Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: L0RxuCse1N5i6hWgW/XVpqDHRinQCSOnTGRurLhwNoY=
Subject key identifier: D7:6B:2E:FC:E8:C3:6D:DD:F6:F3:80:55:59:66:8A:2D:93:9E:51:EA
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 0194BD8582FE6242D0EE2B64702B7969023B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: CYNP6vN-qElEU6kqxQQrlgtjw0E.roa (hash: 50zm/kAB1hENUbgpvzJQwq1lkvUVeWylyOULFWpoN/I=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: i6ewlV9m1L/0PRxgMerz91IEw4Syf6QRKBqgvJo79VM=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:82:fe:62:42:d0:ee:2b:64:70:2b:79:69:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=d76b2efce8c36dddf6f3805559668a2d939e51ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:64:94:86:ff:44:97:cb:c8:d5:b6:11:43:
59:a9:0c:95:33:5d:4f:9d:fe:f1:fc:63:9e:93:f7:
01:1f:ac:41:0b:6c:f7:b0:c2:10:8f:70:ad:da:e4:
8c:c0:64:11:a0:31:8f:34:dd:74:b3:89:0e:63:12:
32:13:54:53:d9:f3:62:31:ae:21:95:ac:88:47:11:
81:92:02:35:db:c0:05:a4:2c:b6:48:9e:b7:93:9e:
1b:cf:e5:96:ca:c5:a5:8a:69:2e:f2:8f:50:26:67:
76:32:c7:18:9a:cb:f0:0b:38:1c:7b:7c:f4:f6:ff:
ab:1d:ce:e8:f7:0b:84:77:c3:65:33:38:a5:3a:6e:
5c:d0:cd:f0:e4:75:3f:ec:db:8a:3f:f5:21:32:69:
92:93:f3:6f:e2:b9:07:09:fa:41:ff:ba:e2:3b:20:
77:65:9c:05:77:8e:ea:7e:e7:d6:0b:41:6c:a2:c1:
71:18:69:05:6d:18:b6:03:0e:76:a8:29:fc:54:d9:
a8:fd:53:c0:62:a6:ee:0a:d4:67:38:63:ee:7b:7d:
2c:b6:ad:0a:eb:f9:5b:06:a4:9f:69:32:46:19:21:
ca:23:81:6e:de:f7:6a:55:e7:1f:1b:41:75:1b:48:
76:c7:b6:5d:38:31:a4:4e:7e:77:bc:6e:cb:11:bd:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:2E:FC:E8:C3:6D:DD:F6:F3:80:55:59:66:8A:2D:93:9E:51:EA
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7b:49:af:c0:4b:70:3e:db:99:35:fb:61:60:4d:df:6d:ea:
85:72:74:55:a6:9f:da:da:a0:a0:a4:5e:97:c7:44:70:3d:45:
40:f2:b1:55:ce:ea:ac:7d:5d:35:cb:36:83:89:1d:82:10:10:
97:69:22:e8:73:2e:5d:ad:25:fa:0d:8b:9f:cf:b8:9a:d0:95:
c3:06:c7:46:88:9d:4f:86:8d:7a:f0:84:ec:68:21:fe:31:9a:
c1:59:2f:26:06:2a:9f:06:1d:97:3b:1c:9f:5b:9c:10:22:fb:
6c:7e:b5:f2:43:fb:14:c9:76:e0:2b:c8:8b:30:63:a6:2b:8a:
dd:df:09:5b:e7:81:6b:f3:61:ae:56:88:5d:15:71:c2:b9:a8:
77:fc:06:71:da:91:ea:bd:50:37:e6:fc:1f:65:54:f2:3a:37:
f8:69:f4:54:6f:88:5c:0f:ed:16:13:bc:37:1c:80:e3:f9:22:
1d:a5:8c:e7:5d:76:58:a0:5f:a8:10:cc:cb:5f:bd:dd:78:01:
37:22:e5:25:99:02:b5:5b:a1:4e:23:8c:eb:07:48:10:79:7f:
19:48:46:50:44:1b:bb:4e:f2:5d:8a:04:32:a9:2c:d1:bd:f6:
21:5b:08:bf:da:52:c1:92:79:27:91:bc:f1:d4:ed:0a:fe:ed:
f6:38:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:15 2025 by rpki-client