Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
File: UlG0CzMZisWh7fUP_whigWAzXf0.mft (raw, json)
Hash identifier: aQpx/Hzv9dZSxW9XtzE3bWW+eM4ls2FxjtdphdO5iFM=
Subject key identifier: 11:90:A5:87:13:A3:DF:7F:94:F9:DB:7B:B4:39:CF:87:AE:4D:C2:01
Authority key identifier: 52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
Certificate issuer: /CN=5251b40b33198ac5a1edf50fff08628160335dfd
Certificate serial: 0194BC72C1ED8F8133595606BBA63927484F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
Manifest number: 1329
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: B5jBrigaJO3-AA-t_YN4JZyKlOc.roa (hash: rGNTEj/GGFLwPvW+NfWJ0mtsiCJfkPNhKXWRWEo8b5k=)
2: UlG0CzMZisWh7fUP_whigWAzXf0.crl (hash: fWsWF5DCk5GH53FuwkRZ7s5+lM3RfvW6GgYIC5tIxgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:ed:8f:81:33:59:56:06:bb:a6:39:27:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5251b40b33198ac5a1edf50fff08628160335dfd
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=1190a58713a3df7f94f9db7bb439cf87ae4dc201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:d9:5e:7d:e1:d9:bf:3c:42:3b:cf:18:81:
f9:06:f2:6a:fe:20:dd:c5:93:56:9d:6a:54:f3:55:
59:ee:18:b7:ae:fd:8e:8b:61:38:e7:1d:65:c3:4c:
f0:41:cd:f4:4b:ee:95:c1:63:19:bc:61:5c:96:d1:
e6:53:2b:31:90:0e:f1:3c:53:6f:6b:a4:be:6a:64:
f5:0e:c8:ce:1a:58:45:99:02:01:59:60:e7:e7:71:
da:c4:68:85:e2:61:8f:9c:fd:58:e7:bc:cd:5b:f6:
ea:5f:72:ed:0d:60:3c:0c:d6:2e:e0:fc:0d:db:55:
a0:65:97:2f:50:62:ee:3d:ab:27:c0:a3:b2:3a:de:
cf:91:be:31:0d:07:db:31:70:2d:0d:0f:e0:27:e9:
ba:79:87:f9:cc:2a:60:90:7a:0f:b8:64:21:63:6f:
0e:d9:eb:12:cb:2e:1f:d5:40:2b:21:fb:4c:eb:ac:
57:75:2a:f8:78:9d:6f:b5:b4:89:a5:9c:2e:f0:c4:
10:97:e8:78:45:b8:ec:5d:6d:17:fc:23:75:4c:19:
07:8f:6b:49:7a:0d:ed:30:8b:1c:4c:86:a6:a7:3c:
31:1d:50:87:d6:30:2d:b4:d7:b3:47:0e:4f:88:a6:
15:af:f9:4e:1f:a3:07:75:26:e1:b0:89:2a:bb:bf:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:A5:87:13:A3:DF:7F:94:F9:DB:7B:B4:39:CF:87:AE:4D:C2:01
X509v3 Authority Key Identifier:
keyid:52:51:B4:0B:33:19:8A:C5:A1:ED:F5:0F:FF:08:62:81:60:33:5D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlG0CzMZisWh7fUP_whigWAzXf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/eca809-d942-4d89-b438-a1c29992bfbe/1/UlG0CzMZisWh7fUP_whigWAzXf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:89:ec:5a:22:f7:4a:a5:e6:0b:7a:7b:ef:cd:6d:01:ce:d2:
32:3f:27:d0:77:ed:d1:cb:05:58:4f:d0:9f:dd:fe:ba:1c:f2:
fb:2f:0a:6d:2f:40:c9:c0:5c:b2:57:cb:d7:9f:01:33:75:8f:
1d:bc:6f:79:c0:11:c7:39:8d:a2:29:07:50:12:64:3e:9b:22:
6c:60:d7:fa:9b:54:42:f8:85:b9:04:c0:35:af:73:28:cb:5a:
dc:a0:77:04:12:fb:8f:44:18:87:ba:88:4b:e3:1d:dd:82:a4:
f9:83:9f:13:db:7e:4e:6d:7f:49:78:f6:82:80:32:41:f3:b0:
2e:49:4f:d4:dd:4a:63:e8:c1:a0:1d:4b:3c:e7:d7:73:3c:1e:
5f:25:e9:6f:71:3d:96:f8:82:27:59:ec:3e:a5:a3:19:ba:bc:
5e:a0:12:36:7c:0e:24:5d:61:d3:19:d7:cc:93:89:14:e7:99:
78:4e:cf:f3:77:d7:b4:b2:7b:d9:37:59:35:ac:d2:80:b6:24:
05:9a:a1:52:9c:ad:3f:ce:3f:d9:de:57:f1:69:f6:f9:9d:85:
7f:29:2a:3a:6b:28:78:51:83:97:bb:6d:18:81:23:88:6e:82:
4a:a5:9c:16:04:54:eb:f4:19:74:84:6c:01:08:51:03:38:de:
45:f9:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:51 2025 by rpki-client