Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: WOBUrxBqjdTfjQoy0X3pJqWBjco43Kp9CjDQws/L5g8=
Subject key identifier: F8:DD:E9:15:54:70:E4:39:44:62:40:73:7B:90:08:D5:C2:27:5C:34
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 0194BC04E7830F39451A3F865C432B3D5FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 111B
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: wZKzlZ7caFpNIfZh9dyWHOLqi6a29AuVKDIYeBIuc6A=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:83:0f:39:45:1a:3f:86:5c:43:2b:3d:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=f8dde9155470e439446240737b9008d5c2275c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:1b:64:19:c7:ee:9a:81:96:38:2d:b1:62:
f2:4f:78:5e:0b:20:d6:ce:2a:23:71:21:9d:67:e1:
9f:db:8e:25:b4:93:85:73:89:38:08:58:f6:36:1d:
d1:d6:bd:b3:7d:88:5c:41:83:15:03:7d:41:18:6c:
9d:b0:1c:6a:df:3d:58:53:dd:2b:89:3b:49:93:e1:
65:20:5e:eb:97:00:d8:5d:86:02:75:32:89:15:cd:
d7:f4:2d:bd:0f:ad:19:7f:c5:cc:08:8b:be:8b:58:
b7:b4:bd:38:1e:b7:16:45:00:3f:71:8e:98:8e:d3:
d0:23:ab:45:88:c4:f3:11:dd:9c:4a:30:43:78:8c:
2d:44:50:8a:09:bc:a4:d6:ee:fc:04:27:c5:b3:ad:
2e:18:2b:30:2d:1a:35:cb:fe:8e:bf:83:de:c3:64:
1d:90:ef:92:5c:fa:30:3c:3d:f0:ae:30:3c:42:48:
13:27:49:92:83:42:1b:d8:57:c4:26:3e:a9:13:37:
b8:93:85:5c:09:82:15:e0:3e:03:6c:c1:23:42:e3:
3b:a2:7c:64:29:51:33:d8:de:3c:62:c4:43:f8:bd:
e5:ec:01:44:dc:b1:2c:5b:44:f8:03:73:59:59:8e:
fb:4d:19:a2:3f:f1:ad:d2:44:1a:dd:17:51:cd:50:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:E9:15:54:70:E4:39:44:62:40:73:7B:90:08:D5:C2:27:5C:34
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:74:3c:ab:06:b9:ab:60:9d:b9:d1:27:f1:90:3f:03:5f:07:
c5:52:a9:08:45:4b:1a:87:2b:57:bc:0d:2e:eb:92:c5:8f:58:
bf:1b:f4:1d:5e:d3:13:9c:ff:78:5c:2f:c7:af:b4:d1:27:44:
dd:ab:af:92:3f:8b:f2:40:f4:1f:90:5c:46:e1:ae:84:a2:f3:
fc:75:66:48:01:66:f3:b9:01:bb:e6:0d:5a:e6:21:89:6d:1b:
60:1a:4b:30:bb:df:e0:86:d0:1c:8d:5b:34:04:aa:90:55:89:
86:6f:70:21:30:9e:3c:f9:79:77:70:f3:03:f4:d6:0c:85:8b:
f7:80:c6:8f:f6:0f:2d:96:64:34:c8:4f:ff:7a:48:d8:f3:6f:
96:83:2c:a3:71:b1:5d:e3:d4:00:7d:15:e0:cf:96:c0:f2:ea:
d6:26:7b:4a:f7:98:7f:7b:b9:54:c5:13:1a:da:98:94:27:7c:
2e:92:f8:1a:f4:d2:94:52:47:ac:7c:c4:2f:21:6d:c5:aa:51:
da:ca:51:bf:99:2b:4e:a1:5d:26:eb:80:8d:33:0d:0f:1e:32:
57:db:c9:28:ed:6d:33:19:5f:ad:bb:90:1b:f9:51:e0:32:dd:
98:b8:a1:6e:9a:69:7c:af:3a:5c:db:5a:5b:5b:31:7e:d8:37:
cf:d8:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:00 2025 by rpki-client