Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier: NijvEEHt65op/s22cAvrSpFLcWgtccrj/4036tBDsuY=
Subject key identifier: BC:7A:62:D2:EF:91:D8:A6:53:E9:5B:1E:C5:DE:2B:7B:5C:DF:E9:10
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 0194BCAA3B06204DD35523B0B1F72B0D7668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: vFTg0flPMijlfG6mUybseE3inXIRtypiVpDXlk5Jcf4=)
2: XntGa_7-ppXotUDBoZrK1B3W5Z0.roa (hash: 24HGkZzWTnK/S3EwJ7veoxpuQnRxskzxwtNYQjYX8aM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3b:06:20:4d:d3:55:23:b0:b1:f7:2b:0d:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=bc7a62d2ef91d8a653e95b1ec5de2b7b5cdfe910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:ef:d2:f8:80:bb:33:41:bb:af:53:8e:8f:
9b:a5:38:ff:cb:73:c2:ba:7d:3a:e1:b6:3c:7b:93:
33:ef:e3:2b:15:58:f0:08:96:89:b9:4a:c6:d0:82:
55:1d:c0:7f:bd:d0:89:8c:75:cb:24:ed:d9:ec:da:
3e:8d:83:da:60:e5:eb:79:99:90:ea:33:e8:2c:de:
a5:f6:23:77:f3:6d:c0:93:75:cc:88:88:57:20:4c:
b9:d9:5b:7c:1a:89:04:eb:c2:86:d8:a4:a4:2f:64:
1e:dc:a1:96:f4:09:6c:40:3b:b0:f1:66:5b:be:c7:
71:36:5a:a3:7c:3c:d2:9b:de:8d:9e:4e:ed:44:b7:
4a:46:d0:91:03:b0:c4:85:ec:9d:60:b9:5d:c9:21:
7a:1d:c8:cb:76:b7:45:41:83:cd:14:95:a8:23:06:
6a:02:4a:ef:ad:8f:4a:93:3b:60:80:ed:02:72:74:
e2:66:1f:7b:04:9b:5c:d4:db:1d:8d:c6:c9:03:76:
af:7d:8e:51:6b:c7:cf:76:b6:2f:68:f1:fe:f7:e5:
fe:4b:90:53:93:8e:bf:4d:22:fb:64:6b:16:43:f6:
9b:fb:22:f5:ba:53:94:16:c5:1a:c0:f4:c7:19:a9:
80:ef:ea:00:0d:32:4f:69:e5:4f:25:2d:b5:14:d8:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:62:D2:EF:91:D8:A6:53:E9:5B:1E:C5:DE:2B:7B:5C:DF:E9:10
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3a:6b:07:3a:98:0a:b4:92:67:d2:dd:ec:2f:e3:b9:70:af:
ea:d5:1c:33:e8:1a:a0:0a:d1:5c:f1:5d:1c:63:d6:d2:ff:c2:
c4:3f:b3:6c:c6:94:53:33:9d:31:96:20:8f:af:6b:ce:28:d8:
f6:0e:73:7e:d9:8c:b2:b4:cf:cd:46:91:5e:0f:a9:1f:1b:55:
75:6f:a8:24:38:4e:44:c2:9d:ed:e3:de:ab:e1:ce:34:e9:fa:
df:f4:31:61:60:f6:ac:b4:e7:f4:10:cc:c2:8c:a4:2b:28:ff:
1e:cb:b9:fc:7a:38:d7:e2:73:4a:ff:3d:77:c0:81:6f:37:be:
05:41:13:88:80:14:17:c5:1a:40:fe:96:af:2a:15:e3:dc:48:
d2:00:74:b4:94:dc:1a:a0:16:62:bc:b8:ab:95:e7:93:c9:ec:
88:9c:f2:5e:13:22:33:32:4e:76:1e:50:eb:a5:b5:14:31:a5:
8b:8a:f9:06:2f:56:73:2f:13:3d:16:d3:7a:df:78:a2:ea:27:
00:96:55:c6:2b:17:e2:87:45:b4:ab:6e:b6:56:d0:e6:1f:bf:
02:e5:ba:ff:97:13:2d:2e:1d:d6:5c:b3:81:b2:86:88:8f:41:
37:74:73:e8:71:9d:7b:e5:9e:64:fb:d6:36:24:73:ff:4d:18:
c6:61:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:08 2025 by rpki-client