Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: M/GPizZvMmX24H4gdocRmtH9QyRu3fcjLQdUfnPbUkQ=
Subject key identifier: 17:57:DC:A2:16:E7:F7:64:F3:F2:73:D3:9A:19:E2:42:D6:C5:9F:80
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 0194BCA973860555B214EE242D3F64260C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 8xMxjtO-k2WYJj5fJmeVkGV5YA4.roa (hash: h2/dulkFhykUkX0igL56x6SI1vv2NsPZ43/9G+3BAxs=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: v7UMLirCyVZm2hYBwkhKGs5PQW6ArvrGyQYTiCVNBFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:86:05:55:b2:14:ee:24:2d:3f:64:26:0c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=1757dca216e7f764f3f273d39a19e242d6c59f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:89:be:10:40:af:81:b2:4c:9f:b4:17:8c:
93:9c:84:1a:16:e8:8b:17:23:6e:0b:d6:6b:df:0d:
75:85:e0:95:85:f8:19:f2:a2:5d:c1:8d:0e:28:35:
c7:ff:a1:5d:78:b2:df:15:ab:57:3e:71:c0:5a:9c:
21:6a:8a:6d:b7:84:1e:32:7f:dc:e6:bd:52:4f:90:
8d:24:7d:9f:b6:c4:9b:d9:82:54:5d:97:6d:04:c7:
72:e3:83:e5:6c:0d:88:ef:06:9f:cd:18:99:dc:a3:
50:f4:a2:3a:85:8a:79:bd:2f:cd:64:4d:c1:ce:95:
30:87:87:a7:34:49:22:3d:00:5c:49:3e:5f:04:d6:
90:5d:2e:08:e3:5b:88:bd:08:2c:b6:43:51:0a:91:
a8:f3:59:ae:f6:91:c0:a5:c3:db:07:f0:c7:6d:b1:
36:ab:bc:75:bb:f0:a7:0c:52:57:98:2c:ab:fe:7d:
2c:e9:ff:62:d7:76:d3:a0:51:bd:6f:2e:48:d1:bc:
d4:a3:69:01:9f:d2:a0:4e:f8:07:8d:7e:dc:96:c4:
57:a0:e7:5c:52:0f:3d:55:ed:23:7f:83:b1:4c:7b:
cc:91:3c:a0:19:40:12:cd:74:f8:71:d4:15:bb:1a:
5d:0a:16:c9:43:fd:b5:0f:1d:e6:6e:db:b9:fb:8d:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:57:DC:A2:16:E7:F7:64:F3:F2:73:D3:9A:19:E2:42:D6:C5:9F:80
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1d:01:76:b2:15:6f:3e:8b:5b:66:77:cc:71:dc:95:50:63:
a9:69:fc:0d:51:c8:de:1a:e1:7b:be:49:1e:6c:90:af:f4:f7:
d8:58:9d:4f:94:73:c8:f9:65:f7:c4:ab:15:9c:19:13:7f:02:
99:30:28:a8:ef:86:63:09:bb:aa:3d:81:60:6b:c7:34:bc:cf:
ba:d4:32:60:6d:75:43:6a:44:1b:c0:38:84:e2:73:dc:cb:a9:
5a:c9:c8:f6:bb:9e:70:8d:df:bf:cc:2a:cf:0f:d9:25:b4:cb:
ce:8b:61:34:16:99:94:a8:1a:22:c3:a9:c7:0d:4a:5a:82:ca:
0b:e4:e5:24:d6:2f:ef:04:c6:32:54:7d:b3:5c:f3:67:bf:c6:
77:4e:00:58:06:8f:04:ae:24:51:0d:4e:f2:78:10:27:ff:99:
e2:45:83:97:30:f3:7c:c7:88:74:ff:75:aa:8a:82:df:ee:d4:
90:ff:03:a2:b8:b4:a8:18:75:5d:79:4b:48:0a:8e:ec:9a:83:
74:1c:25:f6:25:eb:d6:42:a2:a0:0e:f4:a5:5c:0c:ea:6b:76:
18:a1:3d:ea:d2:89:b5:d9:c8:e7:f5:01:07:48:88:79:37:85:
95:23:8d:31:d3:9d:b7:a1:3d:9c:05:89:82:e0:e7:43:82:13:
a6:31:66:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:36 2025 by rpki-client