Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: +QuqZG0gbBAu2WuKpavt10RvWZYhbIYoTlxwFu6n2rk=
Subject key identifier: A9:CB:2B:89:D7:AB:73:A8:F4:E0:2D:0D:C6:D6:AA:F9:4D:45:06:AE
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 0194BD174B80E5E11C7730BB866D3E7E57E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 138E
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: Un03E0U4qdxhaV+PjhQZrlBJ5qWv1VxAdrOFcB1xNfo=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:80:e5:e1:1c:77:30:bb:86:6d:3e:7e:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=a9cb2b89d7ab73a8f4e02d0dc6d6aaf94d4506ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:78:d3:0d:73:2a:54:28:f5:19:09:c1:f0:
e0:f4:d8:5f:17:bd:01:34:38:29:be:00:49:ac:0c:
c5:36:a2:1e:9c:24:fe:80:e8:3a:6b:78:78:92:80:
4b:47:9a:41:97:11:ad:9e:e2:84:bc:d3:0e:9d:28:
b9:fa:b2:73:f7:6d:ad:be:49:c1:2b:f3:77:f8:f6:
a6:d0:93:a5:69:42:9a:15:a7:15:d2:7e:18:53:de:
7e:71:69:6f:b2:1c:8c:a1:23:81:4a:07:c1:2c:5c:
2f:80:c5:aa:ca:3d:d7:21:1e:d3:3e:10:20:75:29:
e7:a9:69:45:f0:77:3c:d0:e0:9c:71:2a:37:14:39:
f3:fe:f5:27:71:43:a8:1d:23:6a:01:d1:b0:d1:e8:
66:f9:3a:a3:df:3f:2d:bd:70:b5:8b:f7:6c:30:2c:
a2:c6:73:69:14:f5:bd:9d:ca:7e:70:58:6c:2f:99:
1c:51:7f:ab:5d:4c:70:c6:1c:98:af:92:4e:e6:c0:
e1:3e:10:d0:b2:2c:b0:0a:6f:0e:c9:05:0d:71:a3:
58:98:07:9e:98:0a:f2:2b:22:9d:c5:67:5e:04:27:
ae:7c:78:16:da:fe:7f:ee:7d:0f:47:a3:dc:36:84:
81:b7:2c:83:65:3e:9b:10:ed:8e:d8:ca:5e:83:6a:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:2B:89:D7:AB:73:A8:F4:E0:2D:0D:C6:D6:AA:F9:4D:45:06:AE
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:44:70:fc:9c:3f:79:0d:8a:d0:7b:19:57:74:01:58:59:f5:
7c:f5:5b:bb:29:ec:57:ef:18:bf:c4:99:e3:43:4a:68:b3:09:
5b:27:af:3f:6e:78:4d:39:02:5b:73:d6:9b:c0:10:7a:ea:8b:
8e:2e:fc:5c:47:e2:37:93:30:0d:80:d1:26:86:a1:a5:05:2a:
36:ed:9c:0e:e2:6b:e8:69:6c:85:52:20:b6:d0:71:e2:3b:03:
92:af:66:cd:26:bf:cb:ee:a3:f0:14:bb:e4:e2:ea:c6:53:3e:
1e:2e:ef:4a:62:44:89:7a:58:cf:8e:9a:de:18:a5:bb:f0:80:
c3:7c:fb:c7:cd:a4:a0:03:36:24:0a:49:e7:18:6a:45:4b:60:
58:c7:d6:92:2e:c1:a0:56:e5:ef:83:52:4e:28:7f:1d:bb:43:
fc:f1:33:d3:46:20:a2:19:0d:76:87:a2:8d:24:30:a1:12:6b:
6a:0b:fd:48:05:9a:1b:e9:44:65:3d:6f:18:28:07:94:f0:87:
aa:f0:bb:7c:50:e2:3a:48:7b:33:04:21:55:1d:2f:5c:e8:28:
43:bb:aa:d1:51:24:3f:23:5b:52:87:48:8a:ec:53:42:d7:b0:
fe:f5:cd:58:b9:55:7f:75:56:a8:35:80:b6:1e:04:8a:a1:8f:
63:df:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:13 2025 by rpki-client