Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: QeXR3cKFwjLNVPQ1EYAtrAX5RG8zfr9U9XCDmINmcjY=
Subject key identifier: FD:9E:A2:3C:39:DE:38:C6:41:7B:32:7A:7B:BD:D7:B5:31:97:01:54
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 0195DFD91850DF7F657164B820777A74D55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 1307
Signing time: Sat 29 Mar 2025 03:01:41 +0000
Manifest this update: Sat 29 Mar 2025 03:01:41 +0000
Manifest next update: Sun 30 Mar 2025 03:01:41 +0000
Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: NA4n8PyoUAJi+rRhjQZOgiJF32guqhVkg/XMqLhcDTo=)
2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:18:50:df:7f:65:71:64:b8:20:77:7a:74:d5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Mar 29 03:01:41 2025 GMT
Not After : Mar 30 03:01:41 2025 GMT
Subject: CN=fd9ea23c39de38c6417b327a7bbdd7b531970154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:b9:c1:aa:34:e4:65:0f:71:f5:26:ff:53:
c5:d4:34:fd:e5:c0:d0:d7:9b:ac:16:80:12:a0:33:
c9:ec:34:65:9d:7e:44:40:55:d0:5e:bc:1c:00:ae:
4b:2e:50:97:e3:8d:99:38:f7:bd:fc:cc:51:20:f0:
9d:db:c2:e9:a1:43:d4:e1:3f:40:61:3d:1c:10:93:
f7:80:9e:ed:20:2f:f1:89:04:5c:a7:43:4f:40:39:
3c:64:53:10:0d:75:62:8b:16:df:f3:39:a3:3c:f6:
4c:3e:22:e3:cf:02:64:1d:69:a8:03:2a:64:da:ba:
1c:b2:c3:9c:d3:91:9a:86:1a:d6:d0:81:97:81:df:
2c:90:f0:85:29:a2:38:95:63:a3:fa:21:1b:a2:80:
66:a4:27:47:2c:7e:ed:84:ca:4c:ea:84:e9:46:84:
eb:d0:8f:0c:6e:b8:74:eb:6b:df:a3:b2:c2:9e:2b:
cc:9f:0a:86:bd:ae:6c:1e:10:5c:8a:2b:eb:4e:7d:
cc:a1:09:02:8e:29:74:97:e9:44:bc:47:d7:c3:96:
2c:db:42:55:af:5c:28:16:b1:9f:5a:90:bd:b0:05:
37:20:5f:d2:72:98:41:4c:c7:f1:96:a9:21:50:5e:
b8:a8:21:64:d7:6d:dd:cf:80:2b:45:49:d1:60:ac:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:A2:3C:39:DE:38:C6:41:7B:32:7A:7B:BD:D7:B5:31:97:01:54
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d8:c1:88:dc:14:f0:fd:cd:45:b1:4b:45:2d:ab:e0:69:ab:
5a:2b:13:92:18:0c:14:7f:9f:ea:74:f9:b1:c5:52:bf:05:84:
22:fb:e1:2b:0b:76:d9:8e:20:50:ed:cc:ad:a4:fc:de:34:a5:
33:1a:e6:6b:79:fb:92:ce:37:12:f3:41:b0:fe:5b:2e:a8:67:
58:ee:eb:b6:67:c7:80:2c:21:90:0b:86:4b:09:b4:05:bf:40:
71:dc:58:7d:63:e9:0e:1e:00:be:16:5b:1e:3d:e2:8d:1f:33:
25:cc:a3:84:12:d5:92:23:5a:ac:12:0c:4d:6a:43:2e:3e:ff:
01:7e:35:96:8c:c3:f8:b4:cf:68:ff:24:87:12:ad:55:43:db:
66:f5:d7:64:df:f1:41:04:7c:88:e1:28:f3:48:00:68:a4:1f:
b9:fb:29:84:97:96:0b:30:b0:16:22:41:ee:7e:03:f7:92:60:
54:06:73:28:7f:55:79:09:d5:53:ad:8e:e2:29:ca:ab:31:b0:
8c:9a:1a:6f:ee:7b:41:dc:30:08:5d:e6:f0:64:86:eb:9c:b9:
79:96:b5:69:f7:35:b8:ec:c4:5c:b4:2d:b0:fb:cd:cc:ee:8c:
28:2c:a3:dd:6a:5f:30:9b:23:3d:6a:da:6c:81:ad:f3:44:c2:
80:df:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:54 2025 by rpki-client