Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
File: UIqaCKvvdNzFEAT0-uAmbWIDleM.mft (raw, json)
Hash identifier: FyGFWvG63wup3ujF1rLR1mY+d/n1jPFcMd99/ul6iVw=
Subject key identifier: 18:2E:8A:3F:46:35:B0:E2:2B:2A:28:C7:B9:7A:06:B8:0C:5E:71:99
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Certificate issuer: /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial: 0194BC3BEC63569D4E0D854CDEF26D5FBE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 8CmFhnWxaCeDeglOctNQZC1ZN84.roa (hash: mRPJMJZCvcTnlYvn8UFVdthp3gWoolEvhKxuWOWcGDk=)
2: UIqaCKvvdNzFEAT0-uAmbWIDleM.crl (hash: 42w87+fjfC55Nynt9GCv6hQqcGzdak+vka48aSrWOb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:63:56:9d:4e:0d:85:4c:de:f2:6d:5f:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=182e8a3f4635b0e22b2a28c7b97a06b80c5e7199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:3e:91:94:db:83:f8:3a:08:c7:ed:6a:20:
34:7d:a1:18:83:0b:c1:e4:99:e6:18:de:e9:c3:a0:
10:8e:b1:4c:61:87:c9:42:dc:01:58:78:08:ac:73:
5a:fc:d6:18:33:2a:e1:82:46:dc:8a:80:0b:b8:3f:
84:4f:91:d0:11:4a:63:a2:7a:86:93:4d:4e:bd:16:
39:c5:ea:eb:20:85:3d:d8:d1:f6:1f:f0:00:c3:93:
07:ac:c2:6d:0a:c6:24:24:e9:81:99:8e:37:c0:d6:
b7:70:f4:61:93:cf:cd:08:d0:14:59:9d:67:27:77:
10:7b:07:02:84:90:4a:44:12:39:30:83:76:35:62:
32:14:f6:40:56:db:9a:18:64:26:57:88:72:3a:94:
69:0d:ec:64:33:d6:eb:31:6e:47:47:d2:ed:d9:09:
63:45:fe:47:5f:11:78:2d:6d:fd:c6:54:a7:d9:ee:
92:4d:f3:d1:1a:ec:d3:b7:48:f3:c3:5f:42:3e:a1:
f3:23:be:b5:39:4e:1a:f4:fc:eb:81:80:53:a6:84:
4b:ae:50:9f:96:f9:c5:8e:e2:f2:56:90:e6:2c:12:
85:21:1a:ff:90:19:a4:e9:4b:d8:4a:0c:bc:ff:f2:
f8:fb:6c:c6:04:df:2d:46:be:74:ba:aa:2f:8a:ab:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:8A:3F:46:35:B0:E2:2B:2A:28:C7:B9:7A:06:B8:0C:5E:71:99
X509v3 Authority Key Identifier:
keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1b:1b:95:bc:01:02:58:0e:bf:f1:f2:b5:4b:03:fe:26:a0:
1d:db:4b:f6:7c:a0:06:97:38:90:2f:b9:d0:c6:a9:8c:7b:af:
a9:38:ed:ad:07:9f:6f:e6:83:d6:c6:ac:d7:0a:36:22:c3:91:
94:eb:1d:b8:6d:e2:af:71:4b:29:30:f0:7f:51:28:63:b2:97:
cf:de:b3:05:fc:ce:72:f5:e1:a9:75:7c:bd:e8:2e:a2:d2:f2:
23:39:6e:15:1e:aa:70:32:a6:b1:99:75:be:4f:0c:cd:6c:f2:
f4:b3:af:63:ac:67:3c:66:52:84:39:cc:a6:2a:c8:2d:7f:81:
48:db:01:1e:b5:7d:21:b7:37:14:0d:3f:0a:72:da:6e:90:3d:
f4:aa:f3:b1:d9:2a:8f:2c:f6:cc:98:2d:98:77:29:bb:30:f9:
06:fd:1b:ab:47:5b:49:c2:e5:60:fb:f0:ba:eb:43:fd:c0:5e:
21:65:d9:58:57:16:1b:35:b9:bf:f0:55:8b:2a:44:92:0f:c2:
04:23:66:7f:45:65:cd:d0:12:c3:dc:d0:4e:22:e2:21:3a:af:
e4:5a:6d:6d:17:51:d2:18:a1:ff:93:de:bb:6c:1c:1c:2f:a2:
29:c8:3e:e3:7f:bc:e3:14:e7:d8:ef:cf:71:e8:c5:4b:0e:22:
9d:85:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:18 2025 by rpki-client