Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
File: U7QvfyECVOpHKsdVoWRyxS78KpI.mft (raw, json)
Hash identifier: PRCz2wOTSRNiuN1JJ2bL4ok8kVJ7WJScn9x1f0FG4n8=
Subject key identifier: 59:F9:30:74:BD:10:E6:69:BA:38:79:A6:77:0C:EE:3D:2D:3D:EC:9D
Authority key identifier: 53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
Certificate issuer: /CN=53b42f7f210254ea472ac755a16472c52efc2a92
Certificate serial: 01957E369537E73FBF20021EF9CDC11529F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
Manifest number: 0437
Signing time: Mon 10 Mar 2025 04:01:01 +0000
Manifest this update: Mon 10 Mar 2025 04:01:01 +0000
Manifest next update: Tue 11 Mar 2025 04:01:01 +0000
Files and hashes: 1: U7QvfyECVOpHKsdVoWRyxS78KpI.crl (hash: bWTo454gDI9w9Foxglpc8o5Qw0IOHMxqbkfI4T6vYxM=)
2: r24bse_L4kY_MIGYIsXFnBpXBhM.roa (hash: 9NX6gBMNVMar3wVhlUY4teM7U08gktRboOUltFiq9DY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:36:95:37:e7:3f:bf:20:02:1e:f9:cd:c1:15:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b42f7f210254ea472ac755a16472c52efc2a92
Validity
Not Before: Mar 10 04:01:01 2025 GMT
Not After : Mar 11 04:01:01 2025 GMT
Subject: CN=59f93074bd10e669ba3879a6770cee3d2d3dec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:4a:a5:8d:54:13:8d:13:1d:61:13:11:a5:
84:6e:2c:6f:ad:d7:01:7c:66:b1:65:46:a1:72:fa:
c4:54:7f:32:aa:e7:f5:49:fe:ba:41:44:77:63:8b:
1c:8e:f1:ed:a9:9b:92:5e:74:67:cc:14:1f:5d:b5:
67:37:97:17:71:e8:34:8b:6c:9d:4e:45:dd:64:e9:
ec:c3:6c:3b:50:27:20:8e:33:e2:65:75:5f:1c:ad:
78:3d:ea:d9:ee:ce:11:96:43:63:1d:cb:45:10:04:
10:5a:b7:00:3e:8e:08:14:36:05:d0:4b:7d:01:9c:
56:e2:e2:30:aa:40:06:cb:e8:c5:89:0e:56:05:8b:
0e:8c:94:7a:f5:e7:2d:4c:36:e9:cf:1e:57:2f:30:
d3:1c:4c:32:7b:a9:71:30:f5:f0:32:ef:71:de:0a:
94:1b:d3:39:0b:32:39:ad:bd:ee:37:78:5f:f5:fd:
de:3f:a5:cb:4b:53:9a:b2:bf:c5:64:9e:de:d2:14:
f4:bd:e3:56:1c:26:34:e1:68:85:bb:39:e8:4d:96:
39:69:f6:c8:fa:f0:c5:2f:71:a7:73:a3:de:16:5c:
49:ef:5a:94:0a:95:f5:3f:17:80:71:fa:50:98:a7:
51:58:53:35:ac:ce:d9:3d:3f:cc:10:d7:82:ec:31:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F9:30:74:BD:10:E6:69:BA:38:79:A6:77:0C:EE:3D:2D:3D:EC:9D
X509v3 Authority Key Identifier:
keyid:53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:71:1c:c2:27:de:5d:63:5f:87:0e:86:ad:22:1d:87:e5:fe:
a8:fc:68:de:37:30:ed:4a:9c:23:fe:73:35:70:58:5b:5d:46:
dd:ab:06:2a:6d:0e:0a:2f:d0:bd:57:af:07:f7:94:a0:5a:20:
61:62:08:cd:f9:c2:30:11:b7:ad:ed:0e:b7:74:e9:94:f9:e3:
1e:45:af:9e:92:a1:1c:8f:87:e9:67:43:b5:9e:6f:85:8a:54:
f8:50:fa:ab:33:1f:1e:a4:ec:da:a8:7e:fe:74:8b:99:d6:82:
fc:b2:35:1b:7f:32:17:46:14:22:1c:29:0a:fb:1f:c0:62:75:
8d:5f:49:11:4b:fa:d2:ee:59:79:95:7b:1d:5f:6b:1a:ab:b6:
fe:4c:7f:6e:35:22:90:61:95:48:1f:45:81:dd:db:78:63:77:
a1:1b:28:32:52:d0:f8:2b:04:8f:c3:2d:1e:c4:7c:33:0b:a4:
e2:90:1f:cc:49:56:8f:8c:ff:f2:54:b8:36:8e:ae:d1:50:f0:
f7:35:2d:ff:19:ea:b1:d2:06:78:73:f0:7a:25:5a:57:68:9e:
aa:46:e6:42:62:30:de:6a:35:78:23:9c:aa:5b:9b:8b:8e:76:
15:80:4d:d6:a6:32:d5:8c:75:a3:a5:20:23:b4:06:30:87:3d:
df:5b:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:14:46 2025 by rpki-client