Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File: UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier: gOrAxb+1rAhBdaOl7x8oEcoS1TluZGGl5zO1xbEreis=
Subject key identifier: 07:08:17:FB:F9:A6:0C:0E:AF:33:85:67:66:D1:6B:76:6F:68:F5:2F
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 0195E0467D8D7DE997067D04D52E2B850A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number: 137F
Signing time: Sat 29 Mar 2025 05:01:10 +0000
Manifest this update: Sat 29 Mar 2025 05:01:10 +0000
Manifest next update: Sun 30 Mar 2025 05:01:10 +0000
Files and hashes: 1: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: vp4RizLqJGRLugVKJJEp2ZosvQL33WmPlww4EOV7+4o=)
2: g55b--8xGOqoYXLjLnaTyHnX4ok.roa (hash: t4ttlEmgTzHuBKLqIKA24lhz9Va1EpEHdAWptFncJVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:7d:8d:7d:e9:97:06:7d:04:d5:2e:2b:85:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Mar 29 05:01:10 2025 GMT
Not After : Mar 30 05:01:10 2025 GMT
Subject: CN=070817fbf9a60c0eaf33856766d16b766f68f52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:6d:1d:ce:02:36:9c:02:da:09:b4:cf:b5:
d9:9a:b5:0b:97:d5:1c:f6:73:8e:05:07:ff:5e:0f:
74:89:c2:0f:ee:20:ec:c8:02:47:53:71:46:26:65:
a0:11:c5:9a:6f:fa:44:f8:cb:1a:5b:ff:c5:3f:c3:
14:d3:84:18:5e:87:0d:9e:88:e4:57:02:30:4c:a1:
ab:83:f4:c7:9a:6c:96:81:a5:5c:e2:10:f1:97:85:
ad:61:78:c8:38:82:1a:fd:3f:db:34:7f:d1:99:a9:
04:b4:c3:81:29:6c:c8:db:d1:30:52:2d:49:64:1b:
1c:8a:8b:fc:70:a4:fb:37:ff:eb:b9:61:75:8d:d9:
9e:eb:26:f6:07:c4:10:87:10:58:8f:aa:5b:d4:c6:
51:f4:a8:89:26:98:07:ea:fd:76:d5:55:e7:f8:af:
ba:2e:19:0b:82:ff:90:22:3e:18:7f:18:6d:24:b0:
61:ff:1f:3b:8d:53:fc:7d:d5:9d:ec:1f:51:6c:ea:
92:c7:3c:f6:57:7d:aa:31:e8:61:8b:92:ed:50:c9:
43:dd:ad:63:33:78:a2:5a:65:44:47:4d:ed:51:9f:
0c:02:25:c5:6c:74:c4:5c:69:d0:40:d5:08:5f:2a:
a9:3a:8b:8f:10:de:f8:12:22:99:86:eb:01:79:72:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:17:FB:F9:A6:0C:0E:AF:33:85:67:66:D1:6B:76:6F:68:F5:2F
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e6:85:7d:ed:66:5b:18:08:97:1e:09:a0:9b:00:29:ba:bc:
e9:6c:9a:44:cf:95:99:01:71:a6:9d:dd:48:5f:d3:d2:db:3d:
ac:ec:f7:5c:23:e9:9f:bc:87:d3:4e:5a:b7:b6:ec:2f:1f:7c:
f2:b6:d7:9d:d8:96:a3:b5:30:b2:93:02:f5:88:68:4b:16:c1:
ef:b8:f9:6d:f6:2f:b2:78:5d:bf:5c:d5:37:9c:69:9f:5c:12:
7b:f4:1d:83:a5:e4:64:fb:b7:39:61:6f:78:0b:07:cb:93:86:
85:39:47:87:3f:e9:fc:26:88:05:e6:87:d8:f1:60:4b:7b:13:
e7:e1:86:26:d4:a5:1b:b2:a5:29:ca:2e:fe:de:ea:9e:cf:d2:
42:2f:f6:38:8f:a6:4d:02:86:cd:c9:99:35:0f:55:a2:d4:a5:
64:60:87:dd:43:81:4a:f4:2c:61:4c:73:bf:2f:67:90:af:d5:
7c:15:3d:8f:a4:84:da:7d:4a:99:24:b6:26:d2:17:f5:33:dc:
e8:68:54:35:3f:e8:fd:34:52:16:e3:da:c8:17:5e:8b:5f:14:
3b:1d:bf:9b:21:01:5b:96:b8:df:1c:44:74:c7:1b:d1:89:35:
92:64:01:82:76:9b:1a:f9:7d:4d:23:cf:10:ea:c3:69:98:73:
65:65:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:20 2025 by rpki-client