Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
File: UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft (raw, json)
Hash identifier: jdoAPu6jeT3+3+y4tcP5t4Ky2tVzgCpJAijudqwbto0=
Subject key identifier: 02:FE:01:4F:D5:43:89:CD:33:6B:7C:E8:C8:5A:C3:34:8D:E9:05:0E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A9656AEA2A3E854C2461CBE0BE009B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
Manifest number: 37C1
Signing time: Tue 18 Mar 2025 13:15:49 +0000
Manifest this update: Tue 18 Mar 2025 13:15:49 +0000
Manifest next update: Wed 19 Mar 2025 13:15:49 +0000
Files and hashes: 1: 1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa (hash: PupEsIXHB6rGqEymngMsBPy2Wh8A195/YgvNAUoFwO4=)
2: 1je5KUhpHZmwhSFxQgge2_vslrY.roa (hash: 9eNIZLUHVfhqmKtS4PV63uKJr6tPBut1fQ++6yANib4=)
3: UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl (hash: n/b0n1Pu1yC8EMljou5VLsnQurf+2l0hFE8q6INEeQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:65:6a:ea:2a:3e:85:4c:24:61:cb:e0:be:00:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 18 13:15:49 2025 GMT
Not After : Mar 19 13:15:49 2025 GMT
Subject: CN=02fe014fd54389cd336b7ce8c85ac3348de9050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:bd:8e:2e:11:cf:7a:c2:42:75:77:91:89:
7a:70:b6:80:31:5b:a2:e3:ce:56:ff:7f:88:66:6c:
69:1b:eb:be:cc:ce:90:c2:a6:f5:66:b7:a6:7d:10:
a2:26:64:fe:5d:9b:0c:1b:0f:12:a2:84:4d:ad:92:
93:9b:53:3c:ed:d9:9a:c1:83:88:3a:d8:87:c2:fe:
04:32:af:b2:77:d7:02:ea:dc:82:a1:9b:db:86:40:
f5:94:07:22:97:5d:42:fd:4e:09:7a:9b:cc:26:eb:
31:09:7c:59:ad:65:7d:37:44:99:84:2d:f1:45:83:
e5:41:9f:af:01:52:98:34:6a:b4:fd:c3:ca:89:57:
10:bf:41:d2:e0:5c:8a:82:0e:1b:f5:25:2d:3a:91:
26:08:aa:9c:29:ad:da:79:26:17:73:ff:b2:be:ac:
95:d7:64:26:f0:1a:26:1d:da:de:76:7e:82:d5:8e:
e1:3b:77:b9:37:7f:ec:55:f6:0e:56:df:20:c0:26:
70:33:5e:8f:ad:fe:d7:6a:dd:5c:a7:c6:0a:8d:60:
33:ae:84:d7:c0:04:4d:8b:d7:a3:7e:75:ca:b7:e5:
01:ee:b2:91:b1:64:f4:af:e6:5d:08:db:b4:99:03:
70:87:17:2e:74:f9:84:4e:82:a9:e6:73:21:62:88:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:01:4F:D5:43:89:CD:33:6B:7C:E8:C8:5A:C3:34:8D:E9:05:0E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:3f:8c:f3:1c:ab:e7:49:d1:dd:c0:9c:ac:20:ac:57:4e:
14:b4:b9:62:05:80:b5:99:5a:01:96:b2:64:62:b4:d0:a2:83:
a1:4b:2e:ce:b9:4f:c0:a7:6d:c0:ec:31:27:5b:f3:61:5c:4b:
c0:67:d8:bb:fc:9f:31:84:d6:62:70:0a:8e:8b:20:29:f8:f6:
ef:3f:3f:2a:75:98:d1:c2:48:d4:fd:d6:15:83:f5:e6:43:86:
57:3b:a3:cf:33:6a:93:6f:3a:99:90:15:c3:aa:cf:1d:22:f3:
4a:80:9a:90:0d:41:91:6e:47:f2:dc:aa:1a:71:19:a8:7d:13:
74:3e:a1:04:2b:28:b0:eb:e3:11:a0:ba:f5:88:dc:da:be:24:
6a:68:ff:2f:4a:15:5f:13:da:18:81:f6:ad:45:29:29:35:6a:
40:6c:c7:99:cf:96:5e:13:27:d6:3c:13:35:41:49:43:4f:7c:
db:a8:9a:94:35:37:6a:11:58:5c:0a:e5:19:0c:03:d9:cb:f4:
dc:8d:36:0e:ca:47:75:b3:e4:61:a5:a5:06:ef:48:49:50:f7:
0c:10:e9:49:68:d3:b6:de:b6:cc:49:63:93:d3:98:74:93:32:
b4:21:4f:04:a6:d1:1b:da:22:a6:22:9f:ce:65:fa:ad:e6:9b:
a6:18:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:34 2025 by rpki-client