Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: ohsJX7gObbJXA9Wobg0Rs7GQZL7v7Eyh+xhcAZu9pp8=
Subject key identifier: A1:B9:E4:4F:B2:6F:7C:0F:A5:ED:4F:A9:B5:53:E9:DF:7A:C3:6D:7F
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 0194BC730DC937C309F64174FAC0BEEEF8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 137C
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: 0Ihd9eiH7QoDdt66FwZRiWtc623QC5DNo6UQbhyRQhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:c9:37:c3:09:f6:41:74:fa:c0:be:ee:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=a1b9e44fb26f7c0fa5ed4fa9b553e9df7ac36d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:8c:7a:a2:fa:95:15:ca:f5:b8:bf:db:df:
f1:d4:e3:50:4e:8b:21:78:d4:39:2a:41:3a:78:85:
da:ad:62:60:02:bb:84:8b:12:e3:3b:88:0f:bc:0a:
9e:19:42:be:23:4e:17:a4:14:8d:14:95:d6:e8:e3:
49:dd:bb:96:df:3f:a3:c9:fc:33:c6:23:b8:2b:54:
83:a5:6b:2b:b5:61:66:a6:f9:3f:04:87:c1:6f:ae:
65:b3:67:80:40:77:2b:60:64:c1:98:e5:75:fe:0d:
b3:7c:48:92:18:03:6a:a4:5d:2d:58:dc:c2:a8:d9:
58:bd:80:2c:b3:1f:39:97:1b:27:1d:f2:1a:f7:fe:
e9:96:4e:18:58:6b:17:00:24:a9:88:2e:65:2d:28:
b2:9b:22:23:e6:db:75:c1:4e:c0:36:84:5c:89:52:
dc:7b:34:d9:81:ff:b8:34:a2:00:98:6c:ac:0b:ac:
9e:39:c3:89:dc:5b:66:01:e1:68:a4:88:32:72:e4:
41:d8:aa:80:c3:88:86:6d:db:fc:c0:4d:28:2c:f3:
95:3e:0c:fc:2e:94:65:86:1b:a0:89:81:68:b4:18:
67:a6:ca:8d:92:53:7f:48:53:b3:7e:cb:13:c7:48:
8c:2d:4a:a1:36:59:60:2b:6d:6d:3a:ae:b7:7f:79:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B9:E4:4F:B2:6F:7C:0F:A5:ED:4F:A9:B5:53:E9:DF:7A:C3:6D:7F
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:99:3b:e8:f8:4c:cf:45:d2:13:91:d5:2c:ab:8f:88:40:a7:
bf:de:57:17:e0:22:62:5d:3a:f6:64:34:67:7b:a1:7c:e2:fd:
de:02:67:d6:2a:5f:e2:e8:47:da:7a:4b:1d:f7:f2:bc:b2:48:
ba:ee:87:23:c8:d8:c9:2f:fc:30:a1:3e:5a:4a:06:d6:0f:9a:
a5:6f:74:d6:38:c2:82:de:f1:b8:f0:47:61:cf:aa:df:06:94:
49:19:51:a4:7a:ea:79:ef:5b:cd:cb:07:cd:ed:4b:6e:a6:7c:
79:a0:80:68:5b:98:c5:a9:fe:85:8b:c9:aa:72:11:fa:08:43:
a8:6b:0b:22:0d:03:70:3d:4a:dd:cd:e9:c7:f8:91:ad:61:fd:
ce:f7:83:be:67:42:75:83:d4:e7:81:28:31:4a:55:03:3a:02:
b8:50:9a:a6:c4:d1:4c:6d:41:0b:8d:b0:66:93:5e:0e:a9:a6:
77:24:9b:1f:b4:bb:37:9b:76:9e:4c:5f:48:2f:21:b3:b7:50:
38:24:2b:82:aa:32:50:72:47:51:90:c7:de:98:85:4b:12:32:
1c:29:1e:f9:32:e8:72:10:f3:e7:c5:17:ab:15:de:cf:27:2a:
2f:d2:d1:80:8e:a3:9d:b2:47:7c:90:ed:1d:e7:c5:b9:1f:ac:
e7:1f:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client