Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier: Oc95gIzeaost+Kbhf2sNF/4I5WocN2eZzk+IPMWtga0=
Subject key identifier: D1:E7:41:C3:01:46:78:E1:81:9F:81:9B:35:7E:06:1E:A4:E5:D1:6C
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 0194BC72B40026A14C8558340816651F639E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: /nYwSe6gIaCzhklHbc9V7M7A7kfrZoagJykAidQzkeE=)
2: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=)
3: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=)
4: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=)
5: tKMYskPULHrcExm9t_zqsBHITcI.roa (hash: R31NKmso4WbL0fd7lkKVeCkSUgER4Iw5rjhqu8nTNvA=)
6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:00:26:a1:4c:85:58:34:08:16:65:1f:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=d1e741c3014678e1819f819b357e061ea4e5d16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:59:91:bc:ca:c1:ed:78:e0:c3:74:28:46:
22:3d:e7:cf:fe:f7:a8:08:59:9d:6e:3e:5c:dd:48:
71:4b:1e:84:5d:37:91:49:5a:a8:54:f8:50:d0:d6:
42:24:37:5b:f2:70:f6:1c:df:7f:b5:56:bf:ca:59:
5f:be:93:ea:f3:8f:71:03:d7:ef:ce:4e:d7:d9:d4:
75:f6:9d:16:83:dd:56:61:73:3b:a8:5f:75:34:17:
36:65:2a:7b:62:b4:9a:2b:b0:a3:e1:d0:90:98:bc:
d7:12:cc:01:5e:8c:f8:27:d3:8e:df:c5:73:ce:10:
39:e3:db:98:3f:84:29:49:c2:c9:58:51:d4:8f:7e:
d7:6a:1e:32:17:f1:9c:71:6d:7d:43:73:3e:8e:a9:
0f:d1:a3:d5:4f:43:67:5c:4d:bf:6d:09:12:ed:b3:
38:7b:6c:d5:66:98:01:c3:04:1a:16:5d:f8:d3:93:
db:06:0b:bd:0d:f9:a6:f8:a4:56:e1:85:02:27:f9:
88:2d:5c:aa:cd:9b:7f:13:e1:5e:24:7b:5f:1b:a1:
6c:72:f2:4a:df:50:45:96:a9:c3:4d:43:56:df:43:
c6:9e:eb:bc:4c:c7:54:6e:0c:14:cf:3f:c9:7c:81:
66:d8:c5:95:95:5e:07:b9:76:23:38:29:76:45:2b:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:41:C3:01:46:78:E1:81:9F:81:9B:35:7E:06:1E:A4:E5:D1:6C
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:7f:15:df:cf:e7:76:78:bb:a5:3e:ad:7e:2e:91:83:52:
02:a4:1e:be:8c:e3:e0:8f:b7:82:80:d5:46:84:a0:df:5e:1d:
8b:9e:ba:e1:9b:96:b2:ef:73:43:3d:4b:03:fe:b0:26:20:61:
90:29:11:63:95:7b:26:89:b0:c5:c5:0b:cb:ee:75:15:b2:1f:
9d:95:28:82:96:f1:73:c4:e1:85:68:00:8d:c9:aa:78:e5:a0:
58:b3:84:f1:94:7c:e3:1c:3b:08:e1:f6:5e:04:58:49:8c:2a:
3f:d8:7a:06:33:df:63:ef:5c:bb:18:85:53:a3:86:bc:37:38:
c3:89:ae:08:12:1f:23:c0:f3:42:31:78:1e:0e:9a:16:cc:10:
d0:92:ca:76:a4:f8:ae:1f:ee:68:56:52:e0:c4:ce:8c:17:d3:
6e:90:c6:76:0f:63:e7:dd:85:28:d4:e0:56:fb:c8:c0:fa:d1:
1e:4f:94:7d:08:4a:ae:37:b5:80:44:ab:7f:58:a1:49:05:44:
e0:d3:67:ce:d3:24:c4:a8:17:d1:10:b7:08:6a:65:f6:fc:f2:
d3:e8:9a:ef:a0:32:4b:6e:37:81:83:5c:04:17:d7:8e:4b:bd:
4f:54:79:3c:e0:d4:25:64:a2:70:75:b6:94:00:28:67:29:24:
16:3c:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:30 2025 by rpki-client