Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: OQt8gH1CU8IGzj8JgdLqKVzCkpiis4RWetj/QbPwuyA=
Subject key identifier: 9D:80:11:0F:E7:22:0B:4E:44:A2:8A:6F:63:49:52:DE:BF:34:15:A4
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 0194BC72C2741638B0CEB26C18381CB23137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 104D
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 1asdNtObnnXmKrLK3XCtGiGYlMc.roa (hash: 5i4KQCBHhyzn3roOQCktbPCcfOhJhx8zB0vwxPlOCAA=)
2: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 3UEHKCpiNWvsK8lVaVW1JCb8eyFr5qHKxHAVT6WiRDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c2:74:16:38:b0:ce:b2:6c:18:38:1c:b2:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=9d80110fe7220b4e44a28a6f634952debf3415a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:74:8d:a8:d8:af:86:5a:e0:ff:ce:44:12:
74:b3:fa:46:3b:bf:2d:67:dc:ed:3d:d9:9f:fb:ea:
61:2a:b5:fb:4c:66:ca:68:2e:ef:5d:5c:65:70:d3:
d0:be:c8:a1:d4:10:1a:1c:ea:f5:0b:c3:62:64:99:
37:55:47:45:f2:d5:f8:18:c6:21:0b:8f:d8:78:d5:
f9:aa:1b:aa:37:1c:88:ff:19:f0:21:72:a3:5f:0a:
72:c4:e4:e3:52:10:b9:f7:74:1e:71:c6:c2:57:a5:
67:7b:cc:19:fc:46:d9:68:be:4b:b5:0d:0d:d7:3b:
63:d5:83:13:3a:cc:a0:59:13:80:28:d8:bc:0b:70:
90:7a:98:e1:f8:d5:8b:c7:48:c9:d0:d6:6d:51:0f:
aa:ad:9b:2e:a6:a7:8b:d9:08:13:26:8b:1b:c2:09:
59:26:cf:e9:19:7e:1c:37:dd:bf:55:fd:bd:06:eb:
60:cc:dc:ef:69:3b:0f:9a:6e:e0:53:ef:2c:3a:41:
d4:62:af:83:b1:e7:d1:a7:1e:f7:ec:83:14:fb:42:
92:7f:bf:97:ea:d6:1b:2d:7e:77:ef:67:b0:23:c7:
55:e0:56:bb:d0:c1:98:a0:cd:b5:82:9c:82:c3:e1:
5a:bd:64:72:8f:c5:dd:5f:eb:69:0b:aa:35:ba:54:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:11:0F:E7:22:0B:4E:44:A2:8A:6F:63:49:52:DE:BF:34:15:A4
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:c6:2c:c0:8d:40:04:d5:7b:5d:cc:5e:d6:df:78:34:c1:
10:8b:6d:56:18:a3:77:85:98:07:da:e0:c0:27:f4:5e:89:f9:
c9:c9:ea:4d:90:33:27:c2:63:39:e9:a3:0c:6f:91:4a:7c:e8:
2d:20:87:06:13:53:60:8f:39:12:c6:71:95:83:4f:2b:01:b0:
a5:27:05:97:f2:d4:4a:83:5f:76:72:af:c5:5d:46:98:f4:f4:
e4:f1:c3:4a:57:18:fd:25:7a:97:b2:59:a3:a3:3c:da:4d:38:
89:de:39:86:64:7f:e5:fd:b5:e1:c1:e9:e5:2c:9b:85:06:ed:
22:05:10:4a:e8:d2:2a:34:ec:fd:3f:e8:11:5f:2d:51:a3:9f:
57:4e:08:21:92:83:1d:22:e2:87:f2:7c:2e:bb:f6:d7:68:39:
dc:82:be:98:74:5e:bb:70:1f:fd:87:70:6a:83:2d:8c:92:cc:
78:0d:21:20:3a:1d:69:46:5a:74:fc:e7:62:1f:dd:4e:f5:9a:
fe:b8:3f:9b:1a:03:6b:1d:d1:f8:b8:b5:35:21:15:22:f7:82:
ec:94:b5:92:a4:5e:a5:51:e7:17:89:ab:1a:cd:b5:cf:b3:86:
72:fa:f0:52:e0:b0:a5:28:7c:6c:22:7e:a9:75:08:49:2e:e2:
40:6a:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:20 2025 by rpki-client