Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File: URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier: CYaBcFA0PZU+q6mL8XxU6OgJWmM4MPltiiDej0xMiVk=
Subject key identifier: DF:59:19:05:E4:B8:E0:70:C2:7D:AB:71:F3:9A:AF:3E:89:71:F4:FD
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 0194BD4EB3A58BED863A8BD13372084CC6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number: 0137
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: QjbD0Mv43Mggjnv1dD3aQlZ_dnQ.roa (hash: wA7EasBNLkMqkW9XYIKGBOp/xluoqSrHxbZPHdScXQ4=)
2: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: VHqMAjc7c2b/8mUAh3fcrM1H7GnKXBnITKYuiYCWhB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b3:a5:8b:ed:86:3a:8b:d1:33:72:08:4c:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=df591905e4b8e070c27dab71f39aaf3e8971f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:9a:52:69:d5:55:19:98:e5:77:b0:04:d1:
a3:26:f5:7b:33:d6:ae:6b:10:0c:e5:c8:cc:93:f8:
09:5b:c4:48:8c:19:11:e5:a4:ce:da:de:1a:7e:68:
f7:85:51:40:34:5f:a9:6a:70:bb:ad:c5:66:e1:63:
f3:4b:1a:e4:67:0b:dd:d0:05:99:e1:51:48:a6:79:
58:f3:cd:9a:d3:ed:43:7b:80:10:82:bc:ad:c1:2b:
e2:cd:31:31:78:70:d0:d4:95:55:4b:83:21:af:70:
57:cf:d0:8f:39:1d:ad:5a:15:d3:47:97:0d:41:36:
97:43:d2:7a:d4:55:33:0b:8b:ab:69:63:be:8f:78:
50:a4:b5:da:7a:fe:6f:03:36:72:27:fb:4b:fe:e5:
0a:a9:45:44:6a:ed:a6:46:76:3c:44:49:57:86:dc:
5c:ee:56:c9:ba:2e:a8:47:b4:f4:49:6c:9c:3f:90:
53:27:7f:eb:60:9b:50:48:fc:b6:2a:32:7f:dc:00:
4c:6e:78:92:14:2e:e8:97:68:25:3c:c5:4d:d3:a4:
b4:88:d3:d6:19:03:0c:33:1e:48:13:1a:76:14:f5:
c7:34:da:e9:c0:f3:2d:ed:5f:bd:84:9e:58:5e:6b:
3a:a3:56:d7:77:e0:d3:1f:b2:16:55:24:77:12:8a:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:19:05:E4:B8:E0:70:C2:7D:AB:71:F3:9A:AF:3E:89:71:F4:FD
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:16:56:b1:05:7c:4b:15:b8:96:d7:be:23:30:c4:97:2d:
2a:7c:dd:07:c8:4a:18:c5:97:fd:cd:89:f0:c1:0a:40:92:b7:
49:40:1d:6a:ee:bb:00:68:74:1b:e5:54:69:34:9a:ab:15:53:
8c:d5:c8:b6:d2:dd:51:0a:31:5b:c8:6e:f6:a4:cf:3a:14:e9:
da:4c:f1:04:46:a4:70:b8:f5:2e:e8:bc:7e:1d:3c:5d:da:66:
3b:0b:02:87:63:2a:fe:f2:de:a6:a8:02:13:39:cc:6b:9f:19:
e4:d9:07:03:04:67:1c:86:b9:4a:37:44:e6:9a:7d:e1:0e:b2:
4e:5c:1e:17:74:ed:9b:15:53:36:7e:07:bf:94:c0:b2:22:f4:
f6:c2:cb:06:6e:06:2d:32:8c:0c:85:9a:fa:f2:08:fb:1b:a5:
b1:a7:71:34:9c:86:e0:ac:4e:df:8c:a6:12:19:3d:6a:d0:8d:
54:ee:e4:b2:a8:d5:56:5f:64:f3:0c:8b:2b:45:cb:08:1f:0f:
d4:70:d7:5a:1b:ee:8c:92:c4:e1:93:57:d9:c1:df:f4:c5:df:
ba:93:c2:6c:fc:76:85:2b:cf:ed:35:c6:db:53:04:8a:de:b4:
28:d9:26:c3:b5:77:12:c8:22:d4:73:62:eb:6b:ca:72:77:82:
3c:bc:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:04 2025 by rpki-client