Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: GT/ykW2N1+qp8ND8/p+Ubze5knNF5il22Lxu/MpbScs=
Subject key identifier: 5B:D4:7C:6B:AB:0A:89:92:B2:AB:46:57:98:E4:4D:8E:AF:2C:81:92
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 0194BC729E3820923D45A57F04B4BD01A8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 116B
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 3IHX9JIlfr3Dk5XlRdW-7lg4QY0.roa (hash: phVZ8bPQCWvi4f6XXfdBMOctC6oPETIwAjTgpAydR44=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: rzjmUUtx/MzuYMU6u697WGvUrd25qerzLGr5sjSCv4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:38:20:92:3d:45:a5:7f:04:b4:bd:01:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=5bd47c6bab0a8992b2ab465798e44d8eaf2c8192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:cf:97:95:2b:c2:dd:1a:88:7e:29:89:05:
4f:6b:ef:e6:92:c8:70:91:72:c4:6f:c0:3f:36:d9:
e0:9d:95:e8:a2:cb:08:95:79:f9:86:21:e3:69:f4:
4d:96:b6:3f:c3:38:ac:22:68:20:66:6a:46:f4:90:
8e:23:22:7e:58:f9:f6:b1:46:10:da:15:c9:c2:f0:
b3:4d:69:9b:fe:89:f8:17:bb:53:50:56:18:c6:5b:
d3:a8:b7:ef:b6:cf:31:6f:f3:3d:49:93:4d:0d:f1:
c7:3d:bf:8f:49:af:6b:17:93:6c:bb:68:57:70:bb:
65:0d:50:e3:56:5e:23:6a:12:b0:36:51:eb:ac:eb:
f8:9f:6c:55:48:5d:37:9a:08:73:4e:2f:bd:9a:35:
a0:f2:6b:79:d8:bf:15:c5:6d:6e:6c:92:53:a8:97:
ed:22:fc:b2:1c:b8:4e:f8:4f:ff:91:a5:46:de:87:
55:b7:87:ff:fe:9b:59:c3:a4:17:e0:34:18:62:96:
2b:27:e3:57:3e:c2:96:5d:5d:50:d0:f9:3e:e0:ee:
94:82:a3:5b:7a:a7:11:5a:40:f3:87:89:f0:6c:a8:
aa:af:38:da:1f:c5:c6:a6:86:3c:1a:58:ed:96:16:
ea:0f:79:0a:ba:88:a9:d6:26:2f:03:fa:11:24:58:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:7C:6B:AB:0A:89:92:B2:AB:46:57:98:E4:4D:8E:AF:2C:81:92
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a9:68:97:1d:95:cd:6c:2f:09:8a:74:91:51:40:9a:10:e9:
61:20:a2:76:72:35:11:37:6d:d7:8c:56:df:da:f8:f4:85:2d:
26:55:4f:78:f8:1d:e9:3c:c8:fa:33:3d:7b:6b:8b:38:2a:68:
3b:29:bf:55:7f:1a:f8:53:e8:b6:88:e7:fd:51:24:78:e0:56:
4b:5e:15:f2:71:a8:e2:75:48:c5:e8:22:88:de:b6:5f:79:43:
e0:dd:b5:63:03:02:ae:a3:1e:7c:00:1e:cf:7a:e9:0f:3e:6c:
48:34:b3:88:57:d2:5a:13:a7:61:e6:3a:26:13:fd:98:bb:81:
1d:47:ed:bd:73:45:07:08:a0:98:f4:39:55:eb:04:7e:ff:4f:
30:a5:49:82:dc:23:be:dd:0d:d0:70:31:32:f0:e8:12:9d:a6:
db:b4:06:95:91:a2:13:75:a8:f6:c9:ad:37:73:1d:10:06:e6:
2a:a0:54:3f:b4:23:fe:17:a4:51:22:2b:80:91:44:f0:f6:91:
20:90:64:09:9d:eb:16:f2:fc:8a:d1:1b:61:75:c0:02:9e:89:
e2:ca:b8:3c:0c:30:92:d4:15:3f:00:29:8e:a3:92:55:41:04:
88:14:bc:ba:4b:85:39:37:87:e6:71:8f:cc:af:76:9d:b6:71:
f1:5d:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:30 2025 by rpki-client