Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: OEGMeay1zD1vpvj//dKXXPK7thS029C3Q89z2s0MVLI=
Subject key identifier: 00:B8:EA:6B:16:6B:44:6A:CE:56:3C:46:77:E9:AC:D7:15:67:1E:47
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 0194BBCDBB69A1B3B210F0DD6882B2B2F5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 0D4D
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 1-KX-hNqJda_u-tMY8JTRfjoeRgw.roa (hash: 0loawEu3EsQvN0YOhlZpUuKsy9W2F4KZ2P7ZrPoURyk=)
2: 4Vp82kMVFy3SS-QpMeiBb_LCuZM.roa (hash: eQLhAc0fHmyRxdit6MMg+tHEhHD6XioTBzmbHJz5rsE=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: +gUiYerE2RWBgCZYC/petzO9yXrnthRnJYzKurbnsCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:69:a1:b3:b2:10:f0:dd:68:82:b2:b2:f5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=00b8ea6b166b446ace563c4677e9acd715671e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:28:17:ae:6c:5a:b6:2a:d6:c0:0d:61:83:
10:7f:13:f9:50:f3:35:83:60:e7:fb:29:5f:e1:8b:
04:45:cb:7f:84:bd:2e:ed:bd:5b:07:77:60:69:36:
35:75:ce:29:cd:24:fb:97:cd:ed:88:03:0d:06:d1:
88:e0:43:01:a5:2a:71:7f:7c:72:42:da:b6:2c:1b:
6c:45:fe:09:76:56:25:76:73:b8:6d:6b:88:3d:65:
45:75:2d:c1:17:a2:85:d7:57:4c:3c:82:c9:53:c8:
a9:33:b0:1d:84:4e:66:aa:e3:08:72:b3:05:cc:d8:
89:2b:f9:42:5e:78:25:9d:83:ed:ed:bc:5e:b2:1e:
08:c3:a8:1c:a7:04:dd:ed:2d:6a:03:30:a1:1f:c7:
2b:ed:20:0d:18:56:0f:45:c3:52:de:d2:bd:e5:67:
ea:f3:32:4e:39:9c:95:63:8c:fd:04:32:a4:bd:de:
03:d2:fe:df:6e:3b:df:77:1a:dc:09:01:9b:a8:44:
a1:70:0e:00:a8:7d:b8:e2:92:98:d9:a0:cc:c5:73:
6e:eb:17:9d:1f:13:1f:6b:94:14:e2:3e:da:9b:6c:
92:5e:58:69:2f:e5:38:43:3a:07:bb:b8:f9:30:93:
25:fa:a7:d4:38:e1:6e:ef:53:41:69:31:be:06:4a:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:EA:6B:16:6B:44:6A:CE:56:3C:46:77:E9:AC:D7:15:67:1E:47
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:36:94:15:56:8c:ca:c7:28:4f:59:70:0b:ea:69:05:30:86:
15:d3:50:e1:90:66:bd:0b:ed:76:5f:25:ef:93:54:da:f9:43:
2a:98:61:7f:7e:74:0b:23:f2:b6:4e:4f:9e:b4:fd:ba:d9:bc:
3e:c6:c2:78:17:91:86:ef:9c:58:ba:5d:59:98:5a:01:4d:c5:
4b:be:ca:92:62:ab:27:85:af:06:bc:48:85:3f:65:14:0c:c5:
3d:2f:5a:b4:e0:e8:98:b7:1d:2d:22:e9:76:e2:16:99:72:5e:
b3:06:74:a9:3d:ec:39:e0:53:a7:ca:7b:99:b9:85:a6:c5:ed:
99:a5:b3:48:12:c3:27:83:c8:18:c0:c3:ef:1e:db:12:11:49:
20:91:80:c7:9b:46:eb:53:70:41:10:d1:1b:c1:b2:74:2b:6e:
bf:88:2f:97:6d:7b:e9:8b:f4:33:d2:eb:65:55:8a:ce:d4:b8:
2a:7e:57:e0:61:30:c3:48:5e:cf:fa:76:7b:57:b6:3e:46:f2:
fe:2c:63:99:7a:4f:9e:9f:c4:a9:66:4a:c1:25:25:aa:64:64:
ac:62:c9:29:3b:c3:76:ae:cf:5a:9d:31:a4:e3:e6:36:55:8d:
5d:76:0f:83:ee:d9:e1:86:ad:b5:49:7f:2a:4e:ec:45:87:2e:
3f:b1:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client