Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: sE04q+PfiCIy9NbCwntTfSNLbe+Hh4idltjYa9Y6emk=
Subject key identifier: 0D:5B:A2:20:54:E9:25:8B:9B:73:F1:2B:A8:06:73:23:6A:BD:92:67
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 0194BD8589F933FCCF1917BE8A14EE7CAF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 1128
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: 12r10Xb26oEF3nib5rOe4ffhjZFEXTn+Mbgeh/8AjyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:f9:33:fc:cf:19:17:be:8a:14:ee:7c:af:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=0d5ba22054e9258b9b73f12ba80673236abd9267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:7a:76:57:3f:0b:f9:90:e0:cc:80:1e:39:
d9:b4:44:3c:17:c0:d8:36:48:a7:60:89:de:b8:0a:
19:4d:0c:26:07:98:30:46:61:26:e8:2b:18:a8:93:
e7:10:31:30:bc:52:2a:6b:26:48:47:3e:99:3e:cf:
79:e1:34:a4:9f:3b:8b:25:f5:77:64:fd:8a:1c:5f:
c0:f2:dc:0b:26:26:9b:a5:84:b5:7d:0f:7a:b2:b6:
ed:97:08:84:39:91:17:46:e1:5f:54:69:2c:ea:43:
dd:3a:de:ba:ae:11:27:1b:14:aa:01:fd:60:88:a7:
18:93:9d:28:32:02:ec:19:7a:bd:91:cb:e8:65:06:
50:05:9e:19:09:04:c1:11:aa:6e:62:9a:23:cf:b7:
e8:bf:dd:31:3c:6f:1d:36:d6:6c:d4:9c:9c:ad:76:
78:14:bf:59:12:e9:33:d8:3c:f3:05:5f:76:22:f1:
09:46:04:e2:3f:61:de:e4:44:23:37:52:04:47:2c:
27:ac:28:50:79:db:4d:64:fc:1b:b3:7e:d5:9a:e6:
35:80:af:11:04:f7:c6:09:30:ef:45:01:3e:8d:a8:
d6:f8:8e:8d:8e:50:5b:02:4a:0b:db:e9:9a:34:4d:
bb:a5:ef:f6:d2:b8:db:2d:12:fd:b5:fe:61:74:ef:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:A2:20:54:E9:25:8B:9B:73:F1:2B:A8:06:73:23:6A:BD:92:67
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:97:cc:37:89:14:62:e7:ab:ea:f0:3d:21:a5:84:2d:7b:60:
89:88:ea:58:49:e4:60:f3:fc:80:1f:5b:eb:40:96:e8:84:8c:
21:7b:8d:7a:a7:9c:92:2c:6f:cc:05:1b:f4:41:40:d4:80:47:
92:c8:db:ca:a7:47:70:71:6e:96:5c:1d:b5:0d:aa:9f:9e:1d:
a9:b3:b3:40:ec:b1:7d:11:11:6f:cb:d3:02:99:c9:bb:5d:13:
79:e4:59:8c:90:e3:3f:db:0d:fe:d0:64:85:e8:5d:4a:9d:a2:
66:db:7a:33:9e:1a:1f:43:07:8d:26:1a:bd:8a:f1:85:61:6e:
31:45:81:8c:61:35:c0:a7:54:92:fd:f2:56:3e:5d:27:12:ca:
bb:4d:14:26:23:37:34:33:e4:cd:94:00:b5:32:61:e8:81:e2:
52:10:d7:98:84:a7:56:5d:fe:fd:bc:0e:ec:16:dd:80:4a:a6:
0e:0f:38:f3:71:83:c2:5f:1a:91:65:cd:20:0e:5a:2c:ef:9b:
41:25:88:02:46:65:0b:0e:9b:cb:4c:33:93:ff:c8:05:8d:13:
bb:07:c3:6c:30:b9:1e:99:f3:11:81:a8:ed:50:04:c9:02:e0:
5b:ba:0a:56:13:d3:cd:a4:3c:21:a1:3d:f3:46:45:48:66:31:
ef:b9:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:31 2025 by rpki-client