Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: B7hmDgu/qBYyt49lW8Bei8ykrKgEwgrBYcs68umi/aA=
Subject key identifier: A1:BE:60:5A:A3:2F:6C:94:30:6E:CB:AA:43:DF:F6:3A:9D:8B:51:46
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0194BBCED69DB0F2F10A8CB3763B1C7684E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 07F1
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: qrzhDskOj4xgwTJ160oKlRjobonY46D9OpNKpblH5vE=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:9d:b0:f2:f1:0a:8c:b3:76:3b:1c:76:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=a1be605aa32f6c94306ecbaa43dff63a9d8b5146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:22:5e:f9:6a:4a:e9:c9:8d:d9:96:e0:fa:
cb:a5:bf:16:cd:a5:15:bc:fb:85:00:a9:6e:5b:1b:
4b:5d:9a:7d:b9:c3:e0:fa:e4:ca:9e:1e:b4:d7:df:
ef:02:35:6f:e9:0c:47:42:6b:ad:74:5d:78:18:ed:
bf:c5:52:0d:db:17:c2:59:90:8f:b7:ba:6c:1e:d3:
19:73:b6:b4:6a:5f:4f:9a:df:8f:3a:04:3f:d5:63:
b8:7c:1e:f7:91:67:17:8a:17:6b:6e:0b:e0:de:27:
d3:2d:0e:b7:10:03:07:ce:8c:41:23:3f:14:3e:c0:
4b:91:89:04:ae:a2:e0:26:e6:f1:8f:e1:ab:1e:90:
09:62:c7:3a:6e:d3:07:c3:0d:c4:65:41:bf:9b:ed:
10:e9:50:dd:65:e1:fb:6b:3a:2a:21:ef:14:bc:80:
24:d5:5f:5a:0e:b7:9e:52:7f:99:6f:56:02:1f:aa:
9a:32:46:44:e3:35:46:f8:9a:b9:de:c2:7e:ea:36:
ad:de:62:88:63:b0:91:db:e1:24:2b:4b:36:84:6a:
63:af:9d:59:68:fb:f8:b3:75:d9:f2:65:1a:66:20:
00:b4:59:b6:f3:ab:55:72:15:0b:8d:d4:04:ec:6f:
83:6d:e7:e2:cc:bf:43:36:00:e4:f9:c3:80:ef:d7:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BE:60:5A:A3:2F:6C:94:30:6E:CB:AA:43:DF:F6:3A:9D:8B:51:46
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:51:b6:26:54:2a:fd:03:c6:c7:1a:39:6a:13:54:2e:7d:2d:
e7:c8:62:ed:73:9b:36:ab:41:7f:49:8a:26:4f:7f:76:ab:ba:
44:a8:95:5c:3d:aa:a6:06:49:0f:d2:5d:b1:06:7d:c6:2b:f7:
8c:6c:e5:9f:e5:70:b4:e5:46:11:2b:96:0f:2e:f3:5b:91:d3:
32:cc:f9:13:b0:5b:57:ae:d5:5b:2f:ca:7e:76:dd:c6:6c:25:
90:9b:07:f6:bc:dd:54:23:7a:ef:c0:64:7c:ba:3b:c0:a0:b1:
d7:c9:fd:b4:66:26:bf:a9:82:82:7c:64:54:e6:e7:ab:2f:95:
3c:79:68:22:9e:d5:e8:02:99:ae:c3:09:07:66:f9:7b:80:b3:
58:f4:af:6c:6b:2f:39:75:54:5d:83:16:a2:cb:6c:25:66:76:
a1:cb:a7:dd:f9:28:7b:8c:03:1b:a8:5a:54:5a:87:c7:47:e8:
cc:26:9d:d8:a5:ad:dc:95:4c:6c:f2:37:da:a2:92:59:ad:64:
c2:1b:4f:ae:06:6e:ac:45:d2:fa:31:3c:98:f0:15:7f:65:71:
8e:4f:bb:8b:77:b6:33:80:2e:15:2c:d0:15:82:0e:81:e6:76:
fa:81:33:6d:05:a9:e4:82:83:27:04:6f:05:b7:52:71:f1:d7:
fc:02:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client