Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: 8LH8JXW/Fktfw7ctkanipmaPUTKtERPzHiHc7KCV+1s=
Subject key identifier: 2C:FC:34:2F:05:5D:5A:A1:C4:FE:30:AC:99:4D:19:4C:D3:E8:00:55
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 0194BD855BBD80E2A23F1538EC1DA9D7E0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0C59
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: Whxvh9juSzHsmAejtcjICbKgI40QFwH2IbBqYqdiqIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5b:bd:80:e2:a2:3f:15:38:ec:1d:a9:d7:e0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=2cfc342f055d5aa1c4fe30ac994d194cd3e80055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:d9:22:07:50:33:6c:b3:0e:f4:5e:9b:45:
f7:75:a6:77:15:6c:47:37:18:a7:b2:4b:66:c0:a3:
43:08:cd:4f:72:64:77:22:45:72:06:b4:80:3a:d5:
38:29:5f:6b:c0:78:28:f8:29:8b:de:7b:37:c1:82:
db:3c:af:19:e8:6a:39:ee:15:a3:05:ee:20:c8:ef:
cf:ac:21:eb:26:42:65:9e:f9:5f:b7:dd:87:09:3b:
47:db:45:ea:a7:81:0a:3a:28:ea:a3:56:91:f9:dd:
c7:e5:ae:88:cb:32:ee:27:28:b1:f9:e0:3a:c2:69:
b9:21:66:07:7c:46:df:56:5b:51:86:76:03:42:9b:
8f:90:c9:27:c2:ac:40:dd:7d:d5:a2:85:7b:55:bc:
46:fb:b4:f5:e0:a3:f4:2d:e7:f5:02:68:2e:f6:b4:
54:3f:3f:02:b1:b5:96:b3:d6:51:cf:fa:0f:37:2f:
e8:2c:ec:41:e5:c5:99:c1:e8:85:67:37:b8:19:82:
78:d9:f1:9d:19:63:f9:ea:33:a9:4a:5f:80:f2:59:
64:d2:b1:dd:f0:90:81:81:8f:99:6a:1e:55:c2:0f:
e5:48:1c:8f:0b:ac:1e:06:90:ac:1d:e7:ea:29:1c:
6c:d3:8a:2d:15:b6:b5:ff:cd:a4:c6:97:f5:09:57:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FC:34:2F:05:5D:5A:A1:C4:FE:30:AC:99:4D:19:4C:D3:E8:00:55
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:81:36:72:d5:fa:79:86:05:49:5e:0d:ae:a5:82:64:64:b2:
0c:5a:d4:7c:bf:fe:67:e9:69:46:36:12:c2:30:98:22:92:39:
b4:ef:73:46:ae:6f:f6:99:39:f8:ca:58:66:7a:0a:61:a7:80:
1f:a3:6b:1b:11:44:f8:ee:9b:9f:8b:2a:7a:c9:9a:5d:e4:44:
95:0c:29:fe:d4:77:4d:2b:ea:01:ff:26:4c:ee:c8:ae:a3:77:
b1:9a:ed:a0:4a:aa:70:94:d3:43:8f:c8:37:67:ad:64:db:d4:
f2:6c:69:d1:cb:c2:a7:cf:0a:42:21:b2:e0:37:84:46:41:ca:
b7:01:cd:88:44:05:f4:44:ea:26:8f:8f:ce:d2:8b:2b:ee:dc:
d8:c4:21:31:aa:35:96:64:21:a2:63:18:60:df:c4:19:cb:e1:
d4:da:0b:dd:9b:01:fb:60:df:73:29:b0:fa:e8:cf:49:c1:cc:
18:a1:04:90:15:1b:55:74:2c:bf:01:55:c7:47:03:7d:70:55:
9f:a6:1a:54:a6:4f:30:46:20:89:1f:be:77:00:53:a5:26:25:
24:29:e7:ab:e4:00:7d:f6:28:c0:2a:3d:84:fb:54:1a:4e:a4:
5c:3e:b5:0d:bb:5f:0f:26:57:7a:fa:7a:22:16:e9:5c:79:ef:
66:01:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:58 2025 by rpki-client