Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: uZH4A9RMMW1Ua2iA667ZTGvMIZgSsyYFLG9Gxu0UlAw=
Subject key identifier: 0D:A9:D0:B5:B3:64:90:95:AB:1B:57:71:2D:FB:F0:75:02:AA:95:49
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 0194BC3BDC638F21AA1D6E09F851D3535E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: 8vBG2rDllxU7BmC4tVPBcGR4zcKHIqZzZIZvwifacNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:63:8f:21:aa:1d:6e:09:f8:51:d3:53:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=0da9d0b5b3649095ab1b57712dfbf07502aa9549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:17:c5:e9:22:c7:92:bf:e4:86:60:51:b3:
1d:e4:64:53:ec:3e:15:8b:c6:1f:fe:a0:79:c8:a0:
0e:ee:3e:16:49:bf:b5:2c:5a:b3:9c:1b:8e:3f:3a:
eb:33:9f:f4:81:cc:ef:09:8f:e2:f9:96:7a:90:d4:
87:b1:3d:ab:e9:cf:ac:c9:2a:12:08:26:ef:f9:a0:
4d:49:55:ac:2b:fb:a9:62:33:f1:aa:6d:9d:28:46:
59:7f:28:08:cd:80:0c:80:c2:ec:d8:a2:1d:9c:28:
04:2b:75:c2:ae:b7:56:ca:75:1c:1e:03:6d:c6:78:
bd:55:54:d8:49:9b:2c:74:b5:ee:fe:82:75:a1:61:
a5:ca:4f:1c:af:23:bb:d6:a4:9e:df:aa:44:89:29:
52:2d:58:f1:ca:49:1c:96:90:cd:e0:4f:b0:fe:8a:
5f:db:1d:5c:55:94:e3:95:aa:4a:34:f3:ef:7b:f9:
e2:a7:0a:2c:67:43:59:9a:ef:3c:fc:0b:f7:29:e8:
c8:9f:42:0d:22:ae:37:0c:69:49:56:c5:21:64:9a:
02:69:6c:39:fc:93:82:c0:c5:85:ad:b1:62:b0:17:
58:fa:db:f5:da:7a:c7:93:cc:7b:fa:06:24:2d:37:
f7:0b:c6:cc:bb:da:1d:56:b0:57:24:38:36:b1:ae:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:D0:B5:B3:64:90:95:AB:1B:57:71:2D:FB:F0:75:02:AA:95:49
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:78:c2:3a:35:8c:47:0e:bf:99:8a:48:75:1b:56:4e:6a:c7:
ce:54:86:a7:0f:b5:3a:91:db:d1:59:f0:71:06:72:c8:de:2b:
ba:1f:09:0c:11:ca:56:87:20:1c:01:72:74:49:a3:b4:33:56:
5a:8d:c1:28:02:7e:09:07:2d:d7:e6:63:69:b2:5f:3d:47:44:
e4:aa:d7:54:28:b5:a8:36:86:cd:03:c4:e7:34:da:d7:76:ea:
28:5b:4c:60:7c:df:de:a9:c0:a4:51:da:a9:93:a4:38:1b:92:
02:17:39:ea:d9:8b:d7:0c:21:98:01:36:e5:52:73:db:b8:35:
94:5f:75:a6:45:dd:d9:32:f9:1e:b5:41:f4:50:c7:38:b0:63:
9c:0c:2f:fb:fe:bc:21:f9:de:66:96:a4:93:7e:fe:05:8c:bd:
02:f9:98:9c:99:04:a6:05:29:a5:18:bf:2c:9b:37:7d:70:e2:
ee:e7:68:40:5d:7d:e2:15:64:ad:11:92:a3:10:42:da:53:36:
40:e5:93:46:49:5d:b5:77:88:a0:c9:0b:d8:6a:5e:2b:eb:cb:
6d:68:d9:55:2a:23:b0:75:b9:e7:47:fa:b2:b2:6e:54:41:50:
b2:47:be:7a:5f:a3:09:75:10:cb:0d:9c:3f:5e:d9:17:f8:ea:
21:ae:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client