Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: Go/dS2YwOXSzK0prioadTYN9wSEK1HfeAQMHk9c9Ieg=
Subject key identifier: 44:0B:8A:51:D2:9E:83:80:9B:13:10:5F:CE:4D:BF:25:82:87:0E:FD
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 0194BC72C03935F1F5DB660FF1A834D63008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: a7ySpNUpSAbvcR10D12ws9evGqSQ7yPl5F9mhdR9WBU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:39:35:f1:f5:db:66:0f:f1:a8:34:d6:30:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=440b8a51d29e83809b13105fce4dbf2582870efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:c6:eb:a8:c8:17:90:a1:a3:88:84:75:d7:
c1:7f:da:74:ee:72:b3:30:77:77:96:35:b9:96:b9:
1e:08:5e:87:b5:b1:30:bd:e7:bb:83:b9:27:f2:93:
bf:71:a5:3d:52:a3:50:5d:71:8b:bc:b5:6b:00:e9:
96:b5:b2:d2:31:78:b4:95:6f:b9:cb:64:72:06:46:
c3:71:a2:af:06:f4:ac:00:95:c8:11:2b:fc:4f:75:
5d:3e:04:79:82:5f:cc:88:8b:a9:64:03:17:49:e6:
ba:88:4d:0a:4e:ab:0b:9d:1a:6f:57:83:c9:23:aa:
47:4b:ca:84:1c:87:ed:ba:04:4c:88:ee:6e:77:26:
ef:da:5c:b6:ec:de:df:bc:11:87:65:9a:be:a8:e3:
fe:a5:7e:44:95:ae:99:63:77:3a:af:5b:21:5a:0e:
f1:17:6a:51:83:a6:d0:7c:21:bf:b0:71:3d:41:10:
f5:a3:3b:c0:cd:e5:99:8c:08:1d:32:13:52:59:fd:
da:4b:63:fb:66:3b:02:a8:98:56:da:bc:db:43:e8:
88:f5:62:45:61:e3:ff:f8:31:4d:ca:26:ed:22:3a:
49:08:08:7e:c9:d5:aa:aa:2d:db:02:02:d6:11:0e:
fd:d6:c3:05:78:14:4f:e2:7d:0b:58:86:01:d6:2c:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:8A:51:D2:9E:83:80:9B:13:10:5F:CE:4D:BF:25:82:87:0E:FD
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:a1:b6:e2:af:c7:55:51:57:af:67:05:5e:83:21:b4:d1:
50:d6:8e:55:62:61:c8:76:b7:e8:1f:0e:ed:94:39:cd:ba:e9:
10:cb:a6:28:ef:50:02:19:7e:a5:9f:42:b3:57:3e:6b:47:24:
d2:50:1f:04:d0:6c:e4:25:3f:e1:f1:5f:25:ac:19:1f:14:a8:
2b:e5:b1:6d:ef:16:f9:15:14:51:eb:28:4d:4c:bc:3a:6d:81:
3b:9b:3f:f1:a9:b8:e1:47:6f:c2:0f:81:9a:60:5f:a5:b6:b0:
2e:d9:43:7c:93:d8:bf:6b:17:12:3f:73:67:19:29:1f:55:c0:
96:3f:2e:da:44:53:0d:41:b1:b1:b8:69:54:29:30:9b:69:b9:
7a:5d:64:0c:b4:84:b0:9c:a1:02:06:36:cc:de:67:56:0a:74:
32:f5:50:ce:5c:bd:1f:ec:d1:4d:54:34:e2:dd:e7:25:44:eb:
e3:42:ad:d3:e6:67:ca:a6:2a:f3:b0:2c:bc:a1:fb:96:59:3b:
8f:81:47:8a:68:33:7c:a5:11:b7:3e:a6:94:ca:8b:86:e8:3c:
3e:a3:02:43:52:79:54:27:e2:95:54:26:bf:07:ba:36:da:eb:
71:ff:6d:65:8d:13:b0:71:c1:2c:c9:d2:08:41:cb:03:d6:ab:
90:b7:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:52 2025 by rpki-client