Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: HUPyQIAiDpX9Q8in0z5ZqtAYtX5VCLCZGJ8Xq7i4ZDE=
Subject key identifier: 5D:1F:CB:31:13:AE:01:31:63:D5:D3:F7:4E:E8:D1:87:A5:52:E1:18
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 0194BD175ACD6A453C38ED1B176502D1D00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0B50
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: 5miYi0kLYQNyq9IwjltAWP3PiqvfjllTIIMM5pajSgU=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:cd:6a:45:3c:38:ed:1b:17:65:02:d1:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=5d1fcb3113ae013163d5d3f74ee8d187a552e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6e:2a:4a:50:81:a3:8c:dd:9f:44:7f:b7:90:
63:2c:65:8a:5c:85:0a:01:77:ab:68:3a:e8:91:c4:
60:76:b7:d3:40:d5:3a:3f:f3:69:26:0e:d7:3b:5b:
90:b9:91:b3:db:46:92:b3:7b:9b:2b:9a:1e:57:db:
69:55:20:14:e2:67:1e:42:1e:4a:41:33:83:e8:86:
36:3a:17:df:f2:54:a5:d2:db:7a:7c:8d:cd:f9:30:
cf:66:ec:77:82:0f:b7:04:2c:8e:36:25:fb:a3:3d:
fb:7b:60:b8:a3:ab:ad:37:be:e5:2d:c2:4d:07:31:
9f:ba:8c:18:b4:a5:f9:9a:c9:4a:80:47:61:06:95:
28:1d:40:2d:66:d4:33:90:c5:63:30:ee:8c:43:3b:
07:2d:0f:60:dc:d8:d5:85:46:c7:cc:2e:57:a1:6a:
dd:4f:be:87:5d:07:e1:89:e8:52:67:a4:a8:b6:d4:
02:6d:83:ba:eb:18:2e:64:cb:93:a2:43:33:b8:a1:
c2:8f:3e:c6:bc:8a:5b:0d:5e:fc:c6:0b:f3:81:d5:
82:de:99:66:4e:38:b1:71:b1:05:48:23:b2:1e:95:
4c:12:6c:dc:37:b3:fb:97:c9:6a:30:d6:71:11:62:
3d:af:63:e9:03:41:17:bb:72:d2:d1:5f:87:c5:47:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1F:CB:31:13:AE:01:31:63:D5:D3:F7:4E:E8:D1:87:A5:52:E1:18
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2c:db:ac:d3:91:ee:c1:28:aa:32:ab:2e:c7:21:bf:c0:54:
3e:ff:62:e1:d7:d4:61:76:74:a2:7b:70:64:ef:03:ed:03:db:
f7:f0:00:ae:9f:dd:d3:35:25:a7:34:da:83:49:94:c7:12:de:
9b:0e:f6:6a:53:a3:aa:0f:f4:87:40:1b:65:a3:8e:68:1a:75:
b1:d0:3a:da:01:ee:a7:de:04:95:d5:60:29:0c:23:66:f5:7d:
63:60:27:98:07:be:d0:3c:97:95:dd:32:c3:f6:e3:fe:8c:d0:
c9:c5:89:fd:6e:66:cf:bf:3f:2f:12:ea:d9:51:ef:90:38:27:
b4:4e:1b:36:bd:4b:3e:f5:a3:1c:88:2c:58:5f:74:38:58:7e:
5b:60:b9:07:fc:04:c6:58:93:d2:fa:ca:8e:04:01:82:99:8b:
e9:d7:c2:4f:db:18:0e:87:e0:1b:b7:c9:d1:09:a4:09:01:53:
45:e5:89:6e:a9:f9:db:d2:a0:dd:43:df:47:78:82:28:4a:cf:
82:64:59:c8:46:8e:82:94:7c:8d:2a:eb:3b:fe:ea:d8:28:1a:
84:fa:e9:fa:6d:5c:20:c8:f3:d5:e1:fa:40:b6:0c:6f:2e:83:
41:59:49:54:2e:4f:99:ec:42:86:bd:14:cc:60:c7:c8:2b:1d:
1d:87:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:56 2025 by rpki-client