Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: B/HjpU3N/jKSasvAnXWZ8e+I7QUOOm+pH8wVuFfuHMM=
Subject key identifier: 21:28:43:1C:92:83:55:B2:8C:F3:92:28:29:AA:16:89:A8:D0:56:DB
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 0194BC04FC78C9F93802D7BB2DC545D6D9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: ResdeKiMI6PIVANNyaQz+OZmf1At5ggvkNXw20lEeqI=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:78:c9:f9:38:02:d7:bb:2d:c5:45:d6:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=2128431c928355b28cf3922829aa1689a8d056db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:34:9f:5d:8f:86:5d:ce:fd:ba:50:b1:cc:
d9:d4:82:55:5d:72:3f:0b:67:6e:d8:11:61:90:26:
ba:00:c5:35:57:e8:19:1b:55:72:13:2e:9c:7c:f0:
0d:3d:42:98:e9:49:a3:46:a7:01:4a:db:8f:67:fd:
84:b9:c2:54:08:31:ea:6f:f4:93:b5:c6:ac:45:b4:
1e:c9:4d:4a:1c:a9:90:9a:c2:21:c5:aa:f3:a3:d7:
fc:48:82:de:51:75:ed:ab:0a:59:50:dd:e1:a6:84:
1d:53:e6:a9:b0:55:77:17:28:6d:07:06:9b:a0:3b:
52:9e:02:1f:6a:77:ac:2d:fc:a3:7b:cf:c2:e2:f9:
83:9d:cb:9a:cd:cd:95:fc:15:da:97:6f:c0:ea:4c:
97:89:58:e1:62:59:01:17:0f:56:45:a3:d3:0c:5c:
d6:63:ce:e2:8c:0e:83:3f:a8:09:e6:37:de:ae:ee:
17:e2:10:4c:01:b3:84:b4:d1:09:4f:23:8d:7c:bd:
17:2b:a3:2e:89:08:f2:04:d0:a2:f9:53:cc:50:c4:
71:97:9d:d6:21:69:3f:b7:61:75:9b:b9:be:95:f1:
48:b3:28:de:cd:4b:44:ec:0d:e8:7d:fe:af:4f:e8:
c9:cc:de:13:15:ba:97:ee:47:c8:a7:97:7b:82:09:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:43:1C:92:83:55:B2:8C:F3:92:28:29:AA:16:89:A8:D0:56:DB
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c6:23:a2:5a:e8:af:d2:b1:45:f6:55:ad:5e:7f:d1:d5:77:
56:d9:2e:d2:31:68:48:53:1e:a5:59:b8:09:2c:ea:b9:be:8c:
92:38:dc:7d:18:84:ae:f9:b2:2e:75:d6:26:ef:ea:57:4e:2e:
80:d4:1a:c5:3f:df:56:52:e6:80:39:a2:98:98:8d:26:c1:11:
8c:d0:a6:10:91:d0:be:2f:0f:6c:50:06:ce:67:0f:9e:df:b4:
b4:25:85:64:dd:06:e9:22:2e:ca:d5:93:6a:f2:95:f2:c0:96:
5a:3b:fc:f4:62:86:4c:71:57:a1:1e:6f:3e:32:e5:57:b5:9d:
bb:3b:fb:75:57:af:7b:f8:bb:21:52:21:7a:1c:56:51:74:63:
ce:9e:ee:ff:42:dc:55:15:47:ae:ec:0f:ed:32:bf:34:71:89:
4b:e4:53:ac:a3:92:be:16:3e:fe:4a:8d:ef:06:e5:95:9c:d6:
13:62:55:1d:b1:ea:56:9b:07:da:5e:f4:35:6c:26:8d:76:3a:
07:4e:16:0d:ac:85:44:73:8c:0c:2e:57:3f:fb:dc:01:a8:d6:
ac:78:fe:40:08:0a:55:38:da:5c:72:96:15:7a:ef:d5:30:d4:
65:20:46:f6:1f:ac:89:cd:d0:21:a6:17:43:f7:1f:ce:11:f9:
43:d5:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:37 2025 by rpki-client