Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: e+xhsp6JP8RPkxtNan0ka3rmvAxggeIZuRur+zegckc=
Subject key identifier: BF:2C:25:D7:4A:C4:DD:F6:FA:58:C9:CB:DC:4E:8F:54:07:25:12:7D
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 0194BCE08913D48F4CB292F088F32EF9F71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0ABA
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: OTZOcmOz14KGirI8QwFh5EeLiTdL+XVmbuOd+3UYKYk=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:13:d4:8f:4c:b2:92:f0:88:f3:2e:f9:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=bf2c25d74ac4ddf6fa58c9cbdc4e8f540725127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:1e:ef:95:41:fd:00:bb:23:a6:0e:86:47:
ba:f5:1b:35:c1:e2:44:5c:48:04:e5:27:14:1a:6f:
11:51:64:8a:4a:19:70:cb:47:c2:90:94:f0:8c:a6:
b2:78:b6:07:3c:1b:2d:2a:51:59:14:83:66:9a:40:
ff:63:65:da:16:9d:cb:c4:ae:81:97:b0:0a:99:a0:
0c:4a:b9:24:30:2c:9a:d4:d4:75:79:2d:ec:a0:78:
32:f4:1c:02:30:e4:94:7e:7a:65:53:80:0c:8e:90:
33:40:26:4c:77:bb:58:05:3d:ef:95:da:ab:2d:b3:
e5:18:8b:ca:eb:be:4a:6c:63:5b:c6:0f:0c:f5:69:
48:83:b1:3d:df:0b:ce:72:f8:87:77:50:63:4a:b5:
09:e6:15:cc:9b:67:d5:29:a3:6a:08:c7:45:be:2e:
b2:83:ea:47:85:f0:b4:e1:a9:bf:a4:a9:c1:8a:75:
69:2e:9e:7a:19:6a:54:53:95:4d:32:a0:f8:4a:57:
bd:a2:89:4e:31:59:be:26:f5:ef:98:15:12:9e:9c:
a7:32:9e:12:c4:a2:2f:a5:b9:47:a1:9c:f5:62:d9:
96:df:c3:d9:3a:0a:ad:af:bf:18:81:a4:49:37:92:
fe:69:81:01:cd:e9:24:f7:b7:67:5e:4a:07:41:8e:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:25:D7:4A:C4:DD:F6:FA:58:C9:CB:DC:4E:8F:54:07:25:12:7D
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d7:2d:d1:f6:85:e2:43:ed:b4:8e:18:86:8f:2b:19:05:2c:
61:fc:46:3d:66:a9:7e:c3:b7:79:d3:17:5f:a1:7d:4e:18:3e:
bd:1b:e2:6f:d4:aa:b8:74:20:e6:4c:da:28:47:4e:dc:76:2c:
fe:d7:d1:da:ca:2e:b2:4d:1a:5d:1a:39:39:e7:8f:18:0d:9c:
71:b5:02:d8:a2:a7:2f:ef:94:c1:12:dc:2b:d1:03:77:9a:86:
f6:56:3e:91:c6:68:e2:11:50:e0:99:63:dc:93:eb:e1:66:62:
fc:b3:7e:aa:95:91:f6:6b:98:95:b8:c5:11:05:af:19:f2:c9:
b2:d1:63:d9:c9:f2:87:e4:02:d5:00:38:af:dd:5a:df:4b:b5:
3d:23:e9:2a:b8:37:fa:3b:27:f4:53:d8:82:cb:80:31:62:22:
fa:ed:a3:7d:b5:63:ee:40:04:85:fc:5d:e7:a9:0c:b8:bb:3a:
5b:9a:13:2a:b3:36:a6:63:f4:3a:94:38:f5:7f:d4:34:86:2d:
5f:dd:7a:cb:1f:93:16:cf:ab:b1:67:e4:34:80:46:50:72:06:
cd:63:23:eb:5a:35:ee:94:6e:41:9d:93:19:fe:92:4f:df:31:
cc:56:b0:14:da:e6:5e:dd:43:d1:63:9b:f0:e9:47:14:b4:64:
ab:01:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:26 2025 by rpki-client