Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: spsbFyShraE4pDqtYivhzluvgM5EZcvf0m+ELJ3NIGM=
Subject key identifier: F4:DE:8F:C5:9A:E9:1C:D2:7B:D4:CF:80:DE:B1:67:09:3F:91:89:5A
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0195DFD8BABB97BD350E27E02D62FC8D8BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 01A7
Signing time: Sat 29 Mar 2025 03:01:17 +0000
Manifest this update: Sat 29 Mar 2025 03:01:17 +0000
Manifest next update: Sun 30 Mar 2025 03:01:17 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: KHnuA4pQ/zGztN6izr52T8cQ+J3hOB5mmP1RXVdBHuU=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:ba:bb:97:bd:35:0e:27:e0:2d:62:fc:8d:8b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Mar 29 03:01:17 2025 GMT
Not After : Mar 30 03:01:17 2025 GMT
Subject: CN=f4de8fc59ae91cd27bd4cf80deb167093f91895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:51:c7:90:e9:92:87:12:db:0a:60:7c:33:
3e:ea:0c:d7:9b:f3:d3:bc:1e:6c:44:7d:9c:e4:43:
5f:17:77:ea:24:7b:49:44:66:41:32:43:48:75:3a:
4d:f5:43:e3:0b:ed:ad:98:31:42:96:01:96:3e:f0:
32:e9:e5:80:3a:cc:4a:3e:ca:f7:33:d3:b4:3a:61:
47:19:55:92:ba:af:e9:f0:24:22:0d:33:7e:8b:b3:
cd:79:39:73:68:8b:05:d1:eb:f6:2b:a7:64:7d:0c:
d3:c6:a2:52:7c:da:bf:f3:38:9c:5d:78:ca:4f:a9:
20:c7:69:4f:ea:03:2e:8d:ba:68:90:bd:16:08:2e:
82:9d:ea:f0:dc:77:b7:9a:4d:63:79:10:c0:90:d4:
f4:ff:4e:25:86:0c:d4:91:3c:07:5a:4c:e8:e9:cb:
fa:ca:42:26:fd:8a:2f:6e:e1:b7:3e:48:5e:66:ec:
da:0c:48:bc:30:b9:56:14:df:07:2d:1d:8e:37:16:
2c:b5:48:64:44:51:93:59:2c:63:0f:71:c9:2f:8b:
a1:8b:cf:69:12:bc:04:82:47:d2:b0:ec:64:a0:9b:
7a:6a:57:30:64:fe:6e:a1:4f:25:17:ac:78:54:c3:
ca:e4:62:c3:73:78:28:d3:04:3e:fb:de:69:0f:02:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:8F:C5:9A:E9:1C:D2:7B:D4:CF:80:DE:B1:67:09:3F:91:89:5A
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7c:a9:61:ad:4c:cf:f6:de:de:90:c6:e5:46:31:71:97:74:
82:22:9a:ee:f1:33:0c:18:f4:ba:a0:8e:6d:80:9d:cb:97:48:
d4:d9:6f:af:dd:d2:34:5c:6f:63:94:0c:d5:d9:09:bc:99:a4:
98:6b:a5:81:d7:05:49:c1:de:98:51:49:d3:04:ec:2c:d2:05:
29:d8:b5:b3:4e:a3:45:d0:af:d1:92:e2:de:4d:c4:8f:1c:98:
ae:d3:a1:c3:e9:b8:43:ff:e3:db:84:d3:ca:5a:36:71:3c:8f:
a3:0b:ce:31:19:f8:a8:32:ee:cd:de:9f:b1:88:dc:a6:37:40:
2a:08:94:0f:44:4b:37:a0:96:42:65:8b:1c:86:d8:65:ee:c3:
40:8f:19:ab:92:9e:1a:91:d3:59:ff:75:f2:e0:ba:a3:75:3e:
19:84:f0:87:ac:af:62:1f:d0:2a:ba:7f:d4:bd:38:40:27:e6:
9f:24:a3:ce:06:f6:f1:10:b4:d5:0e:1d:52:b8:9e:d1:3b:9c:
91:f4:4e:46:51:3c:14:2f:9c:e7:d9:6c:98:72:27:d5:ba:ce:
da:0d:37:45:f1:e7:49:47:80:bf:12:68:87:32:16:b8:3a:19:
74:6c:67:e3:68:97:0b:63:7d:86:fe:14:7b:67:39:22:7f:38:
b2:82:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:11:50 2025 by rpki-client