Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: PUUflb6fFUA8XL7AlsK7E6UI88OStr4k/5cE0iy51Fs=
Subject key identifier: 77:DC:95:19:C4:8E:3F:2C:75:03:40:DE:B5:1F:99:7C:4D:F4:FF:7C
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 0194BC3BCA70500C996E5AC5E48DDFEF4D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 040D
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: HoEt4y6zf8w5L0OHd11vl-inukI.roa (hash: 470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: JsMtj8eKCcuHmk8RJMz5b1gxPiOOZ3GuAd9gxxz9+rc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ca:70:50:0c:99:6e:5a:c5:e4:8d:df:ef:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=77dc9519c48e3f2c750340deb51f997c4df4ff7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a4:2d:eb:1a:66:c5:6e:c6:51:72:17:12:16:
93:b5:43:54:82:b3:0e:46:97:4c:b2:7a:ce:48:6a:
e2:f8:aa:6c:16:8b:bf:d6:a6:37:1b:10:5d:e3:a5:
dc:3f:ff:16:48:17:02:e0:b4:02:f9:5a:96:c9:41:
c9:c3:95:1b:3f:93:aa:35:bb:18:a1:cf:af:9f:e8:
aa:fa:77:26:e8:03:57:28:a3:3d:32:56:ec:40:d2:
4b:46:d3:bb:02:95:08:f6:2e:08:10:80:10:1d:d4:
ed:8d:6b:fd:10:39:8c:11:9b:ad:4e:b9:79:a5:f1:
ed:79:02:75:6b:28:95:be:02:bc:17:f8:bd:6e:87:
04:ee:ba:93:9d:bb:b6:42:08:73:ec:ef:14:3b:57:
2d:a1:94:93:cc:6f:9a:c6:91:e2:3b:8b:fd:2f:99:
de:9a:2d:b7:ee:69:c0:90:af:ac:d7:83:ca:29:d8:
46:7e:0f:3f:04:1d:7f:f5:6b:7c:65:a1:58:4b:47:
f4:85:9f:11:06:22:61:9d:36:25:72:11:d7:87:38:
e1:78:8a:07:14:3d:d2:b3:d0:90:bf:82:12:80:dd:
1a:ca:86:bc:42:c6:f9:62:33:06:a6:d8:61:b2:ff:
31:17:99:24:07:ae:cf:bf:99:7a:2b:2b:d4:3e:b2:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:95:19:C4:8E:3F:2C:75:03:40:DE:B5:1F:99:7C:4D:F4:FF:7C
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:90:50:40:43:dc:a0:83:51:7f:b4:e3:2d:96:db:95:cb:63:
a4:a1:19:70:6c:95:6d:a1:7d:c6:a0:75:a6:93:27:38:47:d4:
69:92:c3:2c:b5:26:f7:3e:35:4f:a8:38:37:0f:e6:88:7b:d6:
4a:9f:d4:c8:44:b9:cb:f1:b3:86:17:ad:ab:21:e8:c2:49:da:
b5:9a:e1:66:7c:56:c4:08:5f:9f:b6:c0:f2:2b:7a:89:34:a4:
e3:3a:b9:47:fa:66:c1:b8:11:74:f2:80:fa:81:c0:4c:57:5f:
08:a1:d8:91:98:0c:6d:1d:0f:09:41:8c:12:b6:fc:8c:c8:cb:
40:89:eb:1f:81:85:20:9c:c7:7a:f8:7f:ee:93:b5:80:3d:f4:
e5:8c:6f:d3:f6:88:90:f5:1c:6d:1b:a4:85:26:25:f2:39:bb:
6e:c9:be:1f:a2:c3:67:1c:cf:2d:52:70:1b:0d:0b:52:f5:06:
82:3d:45:d7:e7:37:99:68:bc:72:1a:b9:18:92:45:3c:a9:90:
d0:3a:da:64:48:93:ab:21:fa:c9:6b:8d:86:08:37:0f:4e:21:
b5:fe:fa:85:8d:e8:f8:c1:a1:97:31:9c:1f:4c:44:de:17:12:
ec:7c:8c:1f:f4:03:56:c1:82:87:38:39:91:d0:9e:54:57:cb:
d3:55:01:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:19 2025 by rpki-client