Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: 8y5GgPQTwzqjji9zkDtkY0HIu0brXfcofy+XRtLEcMM=
Subject key identifier: 27:F9:29:D4:51:DD:59:49:79:78:47:31:56:62:DD:23:A7:42:7C:90
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 0194BD4E6709EBC92BBDA360509D8A66C8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 0EF5
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: QyVmmka0lFz4l6NZ24xl5k/kqY6va80tzbX/vpCSG7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:67:09:eb:c9:2b:bd:a3:60:50:9d:8a:66:c8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=27f929d451dd5949797847315662dd23a7427c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:b5:72:06:6d:cf:bc:34:87:a5:e9:a9:da:
a5:48:08:67:1e:a8:ed:d8:25:56:c5:ae:84:d7:20:
3c:8c:23:11:98:e7:85:5f:a4:6d:0d:96:a2:b3:e2:
8c:37:a4:69:de:32:0b:e5:a8:bc:85:e4:3f:91:a5:
11:c4:3f:1f:3c:38:c6:d5:2a:89:5b:4b:85:e2:41:
7d:29:8c:4f:35:46:26:36:31:b9:cc:dd:bb:57:0f:
be:70:5b:e7:7c:ae:b5:27:a1:e5:79:fb:06:20:8b:
d9:b7:81:6a:60:3c:58:c5:6c:e3:5a:98:52:87:c3:
e1:f8:71:8e:53:b5:8b:5f:74:a0:a3:6e:93:a2:27:
23:e7:86:1b:5d:cb:7e:42:39:58:13:4a:c7:28:8b:
ef:0d:9f:80:74:25:d5:10:e7:a0:d1:4e:7a:fe:0a:
d4:48:2f:65:ad:fe:fb:00:3e:dc:03:26:6c:06:da:
8e:9a:8a:54:65:cb:cc:0d:5f:c2:98:eb:e6:f6:51:
56:ba:a0:7c:7c:0f:b9:a3:73:19:95:df:4f:9e:e3:
64:3a:d2:4c:c5:dd:78:fc:41:04:45:bf:dd:b1:7c:
98:a2:40:1b:e8:6e:6e:91:77:d6:c8:e2:fc:56:e0:
35:f5:40:b7:b4:2a:23:ba:94:be:e3:93:f9:e1:ef:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:29:D4:51:DD:59:49:79:78:47:31:56:62:DD:23:A7:42:7C:90
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ac:78:3b:90:f9:49:5c:14:93:90:f6:85:e2:c0:0c:80:e9:
e9:f2:63:a7:2d:93:dd:54:67:bf:fb:e3:8d:89:88:b4:9b:7e:
88:26:77:1a:7f:cb:2d:8d:2e:a4:84:76:81:86:d4:c1:e4:a5:
c0:16:29:38:8d:78:c0:ab:0b:41:99:db:81:1c:f2:be:e6:b9:
79:ae:85:57:34:e4:7b:98:37:02:58:b9:40:3d:cb:46:93:3b:
1a:96:67:64:29:66:31:57:be:3f:c7:06:e0:7a:21:07:39:40:
7c:fa:ce:0b:26:47:23:91:59:ad:20:3c:ed:e7:f5:40:22:d5:
d5:0f:e0:21:a9:e8:94:ed:1c:1f:6d:ae:71:10:24:8a:92:89:
22:68:b5:49:ce:97:5e:c1:f3:fe:87:e2:9e:29:13:a1:e5:b6:
dd:0f:9b:e8:31:79:e0:89:e1:40:3e:23:69:46:b9:1b:ad:35:
56:44:f0:de:d2:bd:6d:20:ba:20:44:ea:da:0d:f0:0d:b1:03:
c5:6b:ee:5d:51:ad:d3:8e:1b:d7:d4:1d:01:81:d3:80:fb:22:
18:ed:dc:7e:73:85:8e:a0:dc:23:33:15:51:a0:62:41:4d:f6:
45:e7:19:ac:4d:ae:e2:ea:3e:cd:2f:38:48:cb:d2:97:fa:4a:
23:a8:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:51 2025 by rpki-client