Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: suhwpGVmYbNrKQglHxE8L6R+trPFBT8kWsM9YV75un8=
Subject key identifier: E4:32:23:A3:BE:5F:49:6D:09:8D:9E:B7:00:BD:33:4A:70:B8:1B:DB
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 0194BC051518433BDBA0DF6C08DDB05951F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: haQxNSGlsqmWALhSFoCkd5WM1Fwl47pQpmhqCtCuLsk=)
2: y90pAfzLQMR55Sa5PvGbioONASA.roa (hash: n9aRyUE5bDJ/tLya1U0ZStHeIcqZXIPWtBR2+GDXo8s=)
3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:18:43:3b:db:a0:df:6c:08:dd:b0:59:51:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=e43223a3be5f496d098d9eb700bd334a70b81bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:6c:89:7e:e8:7c:31:92:4a:fb:a2:d4:0c:
d1:f7:2c:ff:69:8e:79:76:e9:c7:59:49:db:19:94:
b7:6b:c9:4d:33:ce:b4:ee:a7:12:d5:a1:f3:be:16:
67:b1:a2:43:db:cc:d3:5a:c5:58:40:bc:04:86:df:
86:0c:3a:db:ac:e7:a0:68:13:2d:45:a0:20:d9:73:
30:ed:17:0e:cb:2f:48:de:ac:a6:23:f6:7a:c7:d1:
ec:a2:65:ce:5f:cb:4e:e0:9f:86:00:63:c2:48:ef:
a8:7b:84:6c:02:7a:16:ad:b2:09:4a:1f:bd:b4:5b:
4e:da:0a:e8:9a:1a:76:70:73:a5:10:05:a3:d5:ad:
2d:cb:57:45:8d:d0:47:35:6b:fc:36:a8:80:7f:bb:
80:2e:eb:33:ed:9e:20:dd:ca:99:46:61:df:d1:f0:
f8:d2:b9:29:a4:b5:ea:83:24:60:2c:82:15:9f:82:
0f:86:6e:66:16:08:db:d8:fb:2d:96:d4:07:9b:ed:
cf:48:eb:c3:5f:31:90:b2:fb:1d:38:10:2b:7e:dc:
f6:07:00:9d:19:70:de:c9:54:20:7b:28:e6:70:ad:
1d:41:07:d5:26:4a:92:41:c8:91:2c:13:5f:23:c7:
76:4b:26:b4:e3:06:25:67:26:54:06:30:1d:a7:a3:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:23:A3:BE:5F:49:6D:09:8D:9E:B7:00:BD:33:4A:70:B8:1B:DB
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b0:84:73:d8:38:5d:5b:d7:d2:9e:ec:06:4e:8e:6a:5c:c1:
db:cd:a3:b1:5a:64:87:b8:6b:a3:ad:cf:99:2d:d7:18:f1:e0:
e6:8f:39:74:fb:0d:be:4d:6e:74:2f:bb:34:8c:44:8e:0b:08:
4a:90:6f:50:7c:df:ae:f7:d8:90:10:bb:c4:92:94:38:a6:3b:
be:73:b8:d7:68:da:15:1f:a6:3d:09:14:9f:96:ca:8c:ea:95:
20:2b:98:c0:1a:84:05:2c:1a:2a:73:92:d4:4a:fb:99:6f:5c:
f5:72:3c:a8:ad:a9:8a:31:a2:5d:4a:cf:32:0f:40:87:17:ab:
ad:ee:c9:fc:e3:c6:08:71:27:dd:52:27:98:07:b1:cf:98:14:
43:f3:11:51:01:59:46:fc:4b:21:34:7d:97:ce:6d:e3:22:38:
6a:a6:ae:eb:03:67:72:4e:67:53:02:b4:a6:2d:75:4a:bc:92:
71:c8:f8:6b:2b:4d:c6:c1:d5:10:41:92:d3:34:3e:82:56:cd:
bd:a7:ec:db:7f:25:bb:03:7a:7b:b8:5a:89:76:61:fc:37:26:
b0:4c:38:18:8e:af:44:16:3b:9b:d8:5f:20:52:8c:10:80:e3:
4f:49:47:d3:3e:00:2c:b4:d3:04:ec:2f:e7:60:6c:f4:58:1c:
4a:02:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:12 2025 by rpki-client