Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: rveY7Jdv8fdF54d0egaNLlBuILZ7S8rH/OjPYvb4oHo=
Subject key identifier: FB:E7:44:46:13:AC:5F:FF:E2:86:0B:CB:88:F2:F4:08:3D:0D:E9:A8
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 0194BC3BEB269B4672B276B489851C23A30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 39
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: F83g3HtbGBvboH6LrcEA49jQXaO1ITPnbBOjAGRQqzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:26:9b:46:72:b2:76:b4:89:85:1c:23:a3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=fbe7444613ac5fffe2860bcb88f2f4083d0de9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:9d:f0:d7:8f:a0:fe:ed:f3:30:85:04:c2:
60:50:03:7c:62:3e:71:27:82:43:52:df:96:35:ef:
fe:cf:f6:d0:b8:cf:3f:e9:dd:b4:45:e5:1f:51:c7:
67:50:1d:45:22:74:39:b0:f1:a8:ac:95:0b:de:5e:
91:66:82:4d:0f:ff:d3:dd:c5:43:6b:08:3e:b3:42:
d9:ab:d8:73:97:49:a9:5f:66:51:ef:d3:a0:0e:62:
b2:2c:ec:58:31:92:56:f7:ba:e4:1b:6d:d2:c7:da:
2e:67:6c:36:3b:6d:31:10:b1:d7:cf:65:fd:68:57:
70:78:77:c2:17:1f:65:d8:ff:2a:29:46:3a:aa:08:
0a:0d:00:ac:b4:78:73:f3:b6:89:db:48:76:5a:5d:
6e:0e:79:92:88:c1:3e:10:d0:a5:d6:22:19:fe:7c:
6a:ed:a0:2a:b6:78:89:87:8f:ac:c9:aa:73:6d:90:
14:3d:27:af:e6:73:2e:a4:c9:d6:88:d8:b9:13:06:
58:58:f7:fb:71:f9:b4:32:d3:c3:2e:fe:41:84:fd:
62:27:02:4e:87:66:28:a8:cd:a7:dd:3b:59:ee:cf:
c0:c2:6b:28:b9:a5:48:b9:1b:da:1f:35:6f:2f:cc:
0a:4e:bd:64:63:9c:02:86:c1:48:44:72:9a:f4:d2:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:44:46:13:AC:5F:FF:E2:86:0B:CB:88:F2:F4:08:3D:0D:E9:A8
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e0:a1:35:60:0e:b2:04:98:e8:82:9d:8d:c6:e3:ce:ce:f6:
ce:d0:76:67:54:d9:3b:2a:65:6b:75:f0:fc:e7:1c:05:14:c1:
ad:13:1c:85:3c:4a:22:08:79:d1:ef:63:f4:ce:09:60:46:0a:
7e:f8:97:f6:03:9a:1f:91:6b:7c:08:34:f8:94:0a:4e:25:c3:
f0:c2:4a:88:af:6b:e2:a1:fc:d1:fa:5f:54:bf:5c:05:a4:32:
48:be:ab:b5:ac:c7:1f:f3:d8:cd:b0:54:07:52:0f:11:81:1e:
52:90:55:39:1e:98:66:ee:57:dc:06:91:a3:ec:7a:d7:a2:21:
63:9e:b0:56:a8:4b:9e:fa:5c:a6:eb:c5:ea:ab:52:5f:de:ed:
8b:39:61:a0:95:75:4e:9b:65:3e:86:e1:54:3e:7e:3e:b2:f3:
64:0f:f7:56:01:4c:74:68:dc:b2:db:37:09:ea:85:00:58:be:
1a:0d:08:10:3a:b0:2f:f0:fd:2e:f7:3f:d8:b0:d5:78:aa:b4:
04:87:22:53:8e:61:20:d5:da:19:ba:7e:8d:59:33:c5:ef:e1:
34:eb:3e:33:27:34:5f:16:5b:6d:07:72:78:28:24:bc:b5:51:
7f:70:da:2c:a3:c6:7d:57:13:44:2e:a6:05:4b:e9:c1:b7:2e:
18:89:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:26 2025 by rpki-client