Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: +qfpqqFDo1pKK5cVyqcQ4JiGj4sbpbfCVE7SDvCR89k=
Subject key identifier: 5B:1A:DB:0D:17:B9:03:B8:BF:C4:DF:59:40:18:80:9E:D6:38:38:DD
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 0195E190112909E967345536C1BB26C1AB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 121D
Signing time: Sat 29 Mar 2025 11:01:09 +0000
Manifest this update: Sat 29 Mar 2025 11:01:09 +0000
Manifest next update: Sun 30 Mar 2025 11:01:09 +0000
Files and hashes: 1: 2fiCKenUyZEGcgyEcbC3Fxz5B0o.roa (hash: C3sRzOd2/ABXN5AYlIy2eOFDIIGwTRNmpvXK9lls8wk=)
2: FKocTxCwOpTwhx81CYxQkqkOggY.roa (hash: 4ohmnB8YwygbCXyKutj9jSnUxcPLc8vBK0YjqJ6KB28=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: UmUROTpjA06bJMRKFlDx0yPr4krto8Lp2nNJ5fQtfW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:11:29:09:e9:67:34:55:36:c1:bb:26:c1:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Mar 29 11:01:09 2025 GMT
Not After : Mar 30 11:01:09 2025 GMT
Subject: CN=5b1adb0d17b903b8bfc4df594018809ed63838dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:da:35:8f:1c:26:1e:a3:76:36:89:19:f9:
2b:06:bf:48:16:ea:bf:2e:af:04:da:37:7f:d3:90:
fe:b3:1b:84:e2:3f:3f:e8:26:7a:a2:b9:c0:3f:4a:
fb:d9:88:00:cb:25:bb:85:b2:ef:e6:38:49:5f:91:
69:41:a7:94:3b:1a:97:0a:6a:30:db:08:c1:a1:c0:
7a:2b:23:2e:1d:ce:0e:06:34:a6:03:49:07:ab:e0:
61:9a:ff:f2:d9:cd:88:98:9b:d1:56:bc:9a:28:fb:
11:0a:06:b6:86:9e:f2:c5:69:15:21:a6:36:c5:c0:
cf:28:f7:f6:71:7d:9f:b2:8a:fa:85:cb:28:b5:69:
c0:df:af:72:07:98:c8:4a:a2:f5:da:41:2f:18:e0:
59:c2:5e:da:8d:0e:5c:ca:a9:00:99:70:ed:0d:d7:
3e:3f:73:c7:d8:3c:d3:ab:13:b1:9c:af:d9:82:aa:
c1:e4:e1:fb:fd:eb:ae:12:cc:33:ba:62:8f:94:b3:
f7:98:18:6b:35:c2:c4:df:c9:50:39:96:74:68:41:
94:ef:a6:83:da:3a:63:6f:6a:6d:d8:58:9d:40:25:
ef:70:c0:8f:93:e3:94:8f:19:71:cb:ff:47:88:db:
cd:15:98:bb:12:20:72:38:d3:e0:b1:61:57:09:10:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:DB:0D:17:B9:03:B8:BF:C4:DF:59:40:18:80:9E:D6:38:38:DD
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fc:1e:02:d7:8e:59:8e:ee:e6:3d:00:fd:07:a6:1c:9f:87:
84:8b:58:18:52:35:b8:d8:b1:79:1b:15:66:90:9e:33:43:51:
9d:a0:8a:28:29:61:a1:7e:fd:b6:20:17:63:db:c7:b6:e7:d9:
d5:f6:b1:1d:9c:e0:83:43:a9:38:ef:c6:5c:9e:82:88:50:05:
8e:00:25:10:f7:85:dc:29:c6:88:2c:48:59:c8:f1:c8:6d:59:
76:27:f3:b9:d8:84:af:f4:3c:10:39:fa:e8:07:0f:f0:e3:64:
ff:8b:e1:0f:33:4a:e8:79:9f:02:96:41:21:99:3a:22:cf:cb:
7f:2d:65:03:af:01:51:3b:5b:14:30:ec:ad:59:e7:f7:25:ab:
06:a0:c4:01:63:2b:94:01:7e:46:e8:0e:7b:92:70:e0:1b:79:
21:30:9b:b3:a6:b4:85:bb:b9:c6:c8:bd:69:8a:f1:b1:c5:1f:
e4:42:ce:d2:a5:4b:61:ed:a0:f7:69:68:1c:69:ea:1c:d2:17:
4f:dd:84:ea:1d:bf:5e:b9:f9:4a:f7:de:c3:45:9b:9a:da:48:
5f:7d:93:d9:ff:23:db:38:fe:bc:11:1e:7a:5c:7d:02:34:16:
4e:9f:7a:62:b4:5c:95:27:80:08:89:50:bb:cb:51:dd:94:cb:
e1:93:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:38:36 2025 by rpki-client