Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.mft
File: rUpcc2GJbAcAnCYQB16vIpL4B3g.mft (raw, json)
Hash identifier: CTsLId+1FEHlMt2YCqpwN11+sbwzIIBKab1CbghHflg=
Subject key identifier: C9:52:71:80:8C:2A:7C:98:31:FE:EB:77:D2:D8:74:65:B3:97:0A:AC
Authority key identifier: AD:4A:5C:73:61:89:6C:07:00:9C:26:10:07:5E:AF:22:92:F8:07:78
Certificate issuer: /CN=ad4a5c7361896c07009c2610075eaf2292f80778
Certificate serial: 0193F21ABA45CBB27BFA0AF40044EE1EA94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUpcc2GJbAcAnCYQB16vIpL4B3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.mft
Manifest number: 7D
Signing time: Mon 23 Dec 2024 06:00:58 +0000
Manifest this update: Mon 23 Dec 2024 06:00:58 +0000
Manifest next update: Tue 24 Dec 2024 06:00:58 +0000
Files and hashes: 1: 0sahQlpEQz2u8NxoFfiNI9LNXm8.roa (hash: CwMF2HjyXu6vJqCVmcuJVtyqUougWMCx/iDVdDQbEGA=)
2: rUpcc2GJbAcAnCYQB16vIpL4B3g.crl (hash: nD+G++Z+442PIl9EAYAD5/Ns5CZf31Lj5g39rCvBzJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:1a:ba:45:cb:b2:7b:fa:0a:f4:00:44:ee:1e:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4a5c7361896c07009c2610075eaf2292f80778
Validity
Not Before: Dec 23 06:00:58 2024 GMT
Not After : Dec 24 06:00:58 2024 GMT
Subject: CN=c95271808c2a7c9831feeb77d2d87465b3970aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:1a:84:e4:59:8e:0b:71:aa:0b:e6:55:8f:
27:7f:66:a1:89:6c:61:84:a9:4e:f7:3f:a1:0d:f3:
f0:c3:9b:f4:b3:dd:0b:6f:b8:91:68:8c:5d:25:a7:
6c:1c:78:14:ac:0f:a3:16:15:80:26:0d:9e:7c:27:
e8:70:28:a6:6c:c9:3e:9f:5d:a5:69:74:43:79:3c:
ff:bc:ac:7f:b2:0e:5c:73:4a:ad:08:17:45:e3:ef:
e5:57:4d:52:3a:58:f2:f5:1d:bd:2d:c0:1f:4d:ad:
f2:d1:7d:1e:07:db:e4:45:d0:3f:e6:bd:9e:3d:fe:
b5:3d:be:9a:af:92:0b:c6:e8:c0:89:6b:50:2f:47:
04:fa:73:3e:da:4d:25:ca:6a:d1:91:5a:ff:28:4f:
64:76:f5:1a:dd:c8:a1:41:19:a0:c0:cb:94:81:ab:
d9:5e:4b:cf:44:6a:c4:3a:06:dd:18:e7:5e:ed:fe:
a5:30:3e:ae:78:c1:fd:a8:ee:94:7c:2f:1c:f2:f0:
29:69:f3:14:6e:bf:9d:7f:54:a6:ef:7b:1c:06:52:
18:3e:c6:cc:28:3e:99:ce:ad:fd:7d:fd:1b:cb:ef:
6a:ad:19:ba:5d:9e:38:bc:52:72:7b:5f:02:c1:86:
51:ba:6b:fc:71:60:10:53:1c:b6:0b:80:71:01:b7:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:71:80:8C:2A:7C:98:31:FE:EB:77:D2:D8:74:65:B3:97:0A:AC
X509v3 Authority Key Identifier:
keyid:AD:4A:5C:73:61:89:6C:07:00:9C:26:10:07:5E:AF:22:92:F8:07:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUpcc2GJbAcAnCYQB16vIpL4B3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:de:16:87:6e:28:e0:73:ec:da:a4:28:ee:af:fe:0a:09:
f9:93:9b:79:63:7b:6f:48:86:6f:79:0d:73:b0:a0:3d:68:b5:
e0:b5:12:bc:7c:7e:3b:62:a6:4c:1f:5e:00:09:7f:79:de:2b:
a4:71:c7:dd:aa:6f:d4:bd:2f:37:52:51:3e:74:05:d8:98:04:
f8:68:b5:53:1b:bb:b9:0b:f4:ae:ec:0f:9b:23:17:37:ea:57:
0a:7f:8c:6c:9c:19:04:aa:dd:46:3e:a5:f6:80:1b:17:52:c5:
c6:92:a2:6b:c8:e4:3a:9e:f3:39:85:0e:e0:fe:69:ee:5d:a7:
50:85:66:44:6e:8f:8c:c4:43:ea:9c:24:1b:93:31:ee:35:82:
a0:c7:64:67:10:35:3e:72:4e:f5:a8:6a:9a:bc:f7:19:de:67:
43:da:0c:c4:58:0d:9f:9d:aa:0f:4d:ce:92:15:a6:f6:80:a3:
e0:42:4b:f4:71:d1:56:2c:07:e6:8d:97:63:55:65:2b:cd:16:
11:a8:73:d7:5d:73:68:0a:9d:dd:a1:7f:e7:cb:cf:ad:a4:da:
2d:f7:ab:ff:2e:00:9b:e0:3e:f4:6a:ff:9d:cd:ea:09:dd:88:
be:f7:98:12:19:9e:2a:32:14:09:34:7e:70:49:33:9b:66:84:
62:b3:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:23:32 2025 by rpki-client