Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: Hh3n30t5rP6/HIuDs+LghQn2Be0fnlbYQL282zNrpSM=
Subject key identifier: F6:69:09:BE:FF:B2:2C:63:88:BA:68:B3:99:19:18:75:27:12:83:2A
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 0194BD17C41429078AA2BF9D9DA296BDB400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (hash: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=)
2: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (hash: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: gcozfBdTd05fqKFjukEwJ5AhaqPHzYibgl9+AQTVmB4=)
4: _Swn7rfHkqyddWiH6mJBPzEvtPw.roa (hash: DdKMWCZ6/KHD8pm9QRG9mImRVRpGoqtnHO9unsKXibs=)
5: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (hash: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:14:29:07:8a:a2:bf:9d:9d:a2:96:bd:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=f66909beffb22c6388ba68b3991918752712832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cf:29:86:be:83:57:69:30:90:8a:f1:59:61:
eb:31:a3:ff:78:a9:65:c4:ce:c8:16:e3:af:d3:e3:
21:6c:93:b9:e7:af:c1:2e:e9:af:8d:8f:94:73:c7:
7b:a4:28:52:00:9b:56:1e:22:bc:c7:95:c3:f7:84:
8b:42:22:da:f8:eb:49:2d:82:a4:84:64:86:41:24:
c0:97:71:02:6f:7a:4b:10:01:9f:22:60:88:ac:bd:
42:49:df:3a:23:56:f6:b1:3e:37:6b:8b:da:70:fb:
a6:f2:2a:c8:db:1e:da:59:a1:58:9f:12:85:cc:74:
9f:12:3b:58:cf:ab:4a:47:22:1e:9a:a1:39:08:fa:
3a:1f:f1:6d:c4:a2:50:7b:0e:31:20:6b:41:7d:a2:
57:96:69:3f:3d:5c:cd:55:48:44:50:19:9d:58:49:
bc:6a:2e:33:1b:97:58:8c:f9:88:bf:25:2e:f2:5d:
24:a3:fa:5b:db:6a:84:41:7b:95:c4:12:51:c4:1c:
d1:26:43:47:23:ca:e3:c4:c4:9d:b1:7f:e7:8e:b8:
f7:36:b9:2b:a0:0b:4d:a6:ee:7c:12:f8:0f:7b:18:
86:49:f4:81:48:3c:90:0e:6e:ac:2f:14:42:ec:8d:
47:21:3a:8d:ff:c9:87:71:bb:6b:c6:7d:e8:c4:91:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:09:BE:FF:B2:2C:63:88:BA:68:B3:99:19:18:75:27:12:83:2A
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:fe:27:fd:29:02:b9:34:93:30:98:02:b4:e8:03:a2:c5:
b6:29:f7:79:e9:30:00:03:d1:8c:df:e8:7e:7a:62:36:25:75:
38:75:2e:d1:24:e1:83:93:d2:34:a0:5f:75:bd:39:01:3c:5e:
65:31:62:ca:8a:71:6f:dc:d8:3e:8f:21:e3:fd:f0:c6:b2:fb:
4a:6d:e7:a6:d7:b2:eb:03:19:98:36:3a:5a:a9:c9:62:64:1f:
76:6b:01:09:71:bf:8c:ec:7c:54:f3:f6:7e:b6:ed:0b:06:7e:
16:7e:94:b6:bb:cb:a0:ea:95:31:29:4e:e2:98:f7:cb:3f:3a:
c1:42:66:08:64:0d:cc:34:70:92:b6:57:73:1d:56:ec:10:57:
a7:e8:c5:aa:86:be:26:0d:e4:63:40:6e:85:dc:db:56:e9:c7:
5e:71:05:ac:d0:73:36:f3:f8:d9:d0:1f:96:ae:e6:97:00:f5:
cd:a5:9d:29:5e:60:8e:c8:44:8c:01:9e:0c:ad:4c:5c:97:fc:
53:51:3e:89:1e:c6:64:48:de:3e:b8:76:a4:14:19:61:41:53:
d9:f0:6b:e1:4a:44:5d:d5:2a:3d:44:26:77:7c:88:91:3a:ea:
ba:d4:09:ed:0a:4b:71:dc:f9:dc:39:42:e9:a7:60:54:97:e4:
65:c7:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:58 2025 by rpki-client