Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
File: U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft (raw, json)
Hash identifier: o2YSwuGhXe27cNaiVdtdDy6NDaNTLfFzewS9aV1NRDw=
Subject key identifier: F2:26:12:01:45:B3:CF:9F:58:BF:79:AD:0D:3A:CE:48:17:48:39:60
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Certificate issuer: /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial: 0194BBCDC38917926A197122FC7788608708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
Manifest number: 085E
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: GPBna_IoKKdQyaNksGJT2yWTCj4.roa (hash: TAihNlvs0SdUgl2vxovWMBnyUqa0RWqHLKo09+4ZR88=)
2: U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl (hash: ua2zScyNqlXd7pEX0EmwuzPf8ChI1QdS9twssjW3dgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:89:17:92:6a:19:71:22:fc:77:88:60:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=f226120145b3cf9f58bf79ad0d3ace4817483960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:88:e0:a3:f9:cf:b7:b9:9e:36:ff:17:4d:
8b:f4:0f:3c:f6:d8:c4:ab:a5:b7:05:18:0c:59:6c:
6a:17:8e:13:72:6e:ac:5e:92:d9:e8:3b:36:dc:62:
04:0f:71:0c:c1:8b:29:9a:16:d4:d4:95:17:cf:02:
f2:f0:55:89:5c:b0:2d:86:d8:97:6c:bf:08:72:6e:
77:38:89:8d:57:a5:b9:28:c8:ca:7b:1e:fc:28:2e:
d7:30:77:8f:e8:15:8b:5e:df:92:d2:0e:8a:8c:2c:
60:a3:e1:48:9f:76:76:2b:9c:72:4e:42:87:85:70:
db:f2:4f:90:2c:cc:a8:43:69:d6:06:a6:60:5c:46:
15:05:2f:53:d1:a3:c2:e5:01:a5:98:16:6c:8d:cf:
a6:d7:c5:00:f2:52:05:4a:6a:bb:72:51:14:fe:01:
eb:09:ee:8d:78:dc:07:a1:0c:3b:77:8b:f8:43:7c:
ec:b1:22:74:cf:33:19:a5:27:bb:23:b4:be:2a:8b:
12:05:51:a7:d0:43:4b:6a:6c:98:ce:5a:91:be:a9:
85:cb:e9:24:1d:bc:92:0b:db:29:14:1f:27:1c:9f:
ab:f6:a2:03:b2:98:0d:c2:04:51:85:8d:ed:c4:11:
bf:fb:69:c8:59:52:22:e9:03:08:e1:a9:d3:3e:5a:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:12:01:45:B3:CF:9F:58:BF:79:AD:0D:3A:CE:48:17:48:39:60
X509v3 Authority Key Identifier:
keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:81:e7:bc:0c:6a:51:2a:84:7a:0c:6f:d3:28:76:d5:8c:f9:
be:18:4b:47:5a:37:b3:85:c2:4d:56:7f:95:96:40:21:45:83:
ad:8d:be:a6:b6:07:ec:0c:b5:3d:79:f0:a5:f0:06:5d:c4:53:
ff:ab:8a:b0:69:ae:2b:87:de:0d:04:c3:24:df:37:b2:a6:23:
b1:4f:04:c1:d0:1a:89:f1:05:76:38:e5:e9:35:bf:1e:da:0b:
be:ca:65:e5:9b:31:c7:8b:50:73:db:cc:30:cf:fb:62:c1:1a:
51:b4:46:39:2f:fe:59:7c:db:c4:51:0d:a4:71:9b:12:2d:ac:
41:70:d8:b5:40:bc:1c:97:77:0d:ff:f9:7a:5f:bb:e2:e6:ab:
c7:fa:c4:7f:cf:00:2b:b4:b7:54:30:b4:2b:08:e5:ad:f4:5c:
77:fd:f7:6f:ea:dd:04:5d:0a:9b:f6:b2:36:7f:20:6d:25:aa:
67:e3:87:79:e5:fc:61:9c:2f:82:a3:5f:9f:72:0f:50:91:f8:
38:b7:7a:b2:6d:6b:8f:57:12:e6:6f:65:6b:32:2d:08:55:7e:
51:92:49:cc:e4:f8:04:59:aa:ee:95:94:3a:48:ab:0f:4a:57:
00:bf:c8:c3:b7:12:61:b1:f6:82:a3:a9:0d:1b:54:d6:ab:60:
5d:ba:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:22 2025 by rpki-client