Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: bQdszpxROYTNis3gjQYD8ZjSodhQegh6EyE2VkQurWA=
Subject key identifier: F5:59:F5:F3:20:78:92:A3:81:24:16:F0:02:8A:C8:E8:E1:9E:A6:94
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 0194BBCE5085454A0DA67E1AE5501D1FF50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0A5B
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: XPXO+fB7UuQOZKlIEjCaDR0Zk8YmGOe+Ci6b1Jobqqo=)
2: yBgRtAUy9SDMB2oNfVg6DWBcxdo.roa (hash: th+et5jSmKPB56Gge2PfFSgmFKaHL/juuWVdT7KzSfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:50:85:45:4a:0d:a6:7e:1a:e5:50:1d:1f:f5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=f559f5f3207892a3812416f0028ac8e8e19ea694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:56:12:79:0a:62:29:c8:36:c6:ce:e4:cf:
c6:fa:2d:89:24:d7:fd:84:25:de:ae:ea:73:45:f9:
23:ee:72:fc:14:fc:40:13:52:ac:53:a0:65:ae:83:
1d:7c:cb:23:bd:e2:06:1b:f6:39:4d:14:f0:cb:a8:
12:01:b7:44:5e:a9:fc:ad:94:06:42:74:02:41:1c:
48:d7:75:82:86:fd:bc:45:e1:7a:43:24:e0:1d:34:
77:73:44:63:2e:0f:0b:8f:2d:a9:7f:41:dd:a6:a4:
3e:ed:20:a8:20:bc:f6:53:7e:62:c2:34:cc:0b:d0:
97:63:a9:ca:86:be:09:d4:30:51:01:71:4d:cf:26:
ab:84:fb:a4:ec:ee:73:c1:98:6a:e8:43:b8:3b:75:
d1:00:04:b6:67:3b:a1:51:fd:4c:b1:98:88:87:d7:
92:62:23:dd:99:3d:37:fb:0b:c5:95:46:d3:9e:77:
5f:c9:ae:c1:3f:1e:8a:57:52:c1:ce:01:ad:3b:a0:
e0:cc:2c:13:72:22:92:29:33:2c:9d:ff:9a:3f:f8:
de:26:22:fb:4d:60:94:9d:04:bb:0e:a5:11:27:bf:
c5:fd:f5:c4:a6:ae:57:9f:e2:ca:ab:ce:91:8b:b4:
66:c2:ee:97:13:7d:59:4d:1d:ee:dc:4f:78:cf:51:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:F5:F3:20:78:92:A3:81:24:16:F0:02:8A:C8:E8:E1:9E:A6:94
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:fb:99:0b:25:16:ba:cc:07:67:a5:17:d5:ee:bc:dd:5a:
a7:a4:62:bf:77:c1:83:cd:79:14:d1:8b:6f:80:30:91:16:09:
ce:8d:0d:6c:39:22:a9:e8:60:4a:10:c4:59:b1:c3:50:e1:32:
7d:d0:1f:0e:c0:ee:1d:4f:51:9c:74:c5:19:18:00:b8:f6:f8:
79:30:47:39:fa:d5:d2:b0:25:ff:31:d8:64:a5:30:f8:be:37:
e1:c1:ff:94:dc:c9:af:af:24:47:e2:cf:50:da:ef:6c:77:e9:
36:95:90:fd:b2:c3:9a:bc:51:ef:de:ec:7d:bc:dd:25:56:c6:
4d:75:02:d0:c7:65:a4:2e:89:07:73:e9:a7:2c:40:60:aa:41:
30:32:75:2b:93:69:1e:5f:74:77:09:fc:6a:37:dd:e1:cf:ef:
9f:55:ec:ce:f7:a4:66:1a:4e:36:6d:a4:55:27:b0:2f:05:23:
6c:a0:29:03:72:4f:f7:77:15:ad:38:f1:00:ad:22:fb:5f:ba:
c8:f1:f1:04:44:af:62:a1:53:de:71:44:3b:d6:92:a7:46:af:
d4:a4:9a:58:04:85:82:13:ef:5d:52:ae:75:6a:41:1c:37:f1:
b5:a1:c8:35:15:06:43:73:e0:33:80:44:0a:e8:63:6c:00:f2:
eb:ca:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client