Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: R/gIwCV1oQ2Ajht5lrf7m8zvgPbjcnRxKIipdSmbaXQ=
Subject key identifier: AF:9E:D1:0B:4B:FD:1F:8F:6F:05:33:E5:9E:54:EA:55:90:31:45:6A
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0194BCA97FA63DC5ED4542E7FBEA8A1007BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: EvtdVgKe+lQsXSdFB2EFz7pa9saThSu49RRUjf9mXYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:a6:3d:c5:ed:45:42:e7:fb:ea:8a:10:07:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=af9ed10b4bfd1f8f6f0533e59e54ea559031456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:96:66:f8:83:ea:d2:09:5e:4c:1e:b7:3e:
44:ae:c6:ee:ca:c6:4d:36:4a:67:7a:95:58:f4:c3:
c5:c5:4e:0b:76:c4:57:d8:b6:79:b7:f0:fc:1b:ad:
25:6b:c9:43:e8:4c:c9:e4:6a:77:46:5d:ed:b5:cf:
b1:66:26:35:0c:04:45:f8:4d:04:61:cf:f1:08:0c:
98:56:58:e2:66:19:e6:18:59:26:5c:e0:69:2e:97:
b2:34:50:6b:48:dc:10:6c:ef:ce:5d:e4:21:e3:7b:
61:2b:96:bb:67:80:4d:ee:3f:b4:c9:36:94:bf:bb:
c8:30:1f:bc:bc:d1:f9:47:7e:36:97:9c:b9:be:5d:
1d:78:74:cf:44:72:06:5f:88:be:84:fc:fa:b8:54:
4d:07:4e:4d:8d:51:d3:ad:8c:26:78:82:1b:91:ce:
cb:58:ba:53:d0:52:ab:d4:1b:ae:0c:a1:10:25:cc:
a3:ef:29:2a:cd:6a:c0:84:4a:e8:18:5b:8d:1c:51:
2b:1e:0e:76:03:17:c7:d1:df:62:b8:68:5a:67:76:
32:63:4a:d8:7c:58:4d:12:f6:80:46:fb:20:10:56:
82:5d:20:d6:32:2a:cd:bf:b3:a0:66:75:d2:4f:69:
e7:26:08:27:39:e3:3e:46:a6:a7:d3:56:26:b0:b1:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:D1:0B:4B:FD:1F:8F:6F:05:33:E5:9E:54:EA:55:90:31:45:6A
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:49:56:e6:44:3e:5c:6b:9c:92:7b:bb:a8:a0:8f:a4:c5:
ee:a9:86:f3:c7:37:4a:0a:35:25:54:da:9a:5c:fd:8d:dd:fb:
63:d5:ee:97:99:ae:07:f5:3c:c9:ca:d4:45:da:1b:3d:d3:ff:
d1:3d:8c:8e:d1:ce:df:4d:20:b9:2b:e1:e3:da:0d:7a:d7:66:
f0:1d:c6:c3:90:18:0e:07:f7:9e:ff:4c:28:d8:31:ea:83:33:
bd:46:e7:e2:8b:a6:3d:4a:6e:e0:2b:27:68:ba:68:2e:4d:45:
fd:91:fb:1b:ab:a6:30:d1:60:ba:0f:64:31:7f:81:2a:26:0c:
68:25:7f:57:38:17:94:2c:14:cb:79:c3:9e:27:d4:83:c6:68:
65:b1:6c:e9:83:af:b5:ee:b8:7f:56:94:ee:d1:b4:86:54:f4:
8d:0a:46:a2:57:80:7f:e4:8c:4f:c5:a9:38:2b:b0:64:7d:b5:
a5:37:b7:d3:ef:ef:08:59:15:d4:91:02:b0:46:a0:f5:c3:30:
15:41:e1:43:80:d9:4c:7f:b2:af:3b:06:08:e3:be:98:7c:2e:
4a:8f:57:ad:ec:c5:20:d9:a4:46:85:ac:02:2c:bf:ea:eb:84:
80:7c:f4:18:90:4c:49:8b:e0:f3:1b:3e:c6:64:2c:19:10:8e:
67:93:bf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:09 2025 by rpki-client