Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: FWvrdV/eT8VmRRPbnt7B40cATnu7UkVNly7UnOKtXkg=
Subject key identifier: 61:2D:9C:82:5E:8C:2E:EC:BC:56:A5:C5:61:52:28:E7:D6:54:03:A0
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 0194BCE0B4A75F991CA08250CC94A9FDBC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: GkLmZzSWpDpBYn1CpgE5MWskh8tdSUDkP0yb4NKcCk0=)
2: bldtfvyuIcb6nqjUAl8Ak0zMF30.roa (hash: dx6ZT1WJQ+QEzva9Bd5tv/adJVLszcwVSLKhJy+UO24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b4:a7:5f:99:1c:a0:82:50:cc:94:a9:fd:bc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=612d9c825e8c2eecbc56a5c5615228e7d65403a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:bf:98:27:38:d9:97:db:3b:17:f7:c6:ec:
52:1d:cc:70:db:4b:e2:05:d8:5d:7e:e6:77:bb:0c:
60:99:a3:04:ec:5a:dd:75:52:29:f5:98:43:e7:95:
09:cd:fc:3c:22:94:2b:5f:96:92:39:7c:22:31:c8:
9d:4f:00:6e:4c:31:60:51:de:30:3e:0a:18:c0:bc:
b4:37:6b:ee:83:81:df:2d:d3:4d:d0:5d:1c:53:4c:
a4:93:9f:c1:8e:2e:2e:96:67:c8:9c:87:60:32:b5:
5d:dd:b1:a1:5b:df:29:b3:86:09:91:ab:f9:5b:47:
33:3c:f9:16:db:d8:0e:a2:b6:30:7b:0f:a5:44:38:
d2:e0:63:b1:ec:d3:ee:bd:37:ff:fa:5f:ee:aa:81:
75:9d:7b:73:f7:d9:3f:a3:58:ae:71:80:25:0f:d6:
3c:cf:75:29:3d:5f:7c:3c:11:17:fe:c6:94:35:65:
d8:da:09:1b:bd:6f:92:e2:11:55:3a:a3:c0:20:81:
c7:c5:0d:86:24:27:bf:d7:48:6a:73:b5:b0:a1:c6:
51:f1:11:8b:7b:5d:5b:d1:6d:c8:4f:cf:56:35:1c:
90:4c:15:d2:0e:92:64:5a:83:74:6c:04:13:ab:fa:
74:2f:fe:48:52:b5:35:a4:84:38:e5:69:27:1a:65:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:9C:82:5E:8C:2E:EC:BC:56:A5:C5:61:52:28:E7:D6:54:03:A0
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:66:22:ac:1b:cf:19:e2:f5:2f:31:26:a7:cc:fb:07:21:
69:04:d1:5c:4e:0a:0b:98:6a:90:0f:86:d9:d4:1e:8f:c1:28:
2d:9f:12:a6:dd:bc:91:d1:e2:78:a9:bd:38:ac:63:15:7a:00:
6d:cc:9c:7e:0c:63:1c:ac:a9:aa:b6:52:a3:b2:b1:a7:76:8c:
e4:8e:5c:26:fe:97:9a:0c:1e:e8:af:74:a7:b8:ac:b9:48:b4:
cf:99:ab:c5:27:84:1d:38:18:12:6e:bb:8e:a9:70:95:19:45:
82:78:64:60:4d:8b:cd:6b:2c:aa:7d:6d:c1:09:20:e4:ba:5f:
7d:4e:e8:75:0a:68:94:2a:33:00:95:c5:57:0f:48:a9:72:96:
7b:32:73:d5:88:3d:98:3b:e5:87:44:ab:5e:bb:2c:5b:b6:04:
16:1e:fa:a8:cc:be:c9:69:65:69:47:b1:ce:ed:b2:66:fa:da:
b3:b0:f8:6d:f9:b8:53:07:12:b5:d3:0a:05:bc:99:1d:13:c4:
6d:8d:18:83:15:40:c7:6e:1a:0b:34:bb:d8:b3:77:9c:5e:e3:
3e:9a:d7:9e:76:d4:04:ae:bc:c7:73:83:8a:e3:96:00:d1:4b:
91:e8:e3:b8:63:0f:2d:45:b7:1c:3c:b8:bc:ed:13:0b:60:db:
ed:eb:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:22 2025 by rpki-client