Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: c76Rs+sjgPcPe7ObE//DlJhC0OxH8rU5I9biFpr3rm8=
Subject key identifier: A4:B5:61:61:34:8D:EA:31:B7:E2:97:A9:F2:F0:82:23:91:72:12:37
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 0194BBCE38AB6285249791B2E1F90636AED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 035D
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: wC+9PUbJXdIwEHwPFYTL6lcvx8QwX4DArycJ0miLYAs=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:ab:62:85:24:97:91:b2:e1:f9:06:36:ae:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=a4b56161348dea31b7e297a9f2f0822391721237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:ff:0f:bd:b4:eb:ea:3b:8b:da:4d:31:98:
94:f2:ad:e3:7c:b7:90:4a:99:42:7f:7e:47:74:c3:
00:d2:78:f2:e7:b2:be:fb:7f:54:ff:ed:5e:32:17:
68:35:c6:c0:c8:b0:7e:e6:a7:51:7e:71:42:c4:3c:
e4:83:9d:42:e7:00:b2:0b:e5:75:96:42:72:fe:96:
0f:aa:a1:1f:84:e8:0e:e4:fd:85:90:ff:47:db:5a:
87:2e:75:9c:df:69:69:9d:5c:22:84:ba:81:37:e3:
5c:0b:61:3f:4e:c0:bd:a1:bc:39:bc:15:69:5f:07:
62:9f:1c:8d:6b:cb:59:25:cf:e9:0b:df:03:36:57:
1f:09:03:db:67:e5:75:6f:d6:ba:8a:9d:8e:64:cb:
20:78:4d:f1:6e:b4:d8:f5:a4:d7:cf:78:03:de:69:
9d:4a:6b:76:93:a7:80:4c:61:de:fc:00:90:7e:ff:
0d:c5:85:b0:60:c7:3a:db:c0:83:68:65:c1:f8:1e:
99:ec:92:6b:d7:0d:e6:a5:79:21:78:b5:76:b6:46:
78:1b:62:de:99:cd:a3:5c:bd:9e:8b:e9:6d:3e:dc:
7d:bc:23:67:61:b3:45:73:af:d8:51:24:83:88:7b:
ff:fe:79:04:ac:2d:e9:e3:e1:bf:b9:79:77:dc:ac:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:61:61:34:8D:EA:31:B7:E2:97:A9:F2:F0:82:23:91:72:12:37
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:61:44:2a:da:e5:81:b8:94:ca:38:d4:b3:c8:43:00:8f:
37:8a:d0:b6:e7:32:0d:84:b4:4a:38:b0:10:cf:49:02:94:ac:
8b:14:d5:12:55:18:c2:35:2a:70:ef:5c:97:da:99:18:06:99:
66:47:10:43:4a:77:08:20:7b:97:8e:bd:83:fd:78:79:ba:3a:
43:53:33:0f:22:cf:05:59:68:db:d6:65:d2:bc:d7:77:56:a9:
ec:e3:10:05:17:53:af:a7:9c:ed:37:d6:71:44:f8:8d:46:de:
f0:73:b8:5b:05:84:79:a5:93:14:27:67:97:ec:4c:bb:3a:f1:
45:4b:07:5c:3d:be:7b:13:bc:b6:95:be:16:14:4a:5c:c7:b2:
3e:01:80:65:a3:3a:94:d6:f1:84:c6:aa:86:48:1d:33:0e:a4:
43:38:3c:f1:98:13:ff:94:81:2a:24:b4:43:87:b1:72:ca:91:
ac:da:24:c0:18:79:db:bf:f2:83:90:26:71:2f:fd:5b:f0:40:
f1:ca:7a:75:9c:05:73:54:2a:a0:f0:a8:23:b0:31:b5:38:6d:
ae:3c:48:9c:26:1b:61:e5:35:17:57:c8:26:7c:85:6f:11:ab:
33:e6:45:22:79:02:52:72:08:f0:36:d3:be:cb:67:1c:54:25:
b9:a2:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:09 2025 by rpki-client