Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: zXDVPBKTZ+tqT+Gn/SbzXMcRkT31NpTHzcXKms6F6q8=
Subject key identifier: CB:6C:ED:8B:B8:14:B1:80:E7:42:BA:D8:CE:BB:23:F8:73:DE:05:CE
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 0194BC04F8E9B219E2331BE0D066FAE71739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0A95
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: 7jf1vPnvetFqcdRpJ/dTunzfxDUr0IYtkpi57GwCQuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f8:e9:b2:19:e2:33:1b:e0:d0:66:fa:e7:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=cb6ced8bb814b180e742bad8cebb23f873de05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:8d:9c:00:d7:bd:ba:82:81:1d:73:e9:84:
83:fd:c7:af:b8:7a:b3:fe:b3:8b:dd:1b:8d:81:87:
a4:2e:8f:c7:46:63:38:54:b3:0f:69:05:3c:32:43:
4f:ef:28:8d:ca:44:0f:1f:4f:3e:3d:03:c8:b5:55:
57:35:82:2f:31:0f:ab:64:53:cf:a8:e6:96:78:7b:
11:83:bc:cb:66:66:b6:58:a8:e4:5a:65:06:48:2d:
73:09:ec:5e:06:11:01:0b:fd:c5:65:94:f8:6d:4e:
f0:36:38:a1:bb:8d:a4:f1:97:a2:2a:1b:41:22:fa:
7c:b2:d5:6b:49:74:4a:2d:5b:32:2e:6c:fb:14:e0:
08:d2:9f:69:4a:93:51:d7:27:ce:3a:6b:f3:f2:dd:
6c:6e:81:17:5e:cf:98:24:41:d0:19:eb:56:10:a5:
67:65:ab:b6:20:24:40:18:55:87:d3:16:bb:1c:dc:
7b:71:eb:cb:61:1b:79:ec:dd:8a:65:90:23:63:59:
63:14:21:cf:30:43:94:65:46:2e:85:90:65:df:67:
95:dd:fd:20:62:21:03:b3:85:c4:e2:8c:e8:7f:1e:
80:4c:80:56:52:e6:27:d3:98:42:cf:44:90:7a:57:
55:a8:dd:bc:61:14:9e:b6:a8:a2:16:15:fe:0d:77:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:ED:8B:B8:14:B1:80:E7:42:BA:D8:CE:BB:23:F8:73:DE:05:CE
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:65:2b:a0:66:f0:65:b9:05:fb:7e:09:96:15:2c:d6:26:cb:
1b:49:4d:14:ca:1c:10:89:5c:f6:7a:ea:6b:ac:00:27:b2:a6:
7e:be:58:62:85:21:ea:67:a1:17:5a:de:31:00:58:1e:61:47:
c3:b7:81:7f:be:d0:dc:ce:14:f2:f5:8f:06:f1:b9:23:53:35:
3f:29:bc:35:73:00:ea:fc:7a:dd:b8:a9:57:ec:5e:63:75:c3:
97:f5:46:d9:71:20:f6:60:44:c6:db:9c:00:89:bc:e5:c4:2d:
d1:c8:ad:56:d9:c9:2c:8b:5a:dd:f0:d7:8d:23:dc:d0:88:69:
27:cb:77:c2:75:95:3d:74:d1:12:43:96:a0:05:a3:44:82:6b:
2f:89:20:f1:f0:54:ba:92:8e:26:04:3b:42:1f:13:f7:d5:78:
de:56:67:4c:0a:f4:a0:b0:46:06:2f:9d:08:cb:ce:d9:59:33:
13:9c:c3:1d:80:49:8e:bb:95:d5:df:7c:12:36:c4:b3:1b:0a:
9a:02:b4:3e:03:0e:1f:da:9f:6b:99:82:a5:1f:1a:08:1d:ee:
e2:d3:74:41:f2:d7:74:36:f8:f5:26:d5:d2:6e:ac:60:57:07:
3c:51:26:bc:05:15:6e:3a:88:e0:89:e5:c1:09:b3:6d:77:e4:
0a:bf:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:35:58 2025 by rpki-client