Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: +/yXGa/Gqt6vjMbLsQ1VZfv8weB5GlgdRqKsHc6IgfU=
Subject key identifier: E2:A6:0F:31:42:79:5D:A0:7D:83:29:51:E1:C5:3F:4F:DF:76:B8:66
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 0194BD4E46A86FB52DA28C72721945C29F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: kvsSwJnYHkOSvTYyxWH7bkRHdcdke9JcP1i6Xsedsbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:a8:6f:b5:2d:a2:8c:72:72:19:45:c2:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=e2a60f3142795da07d832951e1c53f4fdf76b866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:cc:d5:2f:bc:eb:96:5c:bd:e3:67:11:c1:
1d:13:72:4b:62:47:bb:5a:11:14:b0:8c:5b:45:02:
93:3e:a9:d9:2f:04:b7:a5:57:2e:52:97:f7:b8:3f:
fc:63:57:28:cc:7c:5c:6f:3c:17:a6:d4:ae:bb:36:
61:e2:f1:bb:6a:e5:de:73:0c:52:50:5a:f5:99:40:
a9:32:85:de:38:ba:a3:4a:49:e7:9e:4c:ac:74:8a:
99:f6:5e:c9:bd:b6:d8:13:cc:8a:d6:a6:82:9e:0f:
20:33:ca:ed:76:48:78:b3:af:64:00:01:c9:0b:0e:
3a:3e:9b:9a:4a:31:ea:ca:04:16:82:6f:56:2e:a9:
60:01:f3:28:07:99:4d:8f:01:3a:11:cd:9e:ad:df:
4c:7c:40:9e:db:2a:01:db:a8:de:68:6d:10:b5:14:
31:8a:fb:59:05:49:06:76:71:94:14:1e:bb:62:2c:
c3:42:14:fe:e6:52:39:cf:e4:b7:ec:e4:7d:3d:bb:
02:46:fb:21:3f:26:6d:fc:cc:3a:67:33:53:8b:e5:
fa:fc:a9:94:59:2c:96:6e:b1:be:37:8f:7d:a9:43:
3e:5b:2b:35:dc:47:db:b9:fd:3e:f7:6a:2d:8c:cc:
d6:7b:38:8e:75:5c:04:7b:90:60:0e:b4:87:27:af:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A6:0F:31:42:79:5D:A0:7D:83:29:51:E1:C5:3F:4F:DF:76:B8:66
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:4e:7b:f7:f1:4a:91:f4:f0:5f:4f:f6:cd:a8:63:a8:74:
07:24:97:07:7d:67:29:d9:0f:67:be:bd:38:98:b1:80:9c:72:
77:14:be:f2:13:ea:5d:87:b7:63:76:6b:17:43:5c:e1:44:c2:
b1:9e:ff:6a:aa:ce:f9:f7:e2:78:b1:5f:bd:23:cf:35:7a:7f:
40:90:67:de:aa:ba:10:bf:b3:76:fe:8c:13:7d:0e:8b:81:8f:
f5:da:a6:e6:55:f2:9f:7f:a4:06:ac:c7:02:9e:ae:5f:8b:92:
4c:89:5e:fd:e8:17:66:99:17:b2:6d:b9:47:9f:2e:eb:80:9a:
82:99:61:47:07:78:c8:df:3b:35:2a:ba:2b:f1:55:a7:83:b9:
4a:94:db:46:c1:03:8e:ba:b8:97:12:6d:25:eb:f0:b7:79:2b:
c2:68:e1:6f:cd:03:f5:d3:37:fe:c4:09:b6:97:65:40:b6:e2:
4f:b2:69:69:aa:ad:57:62:1b:5d:a1:7e:fd:55:99:f2:06:09:
89:2f:a0:ba:ed:e1:49:3c:df:45:71:6c:20:87:aa:2b:f0:bc:
d8:4a:41:5f:b9:80:b9:75:d4:37:ad:5a:1a:85:76:a7:3f:fe:
d2:10:dc:4b:a9:ec:b8:74:e4:51:a5:7c:db:3c:c0:a3:12:9b:
cc:a6:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:24 2025 by rpki-client