Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
File: Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft (raw, json)
Hash identifier: g96ZTEWt0dq5wjfGvA1EKUUNDgpP2xjiP3bnaUvbq0I=
Subject key identifier: 8D:16:05:1A:76:77:82:F8:2D:47:C8:F5:20:C8:84:21:39:70:E1:C5
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial: 0194BD179E9CE33896764B6AA17E44F53344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
Manifest number: 0FEC
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl (hash: rzrhC8lyMCgsEW3Wl3XqebOmSvqgXB1lCI8GfFIl/sw=)
2: xBgAFkKx8Hk3olxaNjWis5mQn98.roa (hash: P1KCvzISYpUAfpvA/Q/kzEUy3tIPC4wJ6UjU3FGpTJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9e:9c:e3:38:96:76:4b:6a:a1:7e:44:f5:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=8d16051a767782f82d47c8f520c884213970e1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:24:e6:2d:26:06:35:26:3b:77:84:a5:be:
df:01:da:d5:c0:68:b8:1c:e8:f2:f1:76:c0:e0:6d:
fa:45:cf:3a:13:fc:e6:8b:7f:6d:60:45:99:1b:e2:
2d:8e:06:c4:5c:22:ed:36:ba:ac:b0:58:6d:5b:a9:
7a:fc:2a:a0:7c:a3:c8:0b:8f:71:c6:78:a2:6e:85:
15:9c:ea:6c:12:62:b7:f6:4e:e5:a4:29:ff:d9:f6:
f1:2a:85:a6:b1:a4:c2:72:c9:01:a9:e9:3b:25:a1:
36:a6:a0:4a:3e:89:4d:d2:f7:2d:a6:6f:38:ce:64:
a9:a6:3c:55:da:a8:32:ac:fb:d3:1d:41:6f:30:b3:
29:bc:33:4b:65:19:ad:95:96:17:9f:c7:d0:50:07:
b6:87:c2:82:a1:06:dc:e6:57:82:46:22:da:61:06:
2d:6d:d5:02:15:09:59:f3:61:e1:30:a3:5b:b3:38:
b1:20:49:97:8c:e2:2a:b7:20:c3:45:58:8a:ec:7e:
e7:92:9c:d0:18:e9:55:86:62:8f:ae:a4:da:c0:9b:
5d:d8:a6:bd:22:bf:a8:f3:dc:de:a3:41:dc:93:b3:
0c:33:34:9f:19:12:1c:e5:5a:c5:ae:6a:68:95:f8:
bb:26:59:bd:ab:21:0b:53:fc:d1:eb:d6:5e:72:a4:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:05:1A:76:77:82:F8:2D:47:C8:F5:20:C8:84:21:39:70:E1:C5
X509v3 Authority Key Identifier:
keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:4b:43:73:a9:e1:8e:bd:15:49:c7:54:9b:68:fc:63:33:
f0:49:78:bf:4a:db:25:35:2b:2a:1e:0c:0a:fb:59:32:9f:fe:
40:23:7d:3e:cf:d1:71:de:70:f5:6b:94:4e:72:2c:01:a8:79:
c2:ac:26:bd:7b:69:4f:6c:7d:ea:25:8b:29:9d:c2:b6:bf:c2:
4f:f5:20:73:3b:06:e9:7c:4a:cb:2e:c4:54:bd:a6:83:c1:cd:
25:3f:bb:96:b0:32:8d:43:96:ca:68:24:b9:ec:15:f8:2c:42:
91:48:a0:f1:51:a2:7f:b6:12:02:32:7d:c9:c9:5b:de:55:90:
6e:5f:91:82:88:1a:90:39:41:b8:2c:13:bd:4e:f8:66:61:d5:
95:30:0a:df:2d:7e:60:83:45:f6:50:84:43:5f:69:3f:40:e2:
0f:2c:2f:fb:ac:71:f9:24:57:d4:01:b8:21:a3:d7:3e:9c:8c:
4d:20:ba:42:9d:55:35:a9:55:c0:a6:07:4a:ef:1e:a6:ca:24:
89:37:af:ea:e7:61:e0:f9:62:bf:17:6f:5d:e8:c7:e3:31:3a:
a7:76:d2:31:93:f1:4d:53:52:0c:28:8a:e9:a7:67:7f:9f:ce:
7f:05:18:30:d7:2c:c4:2b:c1:77:f4:ee:b5:8f:7e:e2:e0:74:
7f:12:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client