Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: 92knl6eK04N2OrTpT/g/BSNIQXeKJj3pzBdB5xDk+Vw=
Subject key identifier: 47:FE:AF:C6:89:F4:E5:6F:B8:99:4A:86:1E:35:3D:3A:DC:36:A6:20
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 0194BC72FEE99861E5F394FAE03D9D96BFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 088D
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: zhBjidy3Z2Cd6gxbjoozTIVPABabes0o+Lk/tJJcO9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:e9:98:61:e5:f3:94:fa:e0:3d:9d:96:bf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=47feafc689f4e56fb8994a861e353d3adc36a620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:8c:fc:48:93:03:31:b6:45:4d:8c:a2:e4:
e4:9d:ce:7b:e3:5f:53:2e:1f:b4:c6:65:7e:67:c9:
5e:62:ce:d6:10:e9:72:4e:af:3a:2a:5d:ff:35:6d:
3c:a8:57:75:5c:1b:f6:2e:15:4b:75:ab:40:71:2d:
a3:f1:0a:22:79:7d:4e:f7:d8:16:62:dd:b2:6c:5f:
91:44:2b:e2:5f:0c:3b:c6:46:12:d6:2b:08:07:b0:
eb:6f:43:da:99:dc:4f:d9:af:85:56:7b:05:e3:67:
9a:05:c7:48:d8:f2:c2:1a:9d:0f:6f:58:48:52:bf:
de:36:00:05:2c:06:f6:9c:63:a3:a3:6f:e2:a4:09:
90:07:6f:5e:7a:e6:fa:33:b9:b0:a7:ab:0e:d4:e9:
de:17:22:4d:68:46:5c:fa:ed:cb:ed:e4:34:e6:54:
13:8f:ec:d6:f5:81:de:6b:f8:7b:3e:87:1e:be:40:
b4:ea:52:d0:71:c0:7a:d0:f3:1c:2d:a7:a9:07:9a:
16:93:ba:72:a0:11:dd:01:32:e1:4d:f5:7c:ae:a7:
1b:b8:b5:55:53:0d:db:33:e8:11:9a:6d:f5:05:5c:
56:8d:30:22:f3:54:4e:86:99:99:1e:05:13:46:86:
b8:3c:4a:0b:0d:d4:4b:68:6a:4b:f8:bc:46:92:f9:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:AF:C6:89:F4:E5:6F:B8:99:4A:86:1E:35:3D:3A:DC:36:A6:20
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:f2:d5:13:29:b9:aa:e8:d5:b0:cc:f5:f1:f5:80:5c:95:
17:f0:7b:ea:bf:d8:69:2a:99:29:ea:0a:1a:0b:d7:3d:08:f9:
5d:30:23:72:3c:74:9e:73:7b:e9:99:7a:3c:a8:24:32:e0:48:
79:13:fb:37:1a:3b:05:1b:99:cc:cc:a5:ff:e8:8b:89:fc:db:
e8:bf:d4:fe:66:69:34:2f:b8:45:5f:2b:dc:3e:9d:39:71:75:
c4:70:39:3a:7e:19:ee:74:05:4f:d3:be:e3:c1:a6:ba:95:6e:
36:70:a5:75:ac:48:9a:7b:1f:87:a9:59:de:20:8d:43:f1:78:
da:11:8a:fc:cc:1a:db:96:63:97:89:77:72:69:1a:7e:b8:26:
86:a6:c6:84:32:33:23:c7:51:21:65:d2:57:5f:ec:af:97:c7:
8c:df:62:41:92:89:fb:46:ec:bb:2b:15:d3:4c:82:1a:d2:e4:
14:76:c0:fe:52:ee:de:61:4e:6b:ba:ff:7b:19:33:b6:a1:d6:
59:97:37:44:68:6f:00:33:01:f3:52:bd:0a:13:6d:f8:9a:e1:
da:aa:7d:1a:3f:19:a3:b9:f6:29:96:3f:03:68:45:8d:04:04:
48:41:0e:af:a3:cb:fb:db:1c:11:8d:b0:af:b8:b0:5e:dc:b7:
1f:1c:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:45 2025 by rpki-client