Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
File: UsSOG7ZyzaaEZADov41taWg1178.mft (raw, json)
Hash identifier: HyaCJ2+PMs6YW1oUHieLu/+Ic7UW7cQiKvo7U2BNCYE=
Subject key identifier: A4:6D:22:46:6C:C1:21:A8:F1:13:E6:67:A9:99:66:A8:94:75:4B:FB
Authority key identifier: 52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
Certificate issuer: /CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Certificate serial: 0194BBCDFE2D06EAFC273B5286668631C2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
Manifest number: 0661
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: UsSOG7ZyzaaEZADov41taWg1178.crl (hash: wT15uDtNZokh1zg22PYYn6bePjSbmaAg6uo/+NBA8Ts=)
2: iWu72NaaTSDAiJGqIVfKYfSk9Cg.roa (hash: BiHkYnw80HRUON814fdKI0ZwVn2DSPqeEkVU4t9Jnsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:2d:06:ea:fc:27:3b:52:86:66:86:31:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c48e1bb672cda6846400e8bf8d6d696835d7bf
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=a46d22466cc121a8f113e667a99966a894754bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:1c:14:89:57:76:6f:35:3b:8d:d1:96:a7:
90:c5:ef:8e:98:94:e1:7c:fb:bf:94:29:81:d7:bd:
70:64:ac:2b:da:67:dc:b1:32:09:c9:fd:70:de:09:
e0:bb:55:89:30:42:1c:0b:19:43:ac:7e:55:cc:8d:
fa:a2:de:3e:36:05:b7:89:72:51:4a:eb:02:14:0a:
77:64:bf:28:7e:0b:0f:a3:e0:eb:74:84:ef:b3:e3:
5a:14:d7:4d:de:69:61:de:14:ff:12:c4:81:4c:d6:
07:f1:23:76:fe:b5:c1:72:70:d9:7b:84:e7:fa:a7:
c2:81:ae:96:59:14:b8:ca:dd:18:07:5c:e3:77:5e:
1a:62:d5:f9:54:6c:99:cf:1d:23:de:52:37:68:27:
7b:2a:48:58:59:6e:6d:c4:1c:db:4b:01:00:9d:b5:
9c:bc:70:2d:43:99:79:74:eb:90:8b:af:e3:51:1c:
fd:fe:52:48:83:8e:93:e5:a8:ec:96:bd:a7:7f:df:
ba:84:fc:00:99:a6:92:a0:70:5d:be:80:f0:b7:ef:
7c:ab:d7:5f:d9:f6:b4:b1:3e:c3:1d:db:88:b0:2e:
fb:5f:24:7b:cb:b7:33:9f:13:f1:b1:f5:ee:98:35:
c8:03:9c:2c:6b:3b:4b:17:c7:7d:8b:d3:6f:3f:66:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:22:46:6C:C1:21:A8:F1:13:E6:67:A9:99:66:A8:94:75:4B:FB
X509v3 Authority Key Identifier:
keyid:52:C4:8E:1B:B6:72:CD:A6:84:64:00:E8:BF:8D:6D:69:68:35:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsSOG7ZyzaaEZADov41taWg1178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a5e94c-08be-4fce-8ec9-18ece368266f/1/UsSOG7ZyzaaEZADov41taWg1178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:bd:eb:20:f1:dd:cd:6a:fb:d4:5c:79:1f:df:34:d8:21:
f7:c8:e4:d5:1e:12:87:70:f7:05:48:71:3b:43:7a:17:d9:a1:
f8:4a:56:26:94:c2:8c:21:1c:ac:89:2a:90:e5:ce:10:81:6e:
9c:67:72:e5:3b:94:7f:bb:8b:ab:08:a7:b9:e4:91:90:86:dc:
e1:03:d5:55:94:ec:2d:2e:64:c3:53:7a:1b:48:42:ad:62:7c:
c4:39:fc:f4:02:04:93:0e:63:30:c7:a4:06:59:a8:3f:9e:41:
e6:7d:12:24:ec:a6:b9:81:9d:7d:47:d3:3e:93:e9:00:af:6f:
0e:80:c5:8d:13:47:06:95:9c:c8:54:96:ed:c4:b4:9d:6a:0d:
f7:1b:24:a6:ed:ad:c1:e5:c6:06:fe:38:6e:e7:2f:d8:19:b4:
76:9a:81:32:6a:07:98:0c:28:f0:e7:45:03:09:68:3c:e9:f0:
04:b4:4c:4b:68:19:c3:a0:d0:91:2a:8d:02:90:19:ce:3d:f3:
38:01:68:b7:f7:6d:b5:10:c4:d0:b3:8f:1c:3d:86:ae:d9:e7:
2f:20:c3:ea:05:b8:bb:7a:20:00:88:8f:6e:65:ed:f9:ae:99:
a8:a9:40:d2:e4:2e:f4:89:6d:26:ff:9c:55:be:07:17:f0:a2:
90:a8:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:56 2025 by rpki-client