Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
File: U8mo-1WZv5O1D_u8yHeISm2BUVc.mft (raw, json)
Hash identifier: 51U9qkWJqRh2dDb/8tWgaDLzYk0r82fG2AoRu1u1B+M=
Subject key identifier: 2D:3A:0C:49:D2:F9:A2:23:64:34:D7:18:3E:9D:09:09:CB:24:F5:5A
Authority key identifier: 53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
Certificate issuer: /CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Certificate serial: 0194BBCED90A2C5AE52F2EB18B7108A9FA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
Manifest number: 0310
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 62MqksUAK_QMI1ZyR0Eti3Ewyl0.roa (hash: KOBX/BSKhmGVTpkkeRJ+tRcZBJyQkoDKu0Qn8R+O3ZI=)
2: U8mo-1WZv5O1D_u8yHeISm2BUVc.crl (hash: jLRQ+SH0YJhODz7+SAbbCX3y0kWMlWuJvUbATTQ/RYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:0a:2c:5a:e5:2f:2e:b1:8b:71:08:a9:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c9a8fb5599bf93b50ffbbcc877884a6d815157
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=2d3a0c49d2f9a2236434d7183e9d0909cb24f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:d3:4c:f0:cb:ed:5a:1a:29:0f:9b:08:2e:
29:67:9d:0c:85:41:37:3f:4c:e4:0d:ea:a5:f2:a7:
a2:a3:d0:bf:4f:76:00:f8:10:8d:43:ae:52:60:26:
98:28:10:73:ce:e6:89:9d:65:90:6f:1d:88:27:66:
d0:a1:7a:e0:87:02:67:34:2e:b7:66:d4:76:0f:26:
80:32:b1:b5:a3:c3:c1:0f:64:88:a9:ab:02:cd:37:
c7:b9:4a:d8:3c:2c:c9:aa:d1:0d:91:09:15:35:88:
f2:6e:1d:35:47:c2:ed:eb:d0:31:7b:46:25:03:a2:
25:fe:05:fc:1c:60:4d:f2:52:df:06:24:74:4b:37:
09:78:64:8a:2a:d1:3e:2d:3f:00:75:7c:9c:be:df:
b5:c7:95:ff:ad:2f:20:94:9b:aa:db:10:ca:24:87:
0e:4c:8c:04:2c:88:e9:39:72:7b:a0:02:0f:b0:ee:
e7:dc:db:de:aa:0e:e4:fd:2e:6e:04:d6:fb:df:94:
52:32:5b:b5:c0:ba:0b:db:f6:42:bd:75:48:22:50:
e5:0a:78:87:29:45:b7:45:3d:2a:6e:78:3a:48:a3:
43:fb:57:96:67:99:70:c0:d8:fc:82:32:1d:12:93:
ad:5a:d4:13:bc:61:f9:85:be:74:7d:a4:0e:23:22:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:0C:49:D2:F9:A2:23:64:34:D7:18:3E:9D:09:09:CB:24:F5:5A
X509v3 Authority Key Identifier:
keyid:53:C9:A8:FB:55:99:BF:93:B5:0F:FB:BC:C8:77:88:4A:6D:81:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8mo-1WZv5O1D_u8yHeISm2BUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/229e79-9bc4-47ba-b136-33881467ac5e/1/U8mo-1WZv5O1D_u8yHeISm2BUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:69:84:8e:76:5a:6f:bb:2f:52:41:c0:ac:67:22:59:8c:6c:
d0:77:2a:b8:c3:50:f7:ab:83:2e:3a:3d:66:b3:37:01:c1:a0:
4f:e6:0c:d8:40:d6:67:ed:ce:52:aa:c2:eb:31:d9:12:33:c0:
10:51:3e:e2:ae:bd:93:65:e9:5d:f1:d3:7e:2c:f4:27:dc:ba:
ee:d2:6a:2c:8b:59:e6:e9:30:7d:cd:7e:45:0e:3e:4f:45:4e:
e0:ca:84:97:9d:3e:83:44:54:ad:c0:e1:c6:6b:45:2d:c8:d4:
f3:42:25:36:b9:33:76:e0:ac:86:2b:27:d3:03:43:e2:4d:14:
5c:1f:1f:91:a0:81:7a:14:b0:18:c1:7a:c4:c8:5c:f4:b7:0f:
ac:89:22:73:f7:74:8d:b1:c6:ba:db:cc:eb:27:f3:c4:72:10:
48:16:33:91:90:96:56:ff:ed:eb:d9:b6:94:a1:0d:37:ee:c9:
fe:0c:f2:19:42:78:b4:a0:ee:3c:dc:22:80:53:86:0e:fb:08:
f3:e6:a3:09:17:a9:1e:c3:87:f7:bd:a9:ed:71:56:56:75:60:
a4:18:84:f1:43:bd:cc:76:1d:7c:e6:fc:f1:70:af:13:22:cb:
40:20:3b:fe:a0:f1:98:53:d4:a0:e4:43:a8:31:5b:3d:e5:50:
46:4f:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:28 2025 by rpki-client