Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: LV496S6B0XilK1qjb6ZURy06Fgv9zp4VWHvCbkK4cwU=
Subject key identifier: 64:52:17:FB:48:BA:8C:76:86:E2:35:B9:CD:07:B5:DB:91:41:D8:E9
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 0194BBCEE87D4C6E029550EC714AA1EF0C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 0F70
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: dHzRjQErsyHTyuBlLhMUGFwkHuibZvrjJ/9Zu+wgZPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e8:7d:4c:6e:02:95:50:ec:71:4a:a1:ef:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=645217fb48ba8c7686e235b9cd07b5db9141d8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:a7:2a:1f:99:cc:ca:80:0e:29:42:dd:07:
c1:ff:38:50:4a:27:6e:e4:14:ca:fe:92:ac:f1:c5:
ca:4f:cb:9a:5e:c5:0f:97:66:19:c4:52:c7:23:88:
d4:06:15:81:d8:b0:90:28:9a:87:7b:34:8b:ec:ae:
e1:73:69:94:cd:0f:ed:13:59:bd:6e:05:43:18:7d:
0c:fc:a3:03:3c:95:c4:60:d3:5a:ca:28:fa:b2:ea:
02:94:0f:45:f5:40:b6:be:6e:42:25:0d:97:d1:ac:
12:df:e1:c3:71:56:fd:d2:bc:99:75:28:9a:69:aa:
0b:a8:8a:cc:c4:28:8f:e6:e9:31:65:cc:5a:11:64:
a3:39:33:df:b3:d9:04:69:d2:b5:8d:d4:a4:04:01:
f5:53:29:5e:24:1b:3d:0c:51:30:98:35:2b:dd:fa:
f9:c9:f9:00:23:97:fd:d4:34:83:f9:9e:71:1d:70:
85:c4:88:20:f4:c9:35:1b:5f:54:6e:cb:5c:29:db:
7f:8c:22:aa:a7:61:25:91:96:83:10:77:34:08:d3:
51:e6:a8:de:8c:7e:0b:d8:b5:c0:1e:71:01:72:ca:
cb:75:1c:8b:d1:6c:f8:f7:d2:bd:e0:bd:39:b2:67:
b3:2d:9f:35:bf:94:fe:56:4b:e6:7f:e3:17:a4:27:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:17:FB:48:BA:8C:76:86:E2:35:B9:CD:07:B5:DB:91:41:D8:E9
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0f:65:a5:1c:37:26:40:78:c5:b6:b1:dc:b1:6b:2e:3f:ba:
53:54:58:1d:cc:7f:d8:7d:6d:e0:7e:ff:60:9d:4a:ce:1c:37:
29:3d:6d:84:6f:d3:16:75:27:57:e1:c4:77:d2:d2:7a:8a:9d:
58:d8:7d:6e:7e:08:ff:ef:2f:96:eb:74:49:11:d9:00:4b:90:
5a:c0:78:63:10:93:85:ac:8c:2e:90:81:aa:a8:c8:4e:d4:71:
ee:f2:72:96:40:f7:b0:88:e3:5b:b0:5d:ac:f5:e6:53:ee:4f:
0f:21:93:1e:ba:68:bd:bb:89:25:15:ad:0f:c6:81:6b:ab:ee:
71:9c:3e:30:85:fd:65:7b:c0:f1:a2:fa:f4:86:22:cd:0a:31:
fc:0e:8a:ea:5b:16:0a:22:df:06:03:35:8e:75:cc:81:ad:98:
e1:b7:e8:c2:fa:7c:b9:b0:83:fc:1f:fb:93:0b:31:25:7d:e4:
67:08:ec:7a:73:10:5f:3f:20:ec:4b:51:2d:90:79:e4:0f:0a:
02:2d:73:e7:04:a6:59:21:04:eb:93:e9:dd:73:63:00:e5:fb:
75:4c:fd:b9:57:cb:cb:6e:ac:f1:d4:99:dc:29:a8:2e:9e:7c:
aa:af:3a:69:7f:6b:47:2a:78:2d:4b:2c:3a:fb:da:ca:26:cd:
c9:af:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:22 2025 by rpki-client