Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File: UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier: P8nCpZIvEdB5MO19CCbBOporBu8XlGSoCLKCF9J2LMs=
Subject key identifier: 4E:49:0B:B1:1D:B7:C6:8B:A3:BA:35:F2:36:97:B6:64:A6:5E:04:48
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer: /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial: 0194BC3BFDEB0F4ABD3A164F216D00931DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number: 0D8E
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: 3r_ETONky6E0ht04dT8KlE05aWA.roa (hash: 5YqtEwAOo33bp6YyDMyktpU2orZ8oIMLNsWxsJ5Pw74=)
2: 6czTDwgbw_hG3rtX5EbRgdxWDCg.roa (hash: O6dY+2pnFwnKeeBFsLsl5BJ8l9rfKrvyLFI9YgpRmUc=)
3: QpAJ4vf1qXK5jaYvVWmL5jIF3Pw.roa (hash: cvXwgvPz8qfjcC7GpIKDqE7c3dlSczcrBaKQqZloC5A=)
4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: +aRS5QXwPR0KcGNdbvyWZJm12x8rQXYVkycDO36EpDM=)
5: hXvKA5uXq9fHfGbQP3jsD3XVrgo.roa (hash: kSmYrg/l/aoXGp6g2rsqAnZqsn/T1RMfjN3KJX086Q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fd:eb:0f:4a:bd:3a:16:4f:21:6d:00:93:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=4e490bb11db7c68ba3ba35f23697b664a65e0448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:26:42:2f:54:15:77:6d:60:7c:52:45:ed:
9b:63:04:3e:e7:12:ce:58:c1:b1:d7:6f:ee:76:22:
90:26:7d:4b:68:ac:61:bd:98:66:96:70:08:32:9e:
ce:21:23:a6:c9:5f:16:d2:bc:30:a1:ea:ec:df:ca:
ec:6d:8b:05:cf:3c:de:c6:75:17:0b:09:0c:b8:a1:
81:0a:12:a0:fb:12:c1:14:34:0c:a8:2b:c1:fd:1f:
84:f6:ce:94:a4:f0:ef:78:ed:b5:44:c3:8f:ed:1b:
6b:c6:e2:74:c5:01:2a:8b:f4:e9:22:3b:ed:8d:34:
cc:23:9d:2a:9f:25:07:78:a8:df:8c:17:99:12:bb:
f5:5e:c8:fa:4f:9a:64:c8:8e:77:28:4d:dd:56:eb:
17:06:ef:22:19:7e:a4:75:2b:cc:27:85:aa:fa:c2:
9a:e2:de:f1:24:00:e9:c1:61:a3:55:f5:e5:48:3c:
66:a5:5e:f1:0c:56:99:30:10:ed:de:3c:8d:a5:89:
f2:a6:83:84:8f:a2:87:b7:68:3b:71:83:96:d7:58:
a8:b2:55:13:01:87:6c:9b:56:8b:92:0b:98:a8:9f:
7b:01:7f:b1:b0:91:a8:de:8d:a6:fb:d3:b3:4b:f0:
22:14:de:eb:0c:61:8a:51:60:e6:ab:e7:e4:91:a6:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:0B:B1:1D:B7:C6:8B:A3:BA:35:F2:36:97:B6:64:A6:5E:04:48
X509v3 Authority Key Identifier:
keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3b:c0:61:49:c1:3c:2d:0f:a8:a8:0f:98:24:39:0d:58:90:
a7:ca:e8:d4:dd:6d:fe:f4:c7:9d:09:78:2c:85:7c:2d:2d:b4:
e8:42:35:76:69:b5:5b:79:b5:97:c5:27:cb:50:41:9e:3b:db:
83:51:48:b0:7d:2e:eb:2b:72:9b:6c:c8:c1:c2:0e:0f:64:b0:
91:4a:10:09:9f:f7:cc:61:70:94:bd:35:2a:91:7a:54:13:56:
78:23:6e:e7:eb:3f:a1:53:1d:8f:49:dc:1d:86:24:f7:3b:7a:
3c:13:6f:4c:b6:bf:b0:ff:8d:5b:24:d7:e4:9e:af:56:90:09:
bc:77:c2:e0:e2:e2:6e:a4:67:07:1d:47:4e:37:93:07:ae:22:
da:3a:8d:4f:c5:67:6a:3b:26:ba:3e:fb:be:b2:cd:46:c6:9f:
d5:dc:19:31:66:ee:81:68:6b:83:d7:ca:22:4c:76:b7:e6:76:
d3:00:21:d0:29:18:50:f2:3b:91:68:e2:f5:2b:9e:f9:46:7d:
88:9a:f8:1c:75:88:06:0f:22:ac:6c:4e:e0:0c:87:69:42:6a:
1c:f0:ab:e5:84:55:8e:5e:0a:d7:10:50:b2:48:9b:28:2b:00:
82:3e:62:c5:9c:65:68:62:da:36:9a:1f:85:d1:ce:78:49:8f:
3f:7e:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:29 2025 by rpki-client