Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: vt9Z02L6pAQUrtypQINf/FOp6oxfgctrSJ9cuEjBsSU=
Subject key identifier: 45:67:7F:E6:97:15:3F:29:65:03:21:82:50:DA:6D:26:FB:44:A8:7F
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 0194BC3C573660B07A7AF8AB4D91D235E654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 0E27
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: /ILq3L1uBCog8RAz/kabRA5lJQB8WNT9KNNCM2yYQ5s=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:57:36:60:b0:7a:7a:f8:ab:4d:91:d2:35:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=45677fe697153f296503218250da6d26fb44a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:0c:6b:0c:52:dd:fc:81:ce:b8:cc:7e:31:
cc:43:07:61:79:37:72:37:7b:e3:a0:cb:28:8a:2f:
ae:c8:18:ff:12:87:14:f5:59:1d:8f:7e:70:eb:24:
4a:b8:f0:c6:97:1f:ea:9a:82:91:e7:fc:d8:28:5a:
be:80:1e:3d:3f:c3:55:35:cb:c7:dc:f0:69:2b:e2:
97:30:4b:f9:39:c5:4f:d5:8f:01:d5:98:5c:f8:7f:
c0:76:56:cd:90:cf:1a:44:06:4c:aa:e4:cf:27:2d:
40:a1:98:d5:35:19:b5:cf:ce:2f:d3:b2:f0:16:a3:
cc:7a:96:77:d9:6a:4f:b3:57:ea:f1:fb:63:35:a6:
ff:09:5f:f6:76:2e:db:27:01:24:86:e9:77:ce:56:
24:16:01:75:c9:b9:50:7b:39:19:42:83:66:d9:0d:
91:3c:c3:44:07:e7:8c:f2:30:ba:67:8f:10:db:ce:
15:4e:6a:a5:a8:30:f7:50:43:39:19:d6:1f:08:63:
27:86:9a:3c:0e:a1:c8:4b:05:39:7a:59:56:1c:ec:
31:c1:b9:91:44:64:10:fb:8b:6a:19:8e:89:d9:e6:
71:0d:71:3c:9d:10:01:9a:35:fd:52:b8:e1:d0:44:
4d:59:a0:ca:73:d7:03:02:f7:35:04:7a:97:d5:91:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:7F:E6:97:15:3F:29:65:03:21:82:50:DA:6D:26:FB:44:A8:7F
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c3:5e:1a:13:b0:d9:ae:75:40:6a:7d:dd:db:25:5e:a4:f6:
47:ec:22:27:67:c0:6e:d3:69:93:54:6c:87:9a:b8:78:c1:89:
c4:8f:15:aa:94:67:f6:1a:cf:b6:9a:f3:66:fe:22:8c:32:8a:
35:20:c6:fa:7e:92:0e:73:26:2d:0f:be:bf:24:e2:2f:af:53:
c5:e5:3d:a4:b1:a5:39:aa:fb:ce:51:28:2f:da:2b:23:69:dd:
8a:38:67:f3:c6:d5:95:dd:bd:a2:22:1e:69:c0:ca:62:0d:cd:
81:1d:9a:7b:cc:e9:cd:83:97:1b:3b:79:d9:7f:96:22:79:aa:
c8:db:2c:84:eb:53:51:36:0b:14:b8:ec:bc:52:d2:c4:31:06:
71:bb:8e:db:5e:09:ac:1c:15:8a:be:ec:9d:5c:24:f0:6c:81:
02:36:55:a8:fb:ab:73:56:2e:88:9e:34:79:41:11:ca:3e:c8:
29:63:c7:3d:73:e9:e8:4e:24:fa:3e:ce:0f:9a:68:fc:be:c1:
30:f8:a1:75:06:d9:8d:d0:cb:a3:0e:61:ae:ff:74:34:60:bb:
13:dc:31:42:a7:45:2a:ef:18:f3:ee:ca:2c:f1:60:ae:de:00:
19:66:fe:89:11:11:0f:5f:95:3a:4c:e0:b3:36:3c:6b:10:ea:
cc:ce:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:23 2025 by rpki-client