Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: Cpt7wHSJTjAuDkrM7r1Z3W8OEAZkH4C37cLrl2zMt3w=
Subject key identifier: 74:BE:C5:8F:BB:E0:DE:BC:4D:22:EF:A8:5F:12:91:A3:E4:29:A5:8D
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0195E04652C9948E7C89AD551FE80937C430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0320
Signing time: Sat 29 Mar 2025 05:00:59 +0000
Manifest this update: Sat 29 Mar 2025 05:00:59 +0000
Manifest next update: Sun 30 Mar 2025 05:00:59 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 5IXBFqOflRs8zst5EX7ZDFTUhagHHLR69vupzRwpCZo=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:52:c9:94:8e:7c:89:ad:55:1f:e8:09:37:c4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Mar 29 05:00:59 2025 GMT
Not After : Mar 30 05:00:59 2025 GMT
Subject: CN=74bec58fbbe0debc4d22efa85f1291a3e429a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0e:b9:b4:14:18:bf:cf:83:4c:f9:5c:9b:c9:
a0:94:69:d4:2f:80:72:21:7c:41:64:6c:33:3b:99:
7e:ad:99:0c:34:45:c6:de:30:54:16:eb:b2:6f:c8:
06:ff:5c:1e:fd:4a:1c:10:ff:e5:b9:86:71:01:59:
3a:64:bf:8f:14:75:a9:d6:44:42:d7:54:11:10:37:
1b:49:d9:78:c1:2f:5a:a1:e9:26:07:45:18:97:cc:
45:4c:5c:56:e9:fe:1b:16:46:ae:ed:ba:7b:b0:d1:
d3:c7:3f:f9:b7:b7:c8:3e:8e:b2:bf:d6:b7:04:75:
cd:88:a6:c0:f7:51:30:50:1b:dd:1b:50:3f:71:84:
b3:5a:64:46:4d:33:82:99:c2:cd:f3:8f:d6:40:23:
dd:ca:26:82:fe:f9:32:cc:75:43:b2:37:6d:e8:2c:
28:29:e2:ed:0a:53:8c:b3:60:25:72:e3:19:14:5b:
bf:71:d2:f5:6b:cc:c9:8a:81:ce:90:44:83:70:06:
e7:80:e1:8d:3c:c2:83:77:e7:65:47:30:a1:23:dd:
10:4e:e1:0c:38:20:94:76:54:fa:8c:16:8d:23:f4:
33:f6:bc:08:ae:fe:9e:0b:ae:94:8c:af:75:c6:ea:
b4:ae:8a:0b:fd:05:2a:34:d1:82:db:28:e0:00:04:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:C5:8F:BB:E0:DE:BC:4D:22:EF:A8:5F:12:91:A3:E4:29:A5:8D
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f2:02:18:b4:55:c4:fe:93:b9:8e:51:db:51:40:00:75:54:
e9:d6:cc:a5:36:69:87:57:19:e7:81:a2:03:25:4d:c6:76:87:
38:0f:04:41:dc:79:fe:2a:4f:3a:68:99:a7:05:3f:05:83:6d:
36:8c:85:70:4a:dc:cc:39:d5:99:26:d9:2f:9d:16:e7:5b:d3:
e9:7d:be:66:d7:ed:24:68:2e:ef:0d:ab:53:a0:f2:54:cb:ac:
c9:04:46:c5:ce:29:68:9f:7b:83:8d:fb:5d:47:fd:a7:6e:00:
bb:b8:c0:5a:80:59:f3:a7:24:98:0d:95:2e:28:f7:79:20:5d:
ca:c2:59:8b:5e:e3:d1:4b:59:63:66:d6:13:55:e6:55:70:aa:
24:08:83:6f:f6:87:15:8b:68:6f:0c:be:b7:bf:b4:67:b8:3f:
21:46:a2:8b:e7:13:6f:45:93:f1:7a:2b:28:a7:0a:a5:c0:e9:
83:3d:1d:e4:42:f6:b6:57:2e:41:32:b1:e5:be:0a:b5:c4:05:
88:9b:41:8f:45:82:9f:cf:15:b1:0b:53:08:a5:fb:be:c0:3c:
25:5b:57:56:ef:c3:24:b0:07:07:ab:20:19:70:14:21:00:49:
66:85:80:b3:94:df:94:e6:1a:71:ac:32:b4:56:ef:f4:b8:29:
5d:f6:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:29:06 2025 by rpki-client