Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
File: UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft (raw, json)
Hash identifier: 62AuHctF29HXcVh7M58HjzjslvqHVZaYmEvYTBZgY84=
Subject key identifier: 9D:72:78:26:EA:8B:C2:6C:5D:DC:C5:70:F0:E7:2C:DB:AF:F3:C6:C3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194BD91F74BD7EF08DDD3E8B5A62243EFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
Manifest number: 2F2E
Signing time: Fri 31 Jan 2025 18:14:06 +0000
Manifest this update: Fri 31 Jan 2025 18:14:06 +0000
Manifest next update: Sat 01 Feb 2025 18:14:06 +0000
Files and hashes: 1: 1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa (hash: PupEsIXHB6rGqEymngMsBPy2Wh8A195/YgvNAUoFwO4=)
2: UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl (hash: iPZWm7ZGVKCakC02y5GSodo4jfLNDCN7U3cNBaulliQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:91:f7:4b:d7:ef:08:dd:d3:e8:b5:a6:22:43:ef:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 31 18:14:06 2025 GMT
Not After : Feb 1 18:14:06 2025 GMT
Subject: CN=9d727826ea8bc26c5ddcc570f0e72cdbaff3c6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:cc:61:e0:54:04:b5:c8:53:21:0e:03:5b:
b2:f1:f4:7e:6b:35:46:78:51:4f:04:28:ff:1b:73:
6e:30:47:a0:86:24:d6:54:7d:d4:c5:56:2e:2c:09:
ec:e2:66:b2:44:fb:b0:90:1a:80:01:9b:ae:7f:18:
58:c1:4c:b5:bf:77:e8:2c:d7:d7:72:23:13:b4:4d:
a4:0a:90:ed:b7:2f:99:94:24:86:61:df:56:34:e1:
de:88:88:7b:ac:a6:70:b6:95:e7:d8:0c:2b:b6:57:
4f:91:08:cb:3a:f0:98:2f:6b:2a:5a:29:22:6c:b2:
60:77:75:80:c4:1d:47:5f:77:af:96:74:fc:cf:79:
20:89:44:5f:ba:70:42:9d:2a:27:db:b3:4c:1c:a7:
e6:06:4c:d7:c4:5e:2e:29:ca:c9:3a:5b:fe:88:65:
05:ac:84:3f:4a:8e:73:75:15:4d:bd:6f:3c:77:ab:
68:3f:3f:57:d2:47:5a:77:fd:0c:95:14:94:b3:45:
37:7c:0d:1a:95:da:ae:6d:c0:27:fd:ea:5b:c2:c4:
db:6b:fa:65:bc:ce:4b:53:d4:b8:25:6e:1c:73:a0:
7c:28:43:7e:1c:16:5a:71:db:dc:8a:b4:d1:ea:e9:
b4:45:35:60:90:86:73:79:08:8f:f9:8e:18:4f:bb:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:78:26:EA:8B:C2:6C:5D:DC:C5:70:F0:E7:2C:DB:AF:F3:C6:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a7:1b:b1:08:7b:53:be:cb:44:1a:da:95:7c:a5:f5:03:c0:
ec:88:b5:45:cc:89:bc:19:a5:0d:7b:ab:cb:b1:96:c3:75:05:
5b:5d:c0:5e:fa:1c:4f:b3:5b:4e:20:d9:cf:1d:ef:72:b1:3f:
ea:2d:e1:7f:0b:b9:71:bb:79:ff:0e:e6:09:12:eb:03:92:34:
1c:bc:b9:0d:71:20:e5:73:ee:a3:1b:4a:a1:fe:a7:c8:52:49:
96:fa:8d:ad:44:8e:1d:5c:1d:66:21:12:4b:63:9d:3b:96:85:
30:59:ed:a9:a3:e3:3f:13:49:10:14:d2:c9:29:da:10:9b:9e:
ac:12:f2:bf:9e:f1:82:be:ba:55:8b:a2:d4:ca:ac:15:44:27:
af:1d:cb:8a:97:b9:9b:e8:7a:bb:fb:76:24:7d:e7:9b:c5:53:
6e:81:37:7d:94:55:f2:6f:b3:a5:a5:41:da:1d:ac:8b:9b:2d:
7a:8c:2e:3f:25:55:a1:95:04:ee:b2:47:4b:9d:79:9e:b7:a1:
f7:75:59:46:bf:d2:ec:1b:44:af:11:ee:ed:65:15:74:a3:bd:
15:16:40:9d:41:67:37:f0:c1:e6:33:ee:fb:2d:99:51:4e:46:
bb:7e:8b:4f:fa:dc:4a:5b:5e:5c:b4:c6:7e:3b:dd:f2:ff:c3:
0a:58:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:40 2025 by rpki-client