Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: 1NtN8uLRWZCSiaXXPP33lQtC9P8FaHw9jHf+V54Daow=
Subject key identifier: 52:C4:D5:06:0D:16:46:C6:F6:1A:E1:13:1A:76:54:5A:38:F1:FA:31
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 0194BC04D92E7B6E34F49DA66D93EE4E5089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: +cD/gH2kNAOA4w7r/FOFvqqsYSVB0iL5JcXD1R7w5j0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:2e:7b:6e:34:f4:9d:a6:6d:93:ee:4e:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=52c4d5060d1646c6f61ae1131a76545a38f1fa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:00:e6:e9:fc:76:f2:40:30:d7:b5:18:49:
9f:f8:c2:66:7f:61:a4:85:87:f0:fb:1d:f7:e4:b3:
a6:b7:8e:f3:a1:68:52:81:1e:64:ea:a6:8a:49:c4:
8e:d4:38:40:12:e7:cb:e4:7e:c0:52:ff:f4:27:6e:
a9:74:0c:83:44:c5:6d:dd:5a:44:8f:55:3c:f3:e8:
c5:e2:4c:e7:bc:a7:d1:ea:01:2e:c4:ba:8d:09:30:
a6:28:1a:00:ef:d0:11:cc:a1:cc:18:b9:34:eb:51:
c1:e6:1b:27:4a:a6:d3:12:f4:b7:8e:ef:bb:a1:bc:
36:e9:fe:43:3c:5f:3c:f3:1e:c0:a4:3f:5d:15:1e:
0f:b7:c7:ca:39:74:6c:90:6b:b8:91:b0:76:78:71:
be:c6:a2:9e:61:ba:ad:05:cb:d0:0a:42:06:04:2e:
f2:47:73:52:f2:36:cc:a1:4f:30:c7:3f:61:85:4a:
bd:6a:4a:aa:4d:3b:05:34:c9:86:99:22:d8:91:24:
97:fd:bd:52:f7:d1:13:47:31:aa:29:2e:5b:ea:f2:
7b:1a:b3:8c:c1:4c:3c:0b:c2:e6:76:55:ae:b2:08:
b3:75:1f:7b:88:90:50:5b:a8:74:81:59:40:55:a7:
4f:58:d3:27:3b:0b:52:67:4b:70:28:09:46:9e:c8:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:D5:06:0D:16:46:C6:F6:1A:E1:13:1A:76:54:5A:38:F1:FA:31
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e9:3b:10:26:38:17:2c:93:12:ab:77:ae:3f:ce:ee:ce:68:
7d:a2:d1:38:ff:5f:e2:1c:07:d3:35:b9:f5:0a:64:3e:51:15:
de:94:4a:a6:3f:e7:38:78:08:08:dc:7d:a5:fa:32:b6:54:32:
b7:b2:3e:7c:34:6a:f1:91:09:c8:15:37:a0:35:66:44:88:34:
db:de:ee:62:6e:17:1a:6a:5e:7b:12:5e:75:0d:0b:30:84:6c:
0d:57:85:b8:49:ce:11:fc:8a:49:f1:63:ec:99:79:f5:8d:60:
ef:fc:a3:06:18:ec:d5:24:b9:d4:7f:06:d9:9d:0f:40:6e:aa:
a4:cd:b1:f3:b6:b3:8c:88:7b:9f:fc:26:e5:08:64:92:71:84:
48:c8:52:ec:ef:17:a8:80:99:23:d8:d6:e8:aa:07:9f:f7:26:
7e:90:6e:83:56:fa:af:18:b2:85:1e:2e:ca:b7:f7:e7:8a:36:
2b:0e:47:a7:ab:ba:5d:e8:41:f0:2a:47:2e:08:05:24:9e:de:
05:f4:5c:d9:19:05:7d:3d:06:3e:c2:20:b6:df:04:d0:d9:c0:
ef:9d:c8:f3:6a:df:31:d9:8b:99:df:04:02:2a:25:2d:ed:7a:
99:40:1b:83:91:aa:a1:07:bd:f0:fe:59:31:0e:67:ff:dc:81:
ed:dd:21:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:33 2025 by rpki-client