Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: EJfzj58Ddqm3J44cweSPsVPqxvcWe/k1IgHeVb62NLE=
Subject key identifier: 42:AC:F7:25:84:78:AE:D4:85:75:F7:77:E3:28:52:01:AB:34:77:51
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 0194BD4EB29F28F95088390D2F1890C08CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 5BpJC5kfYpwnpQHv48KWy-JUppU.roa (hash: CrCPGt1FnNwvHaRxzi66Coran28PbWoZQZiC83vw/u0=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: RPZLBkgM7toaG7DUb/ePtozYR+UfbnBtA5+zta4OgpI=)
3: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (hash: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:9f:28:f9:50:88:39:0d:2f:18:90:c0:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=42acf7258478aed48575f777e3285201ab347751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:51:b9:8a:63:30:d3:7b:4b:83:27:1b:8f:
d9:8b:d1:cc:ae:ca:0d:d9:61:86:31:67:ba:58:e2:
73:ec:96:c4:c1:75:e3:b8:ae:bf:73:d8:74:9b:88:
a4:0e:8d:c7:98:bf:1f:da:a0:82:94:cc:14:b1:e8:
a3:aa:65:10:fc:5d:ab:ba:5e:2d:b2:86:15:39:b7:
4d:f1:87:a1:58:ac:e6:46:62:86:bd:f4:c4:e3:73:
d5:6c:08:b2:09:d2:07:31:be:8c:23:6d:0b:33:d9:
7b:22:45:44:43:9d:d5:61:94:78:e9:4a:e0:87:41:
5e:e3:e9:da:a6:1e:17:77:8f:47:29:21:6c:49:e5:
fc:3a:e5:c5:6c:ed:24:b9:85:1c:34:b8:8b:da:89:
e9:d8:2d:30:f3:7e:01:b7:28:3d:9e:c3:38:9e:49:
4f:3c:3f:e3:2c:b0:e7:9b:e0:6f:a1:e6:f5:90:10:
ea:b2:f1:db:9e:e8:ff:01:0a:49:08:4c:69:32:82:
35:fc:76:98:5d:85:f0:53:25:09:01:f7:b0:95:83:
6f:9b:61:04:e0:4c:31:67:56:9d:30:14:2b:74:8e:
48:74:18:27:07:f8:58:d8:65:8a:8c:76:b1:68:2e:
88:a1:d0:9c:b0:4c:5a:93:32:0e:51:57:29:9c:d5:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:F7:25:84:78:AE:D4:85:75:F7:77:E3:28:52:01:AB:34:77:51
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f1:00:f3:ed:00:ee:ee:79:48:69:2c:41:54:f1:0e:a9:6e:
f6:17:42:ca:31:3c:60:79:f0:bf:7e:59:d6:f8:1a:9c:d2:ad:
c3:68:c2:b3:c0:30:c1:46:e3:04:9c:87:4b:92:73:50:3d:fd:
81:cc:9e:8a:3e:46:3c:99:2c:53:92:66:78:df:3c:b4:5d:47:
f3:de:3b:31:cd:db:6e:b6:41:aa:1e:37:50:18:4c:71:19:04:
89:b5:79:00:67:a0:d1:cf:d9:28:37:88:c3:67:f4:47:4c:d5:
e8:18:98:fe:db:33:81:a3:67:ee:36:f9:a0:d3:5d:10:d4:a5:
97:cc:db:31:3a:ad:2c:e2:c0:c5:c8:4b:58:51:f1:ab:64:cb:
92:fd:de:ac:45:1a:fb:5d:35:35:06:f3:f2:7f:e2:20:4e:ef:
72:7a:2c:17:4d:c0:72:ea:dd:10:18:90:08:58:3d:0f:02:02:
4d:50:48:2c:7d:33:00:c2:54:dc:2d:a9:30:74:4b:2e:70:df:
bd:96:30:91:15:ba:a0:72:0a:e0:1e:c4:b8:6e:a8:cb:9d:01:
d6:96:bd:27:57:7f:45:04:33:37:2d:eb:f3:48:67:81:c9:ff:
a5:f7:62:5b:a7:52:1e:95:60:61:4f:75:c4:27:cf:82:a4:96:
62:11:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:31 2025 by rpki-client