Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
File: US4nvokbGeypvOtT5NwjfFo1Vpc.mft (raw, json)
Hash identifier: FFUFbTdwpf9DdjOqeWhqYoXdxSX6DEjV8tGoJIAjJD8=
Subject key identifier: 0B:3D:AC:55:20:20:8F:7C:1E:6B:DE:B5:13:F4:6D:50:AD:47:25:3D
Authority key identifier: 51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
Certificate issuer: /CN=512e27be891b19eca9bceb53e4dc237c5a355697
Certificate serial: 0194BD4E8C7A148119E1114C7603B654F595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
Manifest number: 0A27
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: US4nvokbGeypvOtT5NwjfFo1Vpc.crl (hash: oR+yW1INivHegfkyVlLf+CJsXzlpdLUuJPwKJ9O8hQE=)
2: WNeWcYI--FrvgqVvkbFu12LIaYA.roa (hash: k8USa1JcWCZakgNPmvbG30Z+DpfHdvNnOH9UZ98bnDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8c:7a:14:81:19:e1:11:4c:76:03:b6:54:f5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512e27be891b19eca9bceb53e4dc237c5a355697
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=0b3dac5520208f7c1e6bdeb513f46d50ad47253d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:2c:a6:37:af:c5:00:ba:4c:dc:16:ec:21:
0e:e4:49:c4:c1:b9:c6:e5:4f:95:87:05:39:2b:73:
47:38:29:99:46:5c:32:29:df:fa:82:93:e4:cf:8e:
37:b9:b4:ad:42:22:98:51:b0:3d:f3:5c:60:22:f7:
06:ce:a9:f1:9b:6d:75:4f:f7:74:2a:fb:7f:9a:42:
8e:c8:4e:5c:86:e7:d1:c0:38:28:9d:c0:bf:9f:37:
95:7c:0c:24:d3:82:2e:9c:2e:14:ec:2e:5d:13:1a:
99:21:f8:f9:b2:38:17:ac:20:ff:70:28:a4:37:24:
22:6d:8a:2e:ad:b7:35:df:7c:d4:d8:91:a5:73:85:
85:60:f6:d7:6e:c5:6d:bb:d0:df:ae:aa:56:7c:9c:
af:e7:47:5d:f7:89:7e:32:e9:7b:0b:3b:a0:fe:d9:
70:e8:59:68:fa:0c:ef:5a:8c:12:b2:84:8d:a3:03:
1e:1a:55:02:d0:3f:f9:dc:c1:c9:64:b1:1a:9d:17:
a1:fa:dc:ab:0d:39:4e:9b:8e:42:38:50:e9:c1:50:
57:93:f6:65:d5:80:ca:60:c6:14:1a:f8:8c:8f:9b:
d0:72:dd:62:0a:82:ad:d4:34:6e:68:5e:5b:05:42:
3c:42:c3:27:2c:54:7c:56:aa:f9:c0:1f:a7:df:96:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3D:AC:55:20:20:8F:7C:1E:6B:DE:B5:13:F4:6D:50:AD:47:25:3D
X509v3 Authority Key Identifier:
keyid:51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:ce:75:2b:ff:b5:7b:ac:91:35:e0:e3:96:ab:16:56:04:
23:4c:70:08:c5:58:cf:21:d7:d5:b2:61:b0:6c:2c:cb:49:26:
ee:7c:90:57:a9:6b:13:7d:7d:af:4f:f2:e1:b1:c5:69:be:92:
bd:80:1c:c1:00:ee:53:02:93:11:2d:3f:fd:7c:43:d0:74:b2:
43:b1:48:8e:9c:ee:8a:4a:7e:da:39:d6:cb:63:81:df:d3:36:
f7:50:f7:41:23:70:d3:16:8f:5a:39:b0:73:dd:43:f1:a9:1a:
6d:57:c4:a4:88:5e:56:5f:b2:46:33:6f:a6:a6:d6:d0:d3:a8:
96:3d:88:77:57:cc:c0:c1:98:31:f6:5f:14:01:6a:4b:48:e3:
a8:ef:1c:5d:7c:d2:3e:59:61:34:39:a7:0a:90:90:ff:19:8e:
a0:e6:c7:9c:65:86:a3:96:df:be:09:a6:7f:87:ae:14:5d:43:
42:58:08:4a:75:fa:db:9c:b0:95:74:26:9a:e6:8b:fa:2d:24:
51:83:88:45:9b:a4:dc:23:dd:ce:0b:1c:34:b1:52:de:37:ab:
c1:65:97:a0:0d:ad:33:67:96:7a:5f:c9:2e:0a:01:3b:52:3f:
88:b7:8b:a4:b1:1b:50:83:d8:e6:ca:18:04:71:04:82:7a:73:
1e:5a:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:54 2025 by rpki-client