Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: DeGJbLNZQNLOhX4fErEB9PRYnjEaTsTDPXqxI3+S2pA=
Subject key identifier: F9:D8:8E:B1:3B:F5:AD:55:18:A4:4B:99:52:76:73:EF:85:5D:3C:CA
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 0194BCAA1061BC74AFB46543304B23216EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 12F1
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: Sy9MkTO2BPRvKPMpsGDN-2TnmTk.roa (hash: Zvh1o0q4voreyVSKOLfHlxnIapN8G7OyPz3tE/wp4Tg=)
2: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: lLhcd7wO7xf6Vh0UjYy5OBmbG3/zFIaTiKj5AFtNpwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:61:bc:74:af:b4:65:43:30:4b:23:21:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=f9d88eb13bf5ad5518a44b99527673ef855d3cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:ed:82:00:e6:4e:63:26:4d:2a:f8:7b:b6:
ce:66:52:59:28:76:a9:74:31:dd:7c:e3:ed:42:bb:
83:44:3d:6d:0a:06:b1:1b:18:b3:73:ea:8e:62:88:
07:bc:96:5a:b4:b3:20:48:45:1e:07:fb:f2:e0:40:
0c:02:7c:98:6f:2a:c7:76:f8:69:d5:ca:77:93:cf:
41:7d:86:d5:ee:0e:00:8a:7e:43:ff:7f:0a:b2:11:
72:de:88:c2:0a:0f:c7:64:41:4c:d2:b3:a0:68:53:
d9:25:0b:eb:1d:97:25:9f:11:55:ce:8e:56:19:d3:
24:18:cb:39:e1:e9:4a:c3:14:1a:2e:75:f7:27:33:
92:fc:68:72:79:c2:93:21:72:35:dc:20:14:d2:ca:
e5:30:53:8b:6d:9e:7d:18:d7:91:9c:1a:dd:8c:cf:
4f:17:82:49:f6:44:3e:f4:bf:f2:bf:84:88:23:32:
c8:7d:5a:45:06:d6:47:be:f8:13:b9:c0:4b:33:cc:
e3:23:7c:1d:9a:c3:76:5a:ac:ff:19:4a:7c:0d:ec:
c7:04:c6:db:88:54:d4:98:74:82:25:ca:c0:5c:4f:
2e:e6:eb:1a:2b:79:00:8a:56:a9:3d:3d:2f:ac:0d:
d5:fb:4c:8c:20:76:be:af:a0:c7:c1:89:3a:7a:9f:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:8E:B1:3B:F5:AD:55:18:A4:4B:99:52:76:73:EF:85:5D:3C:CA
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c1:4e:00:e6:07:ec:71:ef:2b:76:50:c3:77:0e:33:d2:b0:
fb:21:53:c4:5b:4c:76:d0:cd:60:0d:80:b1:d4:29:ca:08:71:
eb:75:5a:09:11:8a:06:ff:55:bd:f5:cc:ed:e9:52:a0:ae:57:
49:3b:71:ab:a2:a4:65:4a:04:24:ad:0a:15:b2:09:24:e3:1a:
79:e0:5b:dd:94:17:16:da:bc:36:27:24:82:e6:85:56:e8:c8:
10:dc:d9:c3:76:24:ea:97:0e:a0:e2:b3:81:a2:6d:7b:37:40:
83:c7:b9:35:72:a9:5b:ae:53:6a:a2:8b:06:24:ac:9d:71:bd:
d3:c1:8a:32:a6:90:42:e0:ed:1f:eb:49:55:38:12:25:14:84:
cf:1d:99:05:3c:26:31:a8:bd:89:b9:d2:35:8a:17:30:6d:3e:
04:47:99:89:cc:8b:4b:68:18:23:47:85:37:91:9f:63:80:58:
e4:d4:80:c5:ab:c3:a5:59:a3:14:a3:66:9b:5f:4b:fa:a7:66:
15:05:a8:a6:98:a7:2b:f0:fc:13:95:de:85:a5:56:71:71:66:
fa:2d:25:7b:e8:8f:58:20:69:80:30:c9:e0:17:87:ca:9a:e8:
8a:7c:8d:d4:3d:38:ad:9b:80:0b:15:4f:6e:03:c6:55:f2:fd:
7f:13:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:08 2025 by rpki-client