Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: rYXtQv7IU5sp4g8TfkAgmrIwC5uewTJiEUqgNVg1cr0=
Subject key identifier: D8:CB:2D:F5:4D:A0:92:15:8A:61:9E:19:40:37:83:0C:C7:8F:FB:01
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 0194BC73144A0E2D47B70D44FBBD759F0AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0C20
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: hTPrBrMqdM1r36mkehO+6HgsHJ5c4/Cmhnylv52v7v8=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:14:4a:0e:2d:47:b7:0d:44:fb:bd:75:9f:0a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=d8cb2df54da092158a619e194037830cc78ffb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:6c:ac:cc:b0:3d:9e:74:fa:ce:98:34:5d:
bf:4b:5d:71:63:02:21:a7:83:2a:71:a1:86:38:7e:
f0:3c:66:3e:2a:dd:a8:e0:01:49:cc:13:23:10:33:
fd:66:44:12:5a:53:8c:b6:57:4b:43:4d:c8:12:e1:
c8:07:41:5d:e3:c8:f3:c8:cf:be:55:af:47:f1:36:
39:76:bd:ac:8b:cd:91:4f:a1:df:4d:6a:2a:36:7f:
64:e2:c7:b8:d6:40:ae:81:e0:c8:a2:83:e6:49:00:
69:01:bf:3f:1a:43:7c:65:af:99:41:f8:35:31:86:
a3:1b:47:a8:3a:54:88:98:d2:6e:79:f2:8b:bd:3c:
d4:1b:4d:1c:22:36:12:bf:68:53:36:fd:22:e2:83:
e2:de:da:5f:4d:c0:5d:02:54:46:75:23:e4:10:94:
22:29:23:20:1c:05:48:bd:38:06:5e:ba:ef:93:62:
6d:9b:ab:0a:d0:82:c0:18:ab:7a:2b:f3:d1:d3:8d:
e6:c4:8c:81:04:fe:10:0f:fa:3b:ff:d3:dd:a0:1b:
5a:6e:85:99:79:c5:3f:04:c7:00:c4:32:a9:46:36:
4d:1e:a1:b6:5b:8a:77:1d:28:26:41:ff:e4:04:04:
67:46:f1:b3:09:30:b0:c3:f1:5f:1b:c2:e5:45:06:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:2D:F5:4D:A0:92:15:8A:61:9E:19:40:37:83:0C:C7:8F:FB:01
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:50:6a:2d:47:2a:84:70:45:b7:19:5a:85:4e:f5:72:48:2d:
55:ad:d8:f7:dd:12:b5:27:d4:23:07:3e:30:6c:01:64:7b:08:
2f:49:fa:a7:da:02:67:e9:73:5a:96:95:94:cc:af:75:2c:d3:
50:2c:70:10:fa:bb:6c:1e:9b:49:de:53:41:24:dd:a4:82:83:
d2:5b:18:20:73:e5:c8:57:50:56:d7:b0:76:3c:39:dd:27:62:
71:0b:93:86:d3:61:a0:b3:db:39:c1:b5:ab:d9:f4:20:34:2d:
22:ed:eb:28:a9:e3:31:1e:f0:bc:c7:ef:8b:b3:34:fa:99:bf:
da:af:50:04:9c:79:a4:79:69:5a:69:2b:07:30:d1:bf:dd:40:
f0:2f:d4:30:2e:1b:de:ef:50:10:18:42:58:dd:1a:9a:8c:87:
bc:ca:92:08:3b:d6:05:3e:db:54:f1:7b:2a:52:08:a9:88:ca:
bb:1d:09:25:78:17:49:6c:29:57:25:1c:9e:b2:e3:38:89:48:
01:be:12:df:d5:f9:89:12:4c:af:48:55:ad:02:a3:7d:6a:c1:
ac:c9:51:c9:ae:0e:db:61:5d:ea:75:23:29:ed:e0:1b:69:04:
cf:47:df:48:39:7a:cb:7a:16:ce:e0:d2:42:bf:e9:9e:c4:9a:
ca:ad:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:55 2025 by rpki-client