Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: JTHvmmqNk1XzMQBJ5b96rovg7Gx6FV+LwyENHDIqSyM=
Subject key identifier: 98:54:D9:BA:3B:56:B4:CF:C5:BB:97:D3:7A:07:CA:B9:59:C1:8B:A2
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 0194BD4E66D3E16362D0E99E5B3AC76BD976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 03E4
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: kVoRWrIR1DHa/u9P2AkEDDeX3GkjAXBmQ8bWOIRpnfU=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:66:d3:e1:63:62:d0:e9:9e:5b:3a:c7:6b:d9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=9854d9ba3b56b4cfc5bb97d37a07cab959c18ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:e4:a7:3e:0c:bd:61:b3:eb:10:26:4c:41:
a1:56:0a:b1:c6:5c:01:b8:41:2b:a8:73:28:c2:ff:
f3:85:01:68:fa:12:8f:e6:98:90:5f:03:bb:7b:4d:
fa:4e:19:c0:27:87:d0:4c:49:49:06:94:3a:55:5f:
4f:f4:7d:25:ba:45:15:c1:ee:0b:50:e4:ff:fa:5b:
09:05:c3:c5:f9:01:ed:2f:56:43:9a:92:ff:df:89:
b6:66:d4:e8:85:45:7b:7a:ae:66:a8:61:78:39:71:
ef:3f:f5:69:7a:c3:63:c3:00:f4:a8:bb:1d:8e:41:
24:96:0b:82:29:8a:e0:98:0f:c0:63:27:b2:cb:f7:
2e:2d:30:3a:ac:f9:d8:fe:29:12:d3:78:91:c5:81:
bd:28:d0:6f:35:73:13:f6:18:28:2a:44:4d:64:0f:
fe:bf:21:bb:fd:f0:66:f0:52:05:3d:41:a0:37:28:
01:89:83:da:ac:a9:11:6f:a5:68:16:d5:be:c0:14:
a8:a2:21:8f:f7:d6:87:3b:74:88:9c:f0:5b:46:40:
bd:80:64:06:74:a9:07:ed:10:35:ca:4e:9b:b8:d2:
c3:d8:b7:26:b0:ab:15:5a:80:29:10:2f:90:17:63:
2d:82:ff:db:b0:f0:3a:dd:ac:85:c7:46:e2:24:75:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:54:D9:BA:3B:56:B4:CF:C5:BB:97:D3:7A:07:CA:B9:59:C1:8B:A2
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e9:4b:de:2c:a7:aa:70:7a:46:b5:a0:52:22:b6:75:2f:d9:
64:f0:9a:d5:1d:6c:68:01:29:1d:28:23:04:94:37:98:24:0b:
70:74:46:49:b1:39:1b:90:bf:0f:70:7c:f1:6a:06:db:de:39:
52:ac:02:5c:8b:34:39:b5:fc:ab:e3:5b:60:6e:9e:e1:0e:9b:
c9:d1:25:00:9a:56:4f:27:88:c2:83:f0:2a:68:e4:0d:45:2f:
ea:73:ee:90:7e:11:fa:1e:07:16:7e:75:fc:9e:78:f9:63:e1:
3e:5e:91:7f:91:27:3a:6f:9a:77:ce:de:47:49:6b:39:36:b4:
40:b0:27:2f:91:13:d8:c9:b0:57:08:54:57:dc:e5:56:d2:8e:
7c:13:ce:f7:a2:29:dd:8c:82:c8:28:42:e0:17:ce:cb:d7:5f:
8e:a1:44:7d:ba:b8:51:ca:33:71:d2:7e:21:c8:de:37:9b:5d:
68:77:fb:71:56:c8:11:65:db:fb:1d:87:f1:a8:9f:bb:d1:ec:
eb:a0:e5:f2:be:78:d0:74:7d:57:d0:82:25:07:b0:95:a2:3e:
63:ba:66:b7:38:0e:9c:f2:0b:1d:a2:87:b9:63:f1:10:25:82:
f6:99:a1:da:a6:35:ce:90:c1:72:4f:1a:79:50:4d:a6:0a:0c:
89:dc:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:13 2025 by rpki-client