Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: 1aBp10DfNtzxXvstwr/c8B0gxorsTXlcggYyoqsXVT0=
Subject key identifier: DF:0C:7C:67:93:4E:FC:0D:8C:78:B0:D7:49:39:41:A0:5A:0C:16:42
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 0194BC04A2C8270A88CABFD726326FB4C333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: l3mOrIGwRM34SZwTU7a+gA9Q8ZhAxgXY+LpTT23UvYY=)
2: vffye4B_maKGCuAE9ICWvmcHW6I.roa (hash: VaColu6D/X0DZ0KpxU1etnd04XXSodxmzmHPWI2Hjvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:c8:27:0a:88:ca:bf:d7:26:32:6f:b4:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=df0c7c67934efc0d8c78b0d7493941a05a0c1642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:f0:16:74:ad:24:74:f8:70:0b:9a:30:32:
22:4c:56:7e:b7:5b:b9:b8:fb:6e:21:bb:68:ea:00:
95:83:08:2a:b9:e4:a1:5c:d3:08:00:66:d2:3c:a7:
e4:84:4f:5a:9b:af:e7:30:45:15:07:e5:13:76:85:
11:67:b0:2c:e6:ca:aa:5a:66:c9:ee:bc:9d:49:a8:
ff:30:e7:40:f0:3b:ce:bf:a9:73:b2:56:e4:28:e1:
be:82:e4:ad:b6:eb:98:e0:03:a6:b4:69:ce:c0:66:
d0:d3:66:9a:4f:43:99:05:97:53:7d:1f:e5:1f:6e:
cd:e8:07:fa:db:7a:e9:3f:4d:ad:aa:6a:d9:b2:db:
2c:3d:07:e9:6b:87:a9:8d:93:86:39:e1:20:e7:45:
18:a2:f0:d4:31:e2:f3:cc:f3:df:de:06:fb:38:76:
82:de:15:f5:b2:67:e4:ac:52:3c:7f:5c:81:78:91:
31:82:5e:3d:7d:cb:19:a2:7d:66:df:13:48:b3:ed:
d7:e4:75:96:0f:bc:96:54:8b:27:03:e3:da:d6:ef:
92:3e:9f:15:db:81:67:61:1a:3c:f8:81:ce:63:96:
9b:1a:b6:6e:19:54:4f:6a:2e:e5:5a:7d:88:f3:53:
b2:5b:dc:ad:d6:5e:fe:11:13:05:d8:13:ca:42:42:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0C:7C:67:93:4E:FC:0D:8C:78:B0:D7:49:39:41:A0:5A:0C:16:42
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cc:8c:88:d4:2b:13:bf:10:e8:9f:f3:1e:20:da:5b:f6:fc:
e1:7b:5d:8c:57:af:37:83:6f:89:80:5d:c2:17:5e:37:6a:ed:
85:a0:be:b1:6b:65:9d:d8:a5:73:eb:a5:6a:69:c5:05:80:5e:
70:50:31:fb:87:b2:4a:e2:89:3c:e7:8f:5e:b6:b3:0b:07:64:
f6:53:e9:7b:68:89:a2:cc:8b:8f:19:2b:b3:84:ba:c6:1c:d1:
63:b0:c2:d6:22:af:cf:cf:17:80:d0:af:46:9e:1b:47:df:bc:
ed:cc:d4:02:23:8d:1a:d0:9e:69:eb:60:61:b2:6f:b6:92:fd:
ed:f5:24:22:2d:6b:84:a3:02:69:2f:0b:36:0d:42:f2:15:3c:
ac:9c:80:92:c4:73:9c:4a:ec:30:da:c7:8e:86:5f:11:ae:f1:
b4:6d:25:19:f1:5f:39:aa:09:6a:ae:78:fe:28:f7:19:6f:f7:
bc:91:a3:c0:d0:e8:64:bd:bd:20:b4:c3:ed:92:4d:65:de:73:
c7:b4:3b:72:e4:3b:0e:0d:45:f2:6f:96:fc:54:48:f7:f7:0e:
3e:84:3e:94:c1:7f:b6:47:4c:b1:6a:eb:6b:09:e5:ed:c6:70:
1d:bb:fb:39:5a:8e:b8:97:49:27:ab:51:71:4f:ac:b0:86:ad:
a7:a4:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client