Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: XQ39cehZiczfnGaYsqafhG5XIecWjntqvFISgdhXFQQ=
Subject key identifier: 73:78:3F:B4:49:DD:8F:60:6C:D5:92:98:F2:C3:6E:1C:33:6A:C6:21
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 0194BC3C21BC50BE5BD50807FD4D0BBFD084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0BC6
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: ja3iy1zBB0tUnxqnAHd9C1l0UjnyW1MxpEqA2+xQFGI=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:bc:50:be:5b:d5:08:07:fd:4d:0b:bf:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=73783fb449dd8f606cd59298f2c36e1c336ac621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:62:6f:97:1b:99:22:0b:d9:d2:b1:c3:f4:
a4:43:13:a5:cb:f4:dc:bd:07:5e:88:7c:61:a1:f6:
15:f3:d6:03:52:7b:4d:12:31:46:a2:9f:bc:ae:4a:
0a:03:b9:d1:23:3b:5c:bd:e1:0a:c3:ed:da:bf:fc:
6b:cf:aa:a0:57:05:ce:3b:5e:53:5a:02:2f:99:ef:
97:78:79:f3:7b:56:04:ae:88:39:81:d5:42:3a:fb:
63:f1:6d:82:eb:4c:25:8a:e5:59:9e:6a:a5:e4:4c:
66:da:3a:d2:f0:76:f9:17:e1:ef:c2:0a:8b:0e:22:
ea:a9:f8:ad:de:6b:bc:32:e3:58:95:6d:9e:a1:75:
44:df:d2:4e:b2:9f:73:b1:23:b7:04:61:b2:1b:75:
cc:83:1e:94:ca:c5:e3:bd:c4:f2:43:18:51:f3:b4:
46:bf:db:19:1d:f6:a7:d0:f2:8b:2c:d8:8e:a9:31:
12:9f:d2:81:06:94:35:da:74:63:f3:ed:23:d8:b4:
57:2c:8b:0d:13:4c:35:23:78:a3:c7:ad:d6:a1:45:
06:2c:5b:52:7a:0c:ea:16:2f:fa:5b:ab:4d:ca:8c:
9c:a8:26:a4:34:f1:73:60:18:fb:36:53:61:36:94:
34:13:45:6e:d7:d3:81:f2:52:d5:18:b2:dd:88:de:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:3F:B4:49:DD:8F:60:6C:D5:92:98:F2:C3:6E:1C:33:6A:C6:21
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:2a:ae:91:7d:27:7e:3f:90:bc:cb:73:8b:81:37:2d:7f:62:
45:e5:d9:b1:96:ea:78:16:25:31:53:94:76:a6:bd:be:7d:fa:
4b:48:9f:ff:ee:0e:7d:79:eb:e2:d8:a9:7f:e8:51:dd:b4:09:
bf:34:06:50:ec:46:3b:46:dd:6b:06:aa:39:54:5a:38:c1:e8:
0a:bd:df:b1:e2:c8:36:6d:71:be:c5:2f:e8:ef:52:5a:e4:2a:
66:9b:ae:9f:b7:44:ae:2e:80:3a:3c:17:f7:50:dc:85:43:65:
84:a8:6f:8b:15:aa:38:ae:04:66:73:ce:15:13:95:da:96:e7:
9f:34:a9:4f:b2:8b:c6:ee:34:3e:3e:63:91:ef:4e:d2:04:12:
64:0a:9b:bc:30:1f:a3:a2:c3:0b:97:4e:ee:ba:7f:c8:d2:8b:
38:21:29:2b:2e:af:c4:75:50:72:d2:13:e0:f2:99:2c:c8:c4:
ee:cd:25:35:49:c8:ff:3c:6a:d7:22:3f:36:dc:4e:33:ed:e2:
64:2e:a9:ab:a4:56:5e:e3:41:76:e6:32:8c:61:ca:17:27:0b:
89:45:81:36:59:92:18:1f:76:92:ea:08:98:fc:d9:55:f7:96:
83:dd:2f:ef:a6:f7:2a:f8:a1:af:53:db:a7:7f:13:13:ef:c8:
af:b0:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:49 2025 by rpki-client