Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
File: UbSboN2GFRKGGNUBWcsPO16e5iY.mft (raw, json)
Hash identifier: Hi8dIP6yimZTJOC5De7oOpMm/zUugSODAcXf7x/ERU8=
Subject key identifier: 73:40:8F:47:DE:2A:C1:5D:11:AD:4E:22:D5:47:2F:3F:87:8A:66:F1
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 0194BC3C24D994D4C64C6567F0F8A5474D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 2wmtliVBxfozFrIlKB1-nwfdjAE.roa (hash: +lKNzr0mRWdZKlHpN+HQ/mkjY4gghuaP04gNQkK1wf4=)
2: UbSboN2GFRKGGNUBWcsPO16e5iY.crl (hash: voyyBQ8vtfdNAsqWA1JF+eCDIXsXtNNKQ4VjFpehqYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:24:d9:94:d4:c6:4c:65:67:f0:f8:a5:47:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=73408f47de2ac15d11ad4e22d5472f3f878a66f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:b7:51:39:f8:d3:d8:fd:f8:bc:70:28:65:
66:bf:e1:16:08:f2:09:b5:b4:e2:3f:5e:72:4c:83:
da:7a:23:6c:9b:fe:70:b5:09:cf:8b:4b:0c:72:6f:
21:66:7e:0b:61:8b:e9:d1:7f:13:ab:c7:b3:d4:87:
cc:5f:c4:a0:91:44:73:f1:ed:d8:be:54:49:c1:61:
00:ae:76:b3:00:ca:0f:6b:39:96:4b:ee:fb:a5:56:
a1:46:62:ea:4e:31:a5:89:ea:b6:a4:55:04:74:4e:
eb:64:b1:bb:75:aa:15:7e:10:5b:4d:87:54:15:9e:
44:70:61:62:f1:1a:e2:84:c7:de:79:19:67:93:9a:
05:08:1e:87:60:93:cc:06:29:34:3c:63:e4:c9:02:
14:c5:02:b3:71:e0:7e:a8:c9:10:2a:b8:64:cb:20:
44:50:52:96:31:d1:6a:af:f1:e6:09:b9:9c:49:de:
73:3c:da:a3:fd:bd:65:ab:fb:b1:69:3d:77:c5:d5:
4f:f9:be:71:12:49:6e:43:dc:47:24:8f:99:47:46:
81:97:a5:70:b7:82:d3:40:dd:a7:5b:67:cf:e5:73:
00:09:e8:43:04:52:73:3c:6f:9c:29:ec:47:d9:2d:
67:ae:a6:25:e6:f5:2c:81:fc:d0:f5:8b:60:af:0b:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:8F:47:DE:2A:C1:5D:11:AD:4E:22:D5:47:2F:3F:87:8A:66:F1
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:df:e7:c9:ef:23:fb:7c:ed:29:7f:53:85:16:bf:bc:e6:02:
61:a2:aa:17:fd:ac:5c:06:10:f7:dd:e4:da:1f:a2:22:51:a5:
91:cc:a0:27:e3:44:80:11:a4:43:83:9c:b3:8d:07:0c:7c:68:
57:27:2c:6f:64:68:12:e8:90:f0:e8:50:e5:61:e2:95:40:da:
d1:60:cd:be:aa:bd:f3:6b:24:02:61:c6:16:cb:73:04:1f:61:
59:9c:5b:91:87:c2:cb:f4:20:6a:34:29:a9:a7:c0:f6:4f:d0:
98:b0:7f:f3:bc:af:62:09:82:7c:9b:fb:b3:ca:41:af:dc:4e:
d4:0d:18:94:95:63:10:2b:4e:d4:5a:1b:bd:db:fa:06:bf:6a:
e6:a9:c5:e9:ac:83:8c:01:3a:24:eb:b6:9c:e6:bc:9e:4e:56:
78:85:e8:d5:e3:c7:6e:f5:00:bb:95:31:ba:01:42:a3:83:07:
ae:fd:45:14:9e:2e:e9:62:41:38:d0:68:e9:c6:52:86:c1:cf:
81:91:7b:de:e7:80:67:f9:80:cd:a2:94:ee:1d:9c:5d:2c:a2:
8e:78:77:91:3b:13:fe:ae:0a:47:be:e3:ce:0e:37:97:f0:cd:
83:40:e6:cf:3e:c0:14:54:7f:6e:71:66:64:1a:de:e4:97:48:
73:f7:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client