Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier: r542uGkiIXH9h6SyN0LqaNuz+U3Qm47z+B0qnQoRbuI=
Subject key identifier: DD:FB:CB:C2:99:56:B9:67:BB:6A:B2:63:F6:A0:35:02:1E:DB:EA:DB
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0194BC3BEBD4C30CA6B0D18D88B8F7D6E09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: dzwdzCHBNTzL6y/7m/2V3cQIPXVJtvrNC7Jn7nPL7bc=)
3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:d4:c3:0c:a6:b0:d1:8d:88:b8:f7:d6:e0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=ddfbcbc29956b967bb6ab263f6a035021edbeadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:c7:72:25:be:dc:0f:47:e9:8f:2e:0d:4d:
6f:5d:f8:c3:ab:a6:f7:1d:42:97:63:7e:2f:37:10:
3e:59:55:5d:3f:fa:0a:15:dd:52:95:e7:ac:b1:5a:
09:be:dd:9d:a8:c6:5f:74:24:07:14:e0:c4:a8:6e:
f6:32:9c:51:9b:9d:77:a5:00:0c:90:39:45:af:28:
f8:7f:de:32:80:9e:4f:15:39:78:13:59:c3:c4:40:
ad:9a:76:d3:34:a8:10:88:c4:45:25:8c:92:e6:8b:
90:bf:41:46:a9:84:36:12:69:de:41:59:da:93:b3:
17:56:73:42:15:56:28:f0:05:45:bc:0b:e6:f5:f0:
52:51:70:43:d7:cf:74:cd:d9:bf:c9:c3:ce:b8:90:
b1:78:47:3f:86:f1:cf:eb:ba:d1:12:04:87:7e:cb:
6a:1a:95:fb:3d:dc:86:4d:cb:4f:10:40:d5:08:7e:
2e:4a:41:65:cd:b2:11:13:c7:3e:df:4f:60:bc:dc:
d5:cc:2c:55:1f:f2:95:cf:d5:45:5f:7d:3b:28:f7:
af:79:70:4d:a5:1f:6e:be:66:ef:8f:83:e3:f8:a9:
aa:9f:f8:9e:7f:38:f4:3b:9c:d1:cf:a7:0b:af:a4:
a9:d1:99:56:78:58:c2:e4:7b:cf:ab:e8:61:ce:75:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FB:CB:C2:99:56:B9:67:BB:6A:B2:63:F6:A0:35:02:1E:DB:EA:DB
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:e3:85:4a:32:ac:ac:ed:52:b6:3e:02:96:ed:ca:04:0f:
aa:ff:0a:43:1b:2e:2d:b2:c2:ee:13:85:e2:ab:9f:b6:b5:54:
d6:1b:9f:78:76:2e:7f:66:ec:b4:e2:b6:7c:ac:75:eb:50:f4:
02:19:76:df:13:a6:27:25:d6:ac:96:4a:f1:a9:a5:f6:5f:40:
d1:bd:32:c7:7e:0c:2e:ad:88:d6:e9:9b:f1:e4:58:84:a0:fa:
b5:9e:a3:b9:0e:b6:a7:27:4f:9c:d7:22:04:98:ec:fc:21:73:
5d:90:b3:8d:2c:60:6f:0a:46:54:18:ca:a8:ed:b4:3f:ec:15:
07:5a:0f:6c:6e:bb:58:f8:4b:6a:bd:db:fc:f0:d9:45:86:4a:
da:c6:40:59:35:be:91:20:89:f9:c3:64:23:85:75:ea:ba:b9:
e3:e8:f2:68:ee:37:72:01:63:ae:64:59:47:56:00:f9:64:70:
99:99:80:db:2f:0b:e3:24:62:2c:d9:df:0c:31:95:35:b6:24:
c7:8d:25:23:b4:82:aa:5c:9f:7a:ad:ab:9b:0f:9b:ed:9e:60:
df:60:57:91:b9:53:51:cb:f3:90:72:cc:1a:fb:66:4f:f8:42:
a6:bf:ea:07:a1:e0:34:eb:7f:bf:9d:de:90:c4:c6:74:a9:f6:
46:03:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:02 2025 by rpki-client