Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: dQhQidMxcNbX9X/8zljcyXS5Z6gy4kqGVoc56Xc7UtI=
Subject key identifier: 81:5F:F6:00:F8:30:04:BB:BE:A2:CE:1A:F7:FE:E2:B7:58:1D:B3:58
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 0194BC72FA310969CD1800EB0131276DC764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: HeXzeMPg+0sdncWyvyaL6X60jjtR8bnb7FW9T7io1wI=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fa:31:09:69:cd:18:00:eb:01:31:27:6d:c7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=815ff600f83004bbbea2ce1af7fee2b7581db358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:e4:71:ef:40:85:d4:54:1b:52:84:4b:ec:
15:b5:16:f6:5d:7d:bb:ea:9e:7f:e1:45:86:a5:9a:
96:89:1b:9b:b6:14:c5:3e:30:c9:bf:9b:f0:86:aa:
42:34:ad:ce:2e:7a:7f:a0:10:92:c5:25:a4:29:2d:
93:ca:6f:d6:ea:14:c1:b6:80:5b:7f:3b:cc:e2:f5:
b2:03:3f:f8:49:4d:5e:a9:35:6f:d8:4a:fc:53:2e:
e0:1e:75:68:e1:5f:48:9d:30:93:60:b4:68:3c:3c:
c0:9f:b0:1c:5a:89:40:46:b5:5c:87:7a:61:1a:6d:
38:7f:ed:27:fc:ec:95:90:30:ce:e1:30:64:a5:53:
ff:1d:db:9c:21:89:96:52:07:a9:0b:fb:d0:f7:af:
1e:a6:ec:3a:8b:60:a5:14:09:f6:4c:8d:a7:ba:cb:
85:cd:5c:fa:d8:0e:b9:6b:18:49:0f:7c:72:e8:e5:
3a:95:2c:90:53:67:d6:2c:d9:9f:bd:89:a7:15:78:
48:bf:a2:2d:6c:34:bc:0f:48:ea:83:75:f9:96:df:
cf:af:a9:f6:80:86:14:7d:5d:0f:c1:dd:3b:cd:7d:
5a:ce:26:69:65:aa:ff:c5:28:5b:5b:ae:b4:aa:9f:
c0:cb:9f:1c:61:1e:05:81:e8:e0:0e:b7:14:b1:7f:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5F:F6:00:F8:30:04:BB:BE:A2:CE:1A:F7:FE:E2:B7:58:1D:B3:58
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:52:df:50:ac:48:7e:e2:c4:f6:8e:ea:67:81:30:8e:7e:
a0:1e:c1:0d:b4:ac:b4:25:e5:80:8b:df:00:09:e5:87:ec:b4:
a7:8c:eb:94:34:17:6a:0b:3c:ce:07:0c:83:aa:ad:48:37:b2:
e5:b6:22:df:19:0c:72:ec:c4:f4:d2:66:2f:a4:37:99:f2:32:
7d:62:2d:d4:4b:3e:eb:b6:10:5a:e3:42:42:4c:a5:26:ca:53:
dc:15:9f:61:06:f6:33:4f:b8:d5:78:1f:b6:af:d6:e7:d8:42:
62:77:df:48:60:c9:d0:a9:37:d1:b9:15:ee:4f:f0:d0:f7:a6:
dc:6f:65:6f:4f:63:88:1d:14:9e:04:36:7b:9e:39:8d:51:1e:
0e:45:8d:94:c5:51:8c:a7:be:1f:88:26:a5:68:36:e0:e4:47:
4b:e8:0d:aa:44:87:cc:db:50:c6:25:c9:c2:d6:ea:6b:8f:c8:
46:0c:d3:84:bd:21:83:1d:21:3b:14:b2:b0:cd:c2:0d:c4:d2:
c2:7e:d1:d7:fe:b3:e0:e1:12:d6:bf:9f:f6:63:d6:26:de:4d:
c0:42:7d:b5:28:6f:e8:00:7a:bb:ab:6b:d7:19:92:8a:df:07:
87:0c:e1:0b:1c:ce:29:83:ec:1d:a6:45:5f:f6:40:7f:6a:ca:
59:53:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:08 2025 by rpki-client