Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: 6tI2i9kjC69XBv44H/kCiIzhFb5bpieTgV0HWHSbJm4=
Subject key identifier: A2:6C:82:B8:FD:C2:0D:A3:4E:F2:26:1F:2A:D2:13:37:3E:46:28:B1
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 0194BC05296641A24FE178E4144EA3534A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 066F
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: /UlzIQ82rMxToGtfmIsxR9D1hQG+VMAfWJnY7lQVX1o=)
3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:29:66:41:a2:4f:e1:78:e4:14:4e:a3:53:4a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=a26c82b8fdc20da34ef2261f2ad213373e4628b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:c5:2d:eb:75:aa:ff:89:00:cd:70:de:a1:
ba:bd:31:5c:bb:85:d3:0c:a5:25:24:97:51:35:2b:
a4:0e:e0:3b:1c:1d:5a:5c:54:db:b7:80:af:d5:97:
be:da:76:44:70:ce:60:cf:49:96:14:51:dc:b5:08:
34:a4:2f:0b:4f:0b:44:89:a5:96:f6:93:79:28:f1:
0f:42:9f:e8:cc:ea:3f:0a:ed:3c:5a:7c:88:f3:04:
34:e2:83:be:15:d9:e0:97:d6:ef:c6:7b:b8:5d:40:
0a:a3:46:6a:e9:f7:06:f7:c0:7e:a7:da:d5:a8:2a:
1b:5a:ae:ed:c7:e9:64:b9:e2:ef:61:ea:6c:a7:ce:
a1:3f:22:a0:82:b8:2a:31:6b:98:3c:f0:11:69:5b:
a3:64:24:05:7b:91:fe:b8:e4:3c:d1:e0:1d:09:df:
d7:53:2f:61:e3:78:3b:e6:95:37:89:98:9a:0e:f3:
a1:a1:45:82:94:7b:9f:46:51:83:81:ff:82:ae:79:
bb:a0:58:3a:8f:e1:3f:7a:a4:8a:67:f9:71:c5:67:
96:c2:54:b8:46:62:6b:3b:49:92:6f:85:74:67:46:
73:be:66:7c:53:96:06:85:69:14:81:df:a9:7c:14:
af:d2:2f:72:24:01:cf:bd:e8:55:67:c1:fe:f4:8b:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:82:B8:FD:C2:0D:A3:4E:F2:26:1F:2A:D2:13:37:3E:46:28:B1
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:58:45:4a:83:2a:78:f1:d4:82:e7:b2:97:9d:8a:1e:74:54:
93:e7:f6:43:35:7b:6d:55:a2:dc:27:54:39:fe:6d:ab:5c:00:
72:c2:1f:a9:79:95:b8:53:34:6b:fe:7d:bf:ab:eb:3b:fa:74:
c6:db:7a:7f:86:36:19:91:5a:5f:58:1c:d0:96:82:6a:ee:12:
ad:2b:a5:ed:45:79:27:f2:04:7d:2a:d8:22:98:11:3c:a6:ff:
34:40:a9:d7:2e:b9:38:2e:92:9e:86:da:a7:3d:67:71:68:f1:
24:cb:f5:b4:0b:37:cc:d0:87:f1:59:d4:30:e6:30:7a:3d:80:
84:40:e2:08:16:21:f9:6c:c5:6f:50:8d:9b:37:23:ee:c8:25:
cd:e7:ec:4e:d9:d7:b8:9f:de:67:a5:66:59:9f:1b:eb:ff:4b:
20:32:3a:7e:4a:5a:4a:58:e7:78:6e:39:e6:38:b0:40:35:1e:
57:26:39:50:ca:e1:48:14:81:27:2a:1a:3e:0f:4a:ee:61:a4:
52:16:ad:a6:6b:b7:d9:b0:b8:1b:13:ea:19:cd:97:b6:a2:2e:
46:d0:54:0a:17:f1:27:d6:b0:37:af:db:fd:84:d0:3d:30:bc:
de:f7:b9:19:6f:61:6d:89:96:d7:80:1f:8b:95:23:e6:55:bc:
cc:81:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:22 2025 by rpki-client