Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: lv3UHf9C+Uh4xRq5e/wStsCTHzmHJ7vM5TZ1+PRoTn8=
Subject key identifier: C7:A5:46:5E:CB:87:C2:C7:A6:45:B0:CF:38:94:79:FB:4E:BD:2F:3D
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0194BC3BFE19BA57930A011C63CE13259F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 1137
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: a5ZiAcsy8htClkQqIWa8uXM7W+o8VOdlfN9YBaUyOe8=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fe:19:ba:57:93:0a:01:1c:63:ce:13:25:9f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=c7a5465ecb87c2c7a645b0cf389479fb4ebd2f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:cd:f7:b7:3c:20:55:e1:7a:5b:fa:95:5b:
ae:95:27:a3:72:94:90:78:0b:f6:66:8c:af:5e:7f:
d3:66:43:63:8a:05:b0:30:56:2f:cc:09:e9:14:46:
90:d6:2f:b9:fd:51:90:88:6d:19:c4:e7:88:54:46:
78:f6:d7:de:20:56:e9:5e:07:cf:5f:3e:71:44:54:
05:18:ff:ba:9a:a4:0d:e9:b4:9e:c5:b9:5e:44:02:
1a:9f:3b:b6:73:f4:7c:98:38:f8:a1:e5:8b:b0:56:
26:d4:53:42:94:76:4c:41:f3:73:b4:99:03:3b:f8:
aa:3b:06:95:b1:c6:4f:5c:0a:cc:7d:d7:17:7a:14:
c9:f2:bc:4f:b6:5e:aa:13:5a:32:29:51:35:c7:8b:
48:37:ac:70:44:66:0c:7b:7b:7f:3d:58:03:27:bf:
37:39:2b:56:8c:56:a1:81:b7:fc:4a:48:a9:14:a6:
e9:43:e1:cd:81:fc:d6:5f:e9:4e:0c:84:2e:98:bc:
17:82:78:5b:a6:2f:4d:9c:e4:38:a8:67:11:cc:87:
51:53:59:1e:0c:11:80:8d:1a:fa:55:ee:81:1a:4a:
f6:7d:05:1a:3f:f8:b2:3d:d4:a9:4b:ac:8d:31:4e:
30:09:a3:3e:e4:56:93:d2:cf:e7:66:50:3c:d1:a1:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:46:5E:CB:87:C2:C7:A6:45:B0:CF:38:94:79:FB:4E:BD:2F:3D
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6a:d7:9b:1a:08:7f:0f:4a:ab:6b:59:17:a7:4c:7c:fe:50:
41:f4:ef:90:4c:75:8c:2f:4f:01:23:b1:12:24:28:73:16:c3:
a5:b7:1d:d0:6a:f3:e0:80:5b:7d:bd:37:c2:ba:69:73:70:ee:
38:0c:b5:c1:25:56:f9:5d:3e:31:da:01:11:95:08:d5:b9:19:
f3:5b:1a:65:1d:4f:09:b9:4f:66:43:8a:be:4d:cf:77:8d:61:
f1:ae:58:0b:53:47:8d:df:cb:a8:bc:41:30:3e:0d:99:4e:63:
67:89:c9:2a:32:5f:be:0e:92:33:f3:8b:c5:fb:90:b5:f1:1d:
80:0d:29:d3:cf:74:ac:fe:b1:15:f9:dc:b3:ec:3f:f0:a2:63:
52:33:1b:54:42:8a:58:78:c0:f9:9f:3d:9a:49:cb:05:f0:88:
a1:76:a2:12:bb:10:f7:39:1a:88:b4:11:bb:b7:6a:f7:fe:ee:
03:9b:85:69:76:6f:93:71:fe:f7:c7:d5:8a:3c:3b:f7:41:7a:
cf:41:3b:03:96:16:87:35:ef:ef:56:55:fa:99:d3:56:12:62:
21:1e:07:e3:1e:88:0d:20:13:37:fd:87:1a:90:11:25:c8:42:
7f:cb:be:b8:04:34:7d:85:85:22:21:01:e9:16:1b:f2:66:bc:
56:ea:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:14 2025 by rpki-client