Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: 5j2qjS7vWDBhmbcaVsUxBmmW5ouAcfiW3nSGVNt3YMo=
Subject key identifier: F8:B5:E0:DC:3E:33:9A:B8:84:E1:97:9A:0F:41:18:9B:C2:20:98:D1
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0194BC3BC0EC0307FB6BF904BE961A642AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: lTJoW2sNVsjqEEUZ9dPXvJxPBMA/u8h+YMgopC0hK2g=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:ec:03:07:fb:6b:f9:04:be:96:1a:64:2a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=f8b5e0dc3e339ab884e1979a0f41189bc22098d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:c6:cb:70:2c:85:89:31:89:44:d1:5a:64:
61:31:a6:b7:2f:3c:a1:72:1b:84:c2:35:e0:fc:cf:
d8:8a:57:40:27:c4:2e:cd:d4:8b:2f:73:d5:96:f4:
76:6d:00:a2:5f:c3:fe:d0:15:b6:74:ab:d0:bc:84:
15:8b:94:0c:84:f3:dc:0e:b3:e5:81:31:7a:37:6b:
d7:85:1c:98:98:2d:64:56:89:f2:d5:2c:d3:73:48:
59:2f:7e:c6:0a:94:43:f6:6a:cd:dc:ed:bd:e8:0f:
a3:53:a0:ce:03:7e:c0:fc:a5:6f:f5:97:4b:22:41:
d7:5c:a0:6c:04:40:5c:89:79:66:c0:a2:be:ab:f2:
c0:d4:ac:15:83:4e:a0:d0:27:8e:68:43:2b:02:7d:
6e:ef:1e:23:ae:ee:43:4b:05:15:d0:57:9d:e7:95:
13:5c:8a:b5:67:b6:73:b1:a7:49:89:3f:38:16:1e:
96:38:57:0a:52:0f:92:d6:93:a6:a8:3c:80:46:ac:
e5:54:47:6f:28:d1:1a:5b:1f:c4:54:16:e3:85:40:
2a:22:02:ca:15:69:96:fa:57:a4:fe:04:35:f7:31:
6c:b3:7d:b1:f9:6a:0d:13:1e:3e:ab:5a:1d:d4:67:
a6:d6:35:c2:b4:90:91:53:74:f8:f1:25:da:f5:20:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:E0:DC:3E:33:9A:B8:84:E1:97:9A:0F:41:18:9B:C2:20:98:D1
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:99:30:7e:4e:18:45:5f:cf:9c:5e:f3:25:f7:c8:99:96:8f:
21:94:5d:6f:f6:c7:10:ed:f0:ac:ae:8b:16:5e:49:34:be:00:
be:0b:4a:ae:cc:58:95:6c:80:9d:45:1e:ed:87:ff:3b:25:2d:
22:b6:c4:a4:e5:85:5c:ae:b1:15:c7:83:6d:5c:a8:72:3d:72:
da:2d:68:01:80:2f:74:ef:e6:35:13:2f:f0:1f:63:9d:56:6d:
e9:6a:be:53:79:dc:97:10:b8:d3:7d:7e:33:d0:b8:be:73:f9:
05:eb:68:37:f2:63:66:ff:a0:ad:b9:6a:46:5a:0c:49:f5:fb:
89:c2:bc:9d:5e:c3:6e:0f:d0:ff:7c:f2:e0:99:8b:3a:32:b4:
ec:58:92:2f:a0:70:f7:e8:3e:eb:2b:d1:2d:d3:77:58:1a:b6:
76:78:ec:6f:fe:88:57:7e:f1:f7:34:70:e7:66:74:ca:90:a6:
fc:82:18:50:46:b5:d2:5e:3b:c0:d6:a8:c3:b4:b4:ee:bc:36:
e4:af:b1:6b:f6:0a:01:15:9f:f7:7a:31:1a:7b:87:77:73:8a:
32:98:d7:97:87:1f:d8:03:61:d1:d4:cc:54:ee:3f:21:83:20:
6a:b8:c6:ca:a0:12:48:85:f2:df:e0:d3:01:6f:72:ca:90:c5:
48:35:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:19 2025 by rpki-client