Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier: LCtGnVs9z5bI7Eed029MIQadR1QWRlLTGkuPXNk7PXw=
Subject key identifier: 61:0E:CF:59:0A:D4:06:73:84:11:F3:63:27:28:2E:9A:13:9D:25:5C
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 0194BD17B7851A17E4E0F78879AE5733DE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: r/WwxViRZG3XtQQnQE3+8bZgR84/8napO4Ko+G2bsh4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:85:1a:17:e4:e0:f7:88:79:ae:57:33:de:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=610ecf590ad406738411f36327282e9a139d255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:8a:40:c9:8d:69:8e:c7:ac:c6:33:51:ff:
50:83:36:cb:9c:e7:9b:c0:27:a3:56:2f:d8:43:cf:
86:40:29:93:84:29:54:77:0e:32:7a:53:2c:19:3f:
00:c2:ab:df:87:cb:85:fe:d1:fe:b5:bf:7b:42:9b:
6b:07:86:c1:f9:4a:c7:45:d0:c3:a4:34:c7:b8:8a:
48:a6:22:9a:fe:ac:8c:b9:c9:3b:c4:98:62:56:df:
3b:dd:91:3b:72:5e:9a:53:1f:da:58:33:93:58:6f:
7e:1d:2d:7a:30:d2:c4:f9:59:9d:76:41:e2:af:aa:
1a:55:1c:82:d4:56:6e:c8:28:77:dc:95:a9:fb:ae:
e5:1b:34:8b:71:61:56:52:49:26:61:25:5c:45:ab:
8a:ce:ad:e7:94:5d:c6:32:76:54:2c:dc:8b:9d:76:
c6:1c:40:8e:84:26:51:65:3b:eb:84:85:1b:50:5e:
10:f2:9a:37:3c:8a:e8:14:ff:50:bf:96:81:3c:f9:
82:2e:41:59:d5:a1:50:16:c3:d3:27:ae:16:c2:77:
db:c3:c6:3d:49:f4:8f:0c:d6:f5:7d:43:f2:6c:d3:
3f:51:33:da:66:12:3c:4d:0c:3e:15:1a:97:dd:8e:
cd:db:e5:c8:e3:8d:56:ef:0f:7e:78:ad:06:f6:79:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:CF:59:0A:D4:06:73:84:11:F3:63:27:28:2E:9A:13:9D:25:5C
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:d5:af:df:45:ad:a8:ca:5e:01:d1:a3:d4:1f:b7:31:3c:
9f:ee:44:26:b2:26:df:54:05:a1:e2:92:97:86:42:75:31:29:
7b:ce:fe:50:fe:43:19:58:70:32:41:ff:47:21:01:6d:ef:1d:
02:95:b4:aa:cb:97:7a:ce:d5:5a:50:f6:66:93:cb:48:47:e8:
fa:e8:8b:57:46:1b:88:ee:4f:a9:fd:e8:e9:88:5c:43:f0:fb:
59:25:36:7f:ee:e9:85:2b:6c:ee:21:05:69:10:58:6a:47:eb:
db:62:7c:15:08:52:40:0c:6f:4d:25:e6:3d:00:93:e4:fb:55:
4f:48:c3:e5:15:59:79:96:73:d2:98:43:d2:e3:63:ae:f3:27:
e9:a6:cf:e5:2e:b1:36:c9:42:5c:3a:00:96:70:b3:43:0e:ff:
53:82:87:ef:95:49:ff:d3:44:71:87:b2:33:ea:d4:17:f7:a8:
d2:37:15:7e:96:40:19:ec:fd:7a:9b:0d:44:b7:0d:0f:13:54:
29:b3:a2:8b:3c:fa:59:95:7e:01:a2:85:e4:fe:0a:9d:79:e7:
75:f0:b2:65:a5:41:6c:d3:85:30:2f:95:36:cf:9f:d8:3f:96:
d4:b5:af:80:14:de:16:7b:73:3e:e2:22:a9:78:3b:97:b4:b6:
6a:d4:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:24 2025 by rpki-client