Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: ktzblcEVjQQoDC1fQHePh+hPlcLk8mRsAt6be2lC4B4=
Subject key identifier: 43:BC:62:6C:A0:9A:FF:B5:74:8A:87:30:CD:26:EC:CC:0E:81:19:11
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 0194BD859B50B725872FA5C7D4DBC72EECE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: FC
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: vrS1otUiWd3DUz14x9d6bImQj7nK2dnLctwLAc4Pi/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:50:b7:25:87:2f:a5:c7:d4:db:c7:2e:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=43bc626ca09affb5748a8730cd26eccc0e811911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:5b:ca:7c:5d:6c:97:d8:e1:31:76:8f:57:
8b:b6:f7:dc:c0:96:74:b9:2b:80:70:7b:fa:bf:d3:
c3:25:a0:8d:70:dc:4f:6f:23:cd:94:bc:fa:2d:13:
73:3b:d1:4c:42:87:c5:56:0e:18:ac:df:a6:fa:f7:
1d:43:05:53:93:71:69:c5:03:81:43:df:cc:a5:3d:
6d:f7:97:79:2f:8e:f6:b7:03:0c:ad:b6:e5:d7:f3:
b2:3c:4e:c9:26:9a:76:b7:6b:14:b1:fc:ae:7f:bd:
72:8e:f0:ff:98:65:41:e0:98:5e:f6:60:89:5e:17:
04:35:7a:16:e0:2c:24:db:66:b7:62:04:03:11:04:
32:c1:ae:c8:c6:dd:33:99:d8:82:e7:9f:a5:ab:d0:
c6:da:4e:77:70:1c:ce:28:78:c6:69:f1:31:7d:40:
ce:25:e2:d3:3b:a6:6c:41:b0:87:7d:44:17:8e:63:
b9:7c:ea:f6:70:52:12:1d:a7:e4:91:9b:aa:37:cf:
87:5a:18:f7:d9:0d:8f:75:17:b5:cd:f7:c9:23:9a:
5f:a0:3f:18:81:13:5a:6b:0a:55:a6:c4:e8:c0:5d:
83:aa:1b:a5:b7:a9:65:ba:47:71:78:4b:fa:38:87:
7d:fd:e3:ed:79:24:77:e1:38:0a:c6:fb:3e:0a:30:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:62:6C:A0:9A:FF:B5:74:8A:87:30:CD:26:EC:CC:0E:81:19:11
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:39:9a:1a:8b:47:88:48:63:7e:e7:34:13:c3:33:93:1d:71:
af:73:3c:7b:58:ff:e6:2b:1a:1d:88:f9:e1:6d:a5:02:8c:e4:
b5:8b:eb:90:b5:0a:f7:33:1c:3b:d2:53:ec:b9:cc:56:d9:8a:
50:49:c1:d9:2e:fd:f1:79:7e:db:aa:8d:7d:25:cb:28:fc:da:
4e:60:05:8c:4e:31:a3:7d:f7:c8:d7:46:eb:36:09:36:92:7f:
7b:e1:2e:79:e2:90:05:82:dd:90:14:89:69:ef:26:29:68:87:
df:34:ba:1d:55:f0:b7:3d:6f:1e:b5:79:02:b2:22:19:80:33:
12:c9:b8:fd:be:84:82:db:93:a3:cb:ed:e1:fc:83:1f:a1:2e:
83:5e:3d:42:01:6f:c3:ab:ce:0e:38:df:94:31:72:39:4f:ca:
44:22:b3:db:65:d0:b0:0b:66:49:8d:6e:45:c2:af:c6:17:ac:
62:7f:61:f1:b3:d3:74:f0:03:2c:6c:26:ef:10:d8:63:9f:73:
ab:82:64:2e:39:2f:c4:41:0f:2a:2d:73:dc:9c:5f:eb:c8:11:
f4:84:25:65:01:2a:4c:a0:ed:e3:e5:0d:5b:e6:08:41:e6:6e:
4c:e4:14:30:46:35:41:94:22:ff:1a:2a:88:a5:69:8f:e8:5c:
24:e6:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:03 2025 by rpki-client