Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: w4ce1Q4ESA1CI3VPbXqZX6pOjbThKad1KE06yPKrKo4=
Subject key identifier: 47:DB:9B:F8:80:62:71:5D:E3:54:00:97:4E:0D:F1:22:80:C6:B7:BB
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 0194BC72E7928E6027AF548B4DDCFA70CBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 12CB
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: EHVeAlcn28EJ63+I9F5htgUYr/3gGPNGZdNwqAXiuy0=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e7:92:8e:60:27:af:54:8b:4d:dc:fa:70:cb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=47db9bf88062715de35400974e0df12280c6b7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:09:49:53:9e:d6:f1:3f:1d:c5:18:c8:77:
d9:0b:70:85:91:fc:36:77:71:90:20:0f:4b:aa:1b:
e0:2c:31:3f:ea:96:b0:15:2e:8a:d8:5c:65:8b:8c:
74:4d:e6:6a:17:07:cb:18:3e:fa:fe:9c:ca:a3:99:
07:a0:1c:c0:2b:7e:94:74:ff:a5:1a:82:5b:15:1c:
e6:72:40:3e:70:7d:2b:ff:dd:a7:90:38:4f:7f:f5:
d2:5e:3a:46:87:e5:21:8c:d1:b3:55:34:cd:dd:bd:
cc:c5:f0:b6:9c:34:78:36:96:10:31:e4:d7:92:e9:
2b:c6:e7:40:39:56:f6:75:9d:ae:3e:ac:7e:03:67:
a6:dc:2f:31:ba:ca:aa:5c:6d:f7:ba:f8:7f:d9:cf:
c6:ae:c1:76:49:e9:03:cc:86:b7:69:f6:8c:2b:a7:
55:45:a6:4e:ee:f4:a0:32:a6:1b:6f:85:8b:82:d4:
28:02:c6:77:69:03:7f:58:1d:88:f7:06:71:b8:b2:
1b:4c:e4:6c:72:10:29:73:29:8c:73:0c:24:37:8c:
3f:8b:06:3c:6a:a1:0c:27:bd:65:a6:49:10:86:c4:
ee:f4:9d:0e:57:7d:73:02:0d:34:a2:21:5e:61:ad:
8f:a8:37:f0:b0:f6:76:d4:0e:5a:21:1c:82:5d:93:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:9B:F8:80:62:71:5D:E3:54:00:97:4E:0D:F1:22:80:C6:B7:BB
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b4:44:fe:78:a2:88:ce:78:da:60:0f:76:6d:85:35:e5:cb:
37:e4:93:3a:4d:04:8d:40:86:34:d7:c5:06:17:1b:b7:c1:b5:
08:75:e0:ba:9a:fd:b5:e1:ab:40:11:ac:72:2d:ab:bd:b9:32:
88:cc:38:17:81:3a:4f:f1:a7:53:be:c5:fc:16:db:70:f2:15:
80:7b:c6:26:ff:af:14:56:92:f2:4a:b1:d2:f3:c6:3c:f2:65:
24:bf:7e:13:91:d4:96:81:c9:c0:08:e3:20:3e:33:81:35:69:
b5:c5:b0:91:95:ac:e4:7d:22:da:cd:c8:dc:db:74:9c:ed:b3:
b0:fc:2f:5a:d4:91:4b:55:16:89:b3:c0:6a:98:c3:2a:57:1e:
34:8f:6a:54:d0:ca:68:ef:29:63:86:1b:f0:31:64:3e:4b:54:
37:1b:1f:99:22:b9:c0:39:b7:cb:77:00:d2:6f:f0:88:13:8d:
b3:3d:02:d1:b6:89:d7:38:ee:03:b2:e8:a0:31:47:96:66:52:
ed:90:08:48:e6:81:e6:2b:7e:6f:4f:af:5d:1f:20:3b:1f:69:
dc:3c:7d:43:6b:5a:d9:13:8b:8e:47:c3:84:06:50:d7:91:fe:
34:b0:c4:bf:96:a9:c9:d1:b4:54:33:f9:ce:99:5c:ac:05:57:
a6:8d:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client