Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier: U4deDNuac6x0vPo8mD6W+8Nbwj9XMMF2fW6MVMOMEbM=
Subject key identifier: 11:7F:8C:8C:9D:DD:26:70:02:D8:7F:00:C1:A6:AD:9B:53:B8:8C:94
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial: 0194BC3C173C356C2E17C51BD904B7215FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: PKJMCBFHp3GoME3zaOw3K8O4f8g.roa (hash: VdafeTRYhwONwWw7fBt7vi6QA2+aLrk8KggdCEObnJ0=)
2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: us+LceFgp8i/9/tDNo13ldVSAX7OIuAo2pLt/JvsiFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:3c:35:6c:2e:17:c5:1b:d9:04:b7:21:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=117f8c8c9ddd267002d87f00c1a6ad9b53b88c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:85:01:c4:4d:0c:0c:1f:27:0b:d0:e9:60:
91:e1:ab:62:5c:38:df:92:cd:48:1e:03:6a:8d:4c:
33:64:73:39:7a:6f:f0:61:cb:ed:94:0f:cc:f4:e6:
5f:0f:09:4b:bc:b4:cf:0a:75:8a:ee:a7:bb:88:f7:
fc:1d:55:4c:fa:98:96:9e:69:0c:e0:04:55:c8:f8:
e4:53:e4:c8:e0:4e:46:4c:b3:c1:a5:0d:79:c5:a8:
f2:ad:0d:fb:c6:61:a4:49:8f:2f:6e:e4:f4:e0:f9:
4e:83:a4:59:96:12:8b:40:50:d6:eb:ba:c3:97:db:
6f:c7:7b:08:ab:5a:87:89:af:9f:b2:39:ef:66:17:
5d:1a:88:61:a5:3d:6c:a4:1d:2e:c9:2e:07:db:b2:
c2:91:6a:05:1e:48:73:66:4b:da:0e:a2:ab:4d:35:
4d:44:db:2c:35:ba:b0:39:ff:ee:d1:c2:ad:3a:e7:
7a:a0:8a:f2:29:84:94:3e:01:b2:2e:92:d5:c8:eb:
10:75:6f:17:88:1f:12:12:a3:4f:ee:a9:7d:25:93:
c9:22:b0:5b:6e:e4:90:e1:c2:6c:d8:56:f1:a9:65:
de:4d:d2:1b:83:52:31:03:87:62:21:4f:e8:2d:ab:
35:a6:f9:b7:53:36:35:01:fc:41:f7:87:45:25:5f:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7F:8C:8C:9D:DD:26:70:02:D8:7F:00:C1:A6:AD:9B:53:B8:8C:94
X509v3 Authority Key Identifier:
keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4a:fb:4a:54:bc:20:5e:e1:de:64:a4:2d:d5:1c:ed:87:33:
1c:6b:a9:27:0c:95:7f:48:51:ff:04:53:ac:17:aa:de:5e:06:
ff:f2:84:dc:6e:c9:c7:e6:ed:51:30:ec:82:1b:93:da:40:e3:
42:a8:6e:05:3c:93:c8:e5:3a:9b:58:ab:36:b9:64:44:8a:07:
10:b0:83:ca:1f:89:82:23:04:4c:9a:71:86:f4:25:57:3b:a5:
c2:cc:1c:c0:e2:e0:e3:c7:64:81:e8:e8:3e:2a:4c:83:1d:f2:
81:a3:21:1e:97:a0:13:7e:99:cb:4c:49:63:f7:14:f7:f3:1d:
3f:98:fd:55:21:ee:61:ab:14:46:f7:4e:2e:02:41:c8:00:a1:
eb:4e:3e:5c:e6:44:97:e0:ee:a6:09:d3:87:d7:7d:eb:eb:59:
c5:0c:56:49:5a:d7:ef:bd:c7:bd:e9:f5:40:7a:f4:ef:4d:ec:
b8:32:94:bc:22:ff:7c:7a:0d:e7:8d:09:88:f3:77:a4:01:45:
07:15:31:b4:14:89:0e:9d:3c:58:08:97:16:0c:ad:d3:69:d2:
c2:03:a6:02:77:37:d9:9f:0c:21:82:61:40:d3:2f:81:5b:c5:
52:db:73:bf:25:e6:2f:80:07:29:70:04:06:b5:be:49:b1:46:
48:42:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:57:55 2025 by rpki-client