B1cEow5B0sOoa89ZU.roa (hash: 4QGyiwHML4yioXbByOLrPfTNUUAH8+dM2e00mLX0LYc=)
2: UrEszH6hBoww14yVXFa5djvPO00.crl (hash: mn8k+VX1aJU0m12Coh1IyKH2aFvMWcOG5tu5f23uaCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b3:c4:e6:75:f7:36:21:00:ca:da:f6:49:a2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=5dfc7af081d5e07c47055d9e0def3c84364ebcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:ba:f5:f2:14:4f:80:ba:5d:1a:2f:44:85:
c5:c0:37:d7:8a:18:a2:bd:ca:7f:2f:6d:66:da:5b:
e1:dd:ea:e3:96:df:00:4a:37:66:66:b2:04:6f:39:
bf:53:4e:4d:37:e4:cc:df:7b:00:c1:13:26:37:23:
7f:f6:b4:7e:89:24:15:51:9f:84:09:0e:84:db:79:
c2:a6:a7:38:b4:7d:86:2d:c4:c6:05:0b:70:0c:71:
ed:75:75:ae:f1:f4:a8:e8:ac:fa:71:3b:6b:d3:6c:
58:64:98:eb:2e:0c:ac:34:69:03:f2:99:19:59:5c:
da:68:50:86:20:c6:df:7e:f0:39:0c:56:83:21:9f:
62:08:62:41:16:ac:6c:24:85:c8:e8:98:82:48:f7:
81:a4:fc:2f:f3:e5:01:be:e9:fe:6d:73:57:b2:b4:
8b:1e:42:3a:7b:57:f8:4e:dd:ee:f6:b2:46:9d:f9:
0b:1d:64:03:ab:87:07:7d:95:f0:cd:c9:a4:42:da:
6d:1c:b7:0b:ab:66:a5:19:4d:74:bb:da:82:3e:c6:
50:5f:7c:ed:87:d7:77:ca:c4:ab:0c:81:eb:cd:a2:
4b:7c:ae:b0:b4:df:94:07:7b:59:ef:ab:00:e1:16:
50:5c:f1:65:69:37:b1:3b:76:12:8c:8e:f0:c1:74:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:7A:F0:81:D5:E0:7C:47:05:5D:9E:0D:EF:3C:84:36:4E:BC:EE
X509v3 Authority Key Identifier:
keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:14:43:71:cf:e3:70:5d:fe:e7:24:41:45:01:a4:ba:72:
7e:75:a5:49:92:99:50:c2:6b:da:e6:53:97:0a:6d:2f:5a:e0:
d4:9e:9d:c3:48:e4:c4:fd:b8:8e:78:a6:e7:a5:69:68:64:51:
07:95:e0:9c:30:80:7d:48:d3:22:fb:93:7b:99:9e:47:b7:17:
16:82:06:cd:63:48:e1:d9:2b:6c:64:dd:2f:f9:2d:08:dd:01:
6a:38:fc:b0:12:f6:fb:3c:29:f6:1d:6b:b8:7c:8a:5b:66:d2:
ac:43:9f:1c:1c:7d:96:9d:38:47:98:8c:4f:87:3b:89:e4:a1:
8f:03:da:7d:0b:a4:67:fd:8b:65:e4:1e:5a:a9:dc:85:1b:02:
94:a6:04:d4:05:39:41:4c:9b:aa:31:be:fc:8c:5e:9d:34:d2:
50:e0:51:40:6e:51:89:9f:e6:1f:f0:81:7e:3c:b4:07:c2:e7:
37:f9:ac:45:e0:6e:64:93:60:07:4f:35:99:ef:d3:2b:2b:02:
93:89:68:8a:15:ba:b9:01:3a:00:40:80:04:00:b3:85:07:de:
f4:bc:cb:e5:86:3a:61:81:aa:bf:14:47:94:0f:61:56:ff:f4:
e5:b0:8d:50:5a:ca:90:3e:42:f0:e5:74:a9:23:e1:a6:03:46:
f0:ef:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client