Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: hYUe+I6xZRpeII5NqJxbv2D/KJwAcc0EkpHJQqRYhW4=
Subject key identifier: 8D:7F:E2:A0:8F:04:16:AC:3A:8B:E7:7F:CE:13:E4:D2:A0:F1:E0:B1
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 0194BD4E6E7491AF27E7E373AC7FF3104490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: YPuzCGB8ijeCfBf18qUJAVBdW07+kPIsdxr5YLcNLPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6e:74:91:af:27:e7:e3:73:ac:7f:f3:10:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=8d7fe2a08f0416ac3a8be77fce13e4d2a0f1e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:ea:17:81:bc:93:69:26:52:50:36:ff:5c:
9a:60:11:1c:d6:19:e2:c4:fc:5a:71:ed:e3:4a:a2:
3b:c6:54:1e:a2:73:c4:5b:48:ef:7c:af:74:5d:1b:
b1:5d:74:b8:0b:a6:2c:34:0b:ca:7f:c2:1c:7c:54:
75:09:bc:bb:07:3a:a3:db:92:02:b1:2d:66:1f:51:
b5:40:06:59:34:ff:ea:49:97:a0:d2:8e:9b:fe:fe:
16:12:54:8c:36:12:c7:91:81:da:cb:d0:1e:66:1c:
1e:1b:a3:ef:78:8f:d7:6e:f8:b0:78:e5:92:91:95:
ba:0a:91:2d:75:24:68:1f:e7:72:2d:42:0a:ae:2d:
9c:cf:b8:ca:e5:e1:7e:fc:e0:63:56:64:34:41:e5:
2f:ca:a4:ab:4e:a3:ef:0d:8e:53:3d:75:97:1f:a1:
e3:e4:5b:ca:9b:72:6d:05:7e:b0:a0:83:bb:92:ab:
60:9f:0b:24:54:e9:45:8f:1d:90:5d:e1:16:db:0c:
8e:97:88:24:44:01:78:8b:ba:3a:b8:40:ee:e1:5e:
e3:f9:51:03:fc:e0:c7:77:1a:4c:a3:f1:a5:09:65:
ba:ee:0d:2a:24:a0:24:7e:04:da:7b:50:98:d8:6d:
f8:84:d2:1d:c8:9b:0b:8a:1d:dd:12:22:5c:a3:b0:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:E2:A0:8F:04:16:AC:3A:8B:E7:7F:CE:13:E4:D2:A0:F1:E0:B1
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6a:73:a3:bb:63:39:dd:55:2c:90:bd:6b:e1:b6:46:42:30:
27:53:af:38:fb:fd:ea:d0:0a:a8:21:2b:5f:81:74:00:3b:2c:
35:2a:d3:33:7c:84:1f:fb:f7:c7:25:f9:87:03:87:6b:26:69:
9f:35:06:76:de:63:13:0d:f8:db:1f:f3:92:5c:7b:31:c9:1f:
85:85:bb:b6:68:c9:e5:18:f5:5e:b8:02:dd:be:3e:46:6c:47:
2b:4b:38:c7:6f:94:b7:9f:e7:07:68:14:a7:be:65:68:6c:e6:
38:de:60:90:88:bf:6e:15:5e:7b:6a:fa:2a:8d:f5:c0:8a:ba:
98:68:1a:9d:5c:25:9d:39:13:97:c8:c3:76:e8:fa:35:70:7d:
16:98:7c:63:69:30:c5:ce:13:e8:b1:f8:f7:ac:e8:96:fc:5f:
4c:71:15:61:76:6d:4c:0f:b3:62:07:c8:3c:74:d5:cb:7c:c2:
a7:19:c1:1c:32:b5:66:bd:a6:0a:d2:30:3f:60:0e:d6:bf:14:
ad:ca:7a:fc:af:f5:a5:41:ba:c6:04:14:39:ee:0c:02:e6:fe:
bd:f2:bc:d3:0e:3c:38:0e:8b:0c:0a:21:f3:80:f6:6f:b7:ae:
8e:ae:af:d3:5e:f4:06:b8:65:86:3a:d0:96:cb:d8:38:ce:35:
8b:05:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client