Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier: Yq5fXqrIH6zaaYccJyIX7QkLXEIMZXq+U+Il0H+uMFs=
Subject key identifier: 90:1F:1C:21:9D:C2:2B:EC:C4:A6:4D:9F:2F:9F:BF:8E:86:03:CF:2E
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 0194BC04D3DC52918E542B8F1363B1E1F62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: Av6e/jRyCZaAffZhkFHW7knbZ4nIwVCt58sXp0RsfwY=)
2: xWOpZfRr7thuD6cUtKvPdI-_VBQ.roa (hash: Pf5kik5m7cGGBhNkzoxIAzTv7Y7VAUUsC50OhLmpfJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:dc:52:91:8e:54:2b:8f:13:63:b1:e1:f6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=901f1c219dc22becc4a64d9f2f9fbf8e8603cf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:e0:c7:77:ed:48:bc:8e:84:bb:fe:07:bf:
48:99:b1:71:f0:75:7b:5d:c6:59:ba:c6:3e:8d:58:
97:a6:a7:7f:d0:a4:91:fc:01:d1:66:bb:f7:c4:6d:
32:e7:47:41:b1:d4:02:e3:92:35:b9:2e:bb:f0:f7:
89:f4:c3:c5:e0:4a:18:1c:94:87:08:3d:a6:53:3d:
de:0c:11:be:d1:7b:40:b5:96:2f:0c:00:50:e3:9c:
cd:df:df:a8:61:37:54:cd:82:93:72:61:e9:93:80:
8d:1f:8c:19:b0:ae:f4:3b:1f:08:8e:93:22:65:a1:
5a:ff:68:eb:f8:c5:b0:54:47:bb:a8:65:24:9d:2a:
22:17:93:ee:96:68:3a:3e:b1:59:03:6b:f6:c5:e7:
3f:ae:5b:2d:25:87:f8:89:36:cd:5a:40:58:b9:db:
55:20:c5:b9:c6:f6:66:ea:8e:66:8d:cf:9a:9a:06:
58:35:78:ad:37:35:7f:02:6e:e3:e7:1b:66:74:96:
36:3a:96:1c:9a:7e:28:1a:1f:e4:05:f2:9b:a4:28:
d6:bb:de:4b:22:f7:7d:e2:fd:7f:0e:00:f5:b3:46:
d9:fe:ea:8c:c3:b5:d9:5e:7a:16:f7:d2:0d:b1:8f:
c9:61:5d:66:a2:36:4a:46:a1:cf:5c:3c:30:24:bb:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:1C:21:9D:C2:2B:EC:C4:A6:4D:9F:2F:9F:BF:8E:86:03:CF:2E
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:39:f2:b9:1a:a3:cf:04:07:09:44:a3:6f:d8:91:8a:ce:
e4:e3:b3:6b:89:bf:3f:6a:b1:31:bd:84:92:1a:bb:8c:ff:cb:
d2:8b:63:29:e5:e0:33:a6:dc:e4:2b:07:81:23:ab:96:cc:4c:
4b:58:76:b7:0e:3a:37:95:9c:46:39:c3:9a:5c:f4:e5:51:70:
d3:c5:76:98:bc:a1:70:2c:88:80:ed:ee:71:8f:06:47:3c:e9:
30:b4:0e:b9:5c:0e:b5:f0:e5:58:9b:c7:12:b8:81:ee:70:19:
4d:29:f9:f8:34:37:85:5b:9a:5a:f6:1d:69:8a:89:65:93:2e:
8f:f6:f1:2d:b7:44:6c:79:66:8b:06:5d:01:b0:0e:3b:35:60:
7f:ea:a6:1a:9f:cb:d2:9a:49:04:20:d2:8d:52:ff:7d:46:14:
5e:6d:2e:20:71:7f:40:fa:b8:8c:7c:6d:01:7b:ec:24:8f:aa:
4c:d1:11:e3:fa:9e:58:69:33:f8:a0:e8:f9:be:5a:7d:bc:47:
bf:6b:ff:ce:12:1e:a3:5e:7c:12:e9:fb:5e:d1:67:d2:53:b8:
e4:0e:dd:d9:d0:10:46:80:51:66:c7:5e:94:ef:30:1f:ea:a6:
1e:f7:dc:a2:68:9e:c0:1f:ed:84:92:14:da:a0:aa:bd:88:26:
3a:81:fb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:18 2025 by rpki-client