Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
File: UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json)
Hash identifier: VIrZlwyOXx91eHSjVFn3cS2XnL7Jegl9YUG0YNGLOSc=
Subject key identifier: EE:1A:62:B0:63:F9:F8:E5:04:06:27:BD:28:A9:D8:9D:25:85:4E:34
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial: 0194BC3C5E1A84985D49602D735801F4F5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: QrLxpXcKKlTKVqNWJjfnZ5zQego.roa (hash: JlU34SAKSUABE+VJCPnsQJhW9HL/rg4ccciJ5TxRUSY=)
2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: /ju91GU3qJyOWC/pcQbY2KFX7Ef4bVhqcDXqfNTDinI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:1a:84:98:5d:49:60:2d:73:58:01:f4:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=ee1a62b063f9f8e5040627bd28a9d89d25854e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:84:98:ee:b1:0c:db:7d:e4:d7:08:6e:d7:
e8:6b:9d:d9:bb:99:38:0a:d8:15:a4:e2:0d:a8:bd:
7a:b8:5c:9e:aa:44:1d:bf:f8:27:32:cf:44:8d:f5:
14:cb:34:1d:17:35:4b:cc:57:e1:ad:0f:a5:0f:3f:
67:20:61:b2:81:36:b9:c5:5b:db:1f:db:1b:f9:cb:
32:eb:4e:af:82:33:3a:42:8d:1b:17:d1:c8:03:cc:
48:9d:bc:e2:7b:f8:ce:e7:3f:bf:a0:2a:1b:94:7f:
e2:92:05:ef:f5:31:63:af:8f:10:f7:c9:24:e3:57:
cc:b9:28:d7:d0:f6:87:ba:81:77:40:d5:b7:da:ba:
e7:d0:91:38:c4:60:2d:81:bc:4e:b3:e5:76:c6:08:
3f:b0:25:54:a8:e5:e3:d7:65:f2:d0:35:2c:07:3e:
64:30:87:79:4f:34:6c:ae:32:7d:08:bf:12:7d:e9:
e8:0e:4a:5c:5c:4c:6a:75:c0:36:38:fd:0c:7a:18:
a1:cc:15:9a:be:74:9a:b0:fd:96:f6:c8:38:33:12:
1c:c1:6d:47:dc:38:3a:d9:61:1b:50:a8:16:f5:f6:
51:2d:c6:18:2a:9f:aa:e1:a9:d1:55:7e:09:5d:a1:
e2:05:a6:b3:9d:38:7e:c7:48:60:f7:7a:18:85:c4:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:62:B0:63:F9:F8:E5:04:06:27:BD:28:A9:D8:9D:25:85:4E:34
X509v3 Authority Key Identifier:
keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1a:79:12:4e:be:ba:0d:c0:9b:45:53:af:84:58:dd:38:bc:
b0:63:94:62:72:4e:d2:5a:53:f5:6d:dc:53:36:6b:61:d6:9f:
e6:f9:5a:ca:48:92:64:3a:ae:6a:46:37:a4:7e:37:e7:0d:b2:
9c:73:5e:6f:58:1f:81:33:72:39:2b:a0:7c:3c:a4:4e:43:cc:
48:c9:ea:e1:7c:90:89:8d:50:f4:28:cd:a7:b2:00:a0:58:48:
4c:4e:7f:2c:b6:b0:ca:3c:9b:7d:ec:9b:f6:73:55:ea:e7:7d:
95:94:bd:c4:41:aa:16:3d:d4:6e:b7:ed:b4:3e:3e:87:27:3e:
e6:89:c0:50:c6:94:e5:65:36:27:aa:01:0a:f1:35:c8:06:16:
f4:51:1f:1d:74:6c:7c:9e:bc:94:7d:ab:b6:26:5c:e4:e1:1d:
4c:41:55:43:4e:f5:70:23:77:a8:51:9f:07:83:92:35:90:4a:
26:99:42:e2:b3:93:2c:81:14:55:04:47:26:7d:36:e0:67:68:
6d:02:f1:2f:33:f0:32:89:d2:cc:af:41:6b:3a:ca:ab:a3:16:
fb:5c:70:bf:e7:87:dc:e3:84:6d:0a:af:24:79:ea:95:b7:65:
da:5b:f5:d9:4f:4f:36:2f:86:ea:af:62:8b:c8:5f:c1:fc:6c:
3b:d7:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:43 2025 by rpki-client