Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: o2IUkW9trnj7S3zVck2biQWy1vjtA71Fk/BLw8o69bM=
Subject key identifier: 14:B4:99:31:37:F0:BA:85:A4:7D:21:EA:AC:58:15:9B:6D:B9:B3:09
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 0194BC730A88395BC02386DD57EEA5B2C5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: mrZRDPzQeDRTjR9zODBCy7eti74KrsESOJrh6oGvgtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0a:88:39:5b:c0:23:86:dd:57:ee:a5:b2:c5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=14b4993137f0ba85a47d21eaac58159b6db9b309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:8e:cb:ab:d2:56:bf:9f:51:10:ce:57:3e:
41:2a:94:52:c2:5f:7d:76:aa:12:b1:72:ba:9e:ef:
3c:45:59:b0:3f:a1:5b:c6:d1:cf:3a:db:48:ba:3f:
52:69:c8:c6:3a:73:93:44:b4:11:49:0a:9e:a6:4f:
72:09:3a:fd:b2:2d:aa:42:42:fd:38:cc:51:1d:e3:
24:88:c4:60:d1:69:33:60:8c:7d:b5:ca:fe:ce:3c:
32:e2:82:de:4c:64:09:c4:34:3d:97:a2:94:47:52:
48:c2:43:46:b5:de:0a:05:d6:53:1b:fa:43:02:d9:
f5:f2:7a:ea:81:57:0c:8f:f7:82:df:cc:0f:12:00:
fd:1b:83:93:36:da:d4:48:c6:4f:a2:c2:23:c1:b0:
c4:f6:6e:6e:20:87:2f:54:a6:eb:61:94:ba:b3:86:
46:4d:7f:7c:3e:96:5f:4b:8e:0c:5b:d7:33:0a:56:
4f:44:8b:e5:e1:89:9e:b2:de:af:f5:6e:27:71:c0:
fc:1e:75:3d:60:48:39:b3:ec:76:8c:f1:a2:da:cc:
fe:19:3e:94:8f:b1:d5:27:8d:fe:cb:6c:58:eb:61:
a7:25:51:67:bb:70:0d:85:b5:c0:52:dd:a6:c8:e5:
57:bd:80:f9:cf:00:98:4e:fd:aa:ff:b2:a2:28:29:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B4:99:31:37:F0:BA:85:A4:7D:21:EA:AC:58:15:9B:6D:B9:B3:09
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b2:ad:8b:7c:9f:e7:34:32:a9:5a:ff:bf:ac:d8:f8:e8:76:
a3:72:dc:7d:fd:ae:3a:10:7b:a6:4a:3e:85:35:d7:f5:aa:ab:
2c:2b:53:0b:7d:8b:57:5a:bf:e0:c0:7b:4f:fa:fa:c9:0f:bb:
8b:fc:96:36:54:eb:85:52:95:7a:58:2e:4e:30:4d:79:9a:6c:
49:2e:8d:55:03:15:90:91:53:31:4a:e7:92:62:fb:2d:8a:76:
81:67:b5:74:45:c0:5f:9a:4b:11:ec:f3:9e:7f:ca:6f:c5:46:
76:df:a9:bf:83:1a:39:be:d3:bc:0e:0d:18:4a:6b:3d:24:81:
00:27:de:e3:d2:62:f2:03:e0:1a:0a:9f:8a:75:e3:d6:69:50:
2f:68:7d:32:13:78:38:5e:2b:ce:45:7f:f2:75:65:ab:fc:6d:
1d:ab:ed:29:50:80:ae:69:77:2b:d8:5d:92:df:10:27:aa:06:
a3:6a:54:3a:d5:2d:a2:c6:2e:fb:06:7c:90:a0:75:3f:4f:f0:
38:84:2a:cc:55:22:9e:0f:a3:e5:f8:53:a9:f0:a3:bd:58:c0:
fb:b5:c4:35:92:56:4c:9f:c1:9e:3c:d4:ca:9a:c8:8b:1a:5f:
48:14:86:1c:9e:42:4d:35:d3:df:56:06:f9:9a:ae:d6:ff:c7:
e2:13:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:30 2025 by rpki-client