Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.mft
File: UyyAH0yFApNyGDaLTmXQ5GPXybk.mft (raw, json)
Hash identifier: /NIacP0rdP7abgSLGeswqwMPiHJiczopmssnC1sesLc=
Subject key identifier: 93:2B:37:6C:B8:ED:FF:A7:CA:B5:25:B2:AA:3E:E2:D4:5F:21:0B:AA
Authority key identifier: 53:2C:80:1F:4C:85:02:93:72:18:36:8B:4E:65:D0:E4:63:D7:C9:B9
Certificate issuer: /CN=532c801f4c8502937218368b4e65d0e463d7c9b9
Certificate serial: 018C61FA32591E4D70190CCF8886204ECDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyyAH0yFApNyGDaLTmXQ5GPXybk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.mft
Manifest number: 0AB4
Signing time: Wed 13 Dec 2023 07:00:35 +0000
Manifest this update: Wed 13 Dec 2023 07:00:35 +0000
Manifest next update: Thu 14 Dec 2023 07:00:35 +0000
Files and hashes: 1: KaCaK7H5tHbMx-uh8i1BbihVEn4.roa (hash: YW/vRbvVb5ehLSstfhsp2iJoiuIWAtOZTvdwO9vXBhw=)
2: UyyAH0yFApNyGDaLTmXQ5GPXybk.crl (hash: rCit2aldGi45JSaP4BFJaXTHt9KRxzwjPLrU8sV5g1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:61:fa:32:59:1e:4d:70:19:0c:cf:88:86:20:4e:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532c801f4c8502937218368b4e65d0e463d7c9b9
Validity
Not Before: Dec 13 07:00:35 2023 GMT
Not After : Dec 14 07:00:35 2023 GMT
Subject: CN=932b376cb8edffa7cab525b2aa3ee2d45f210baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:2d:99:45:39:fb:71:1d:e8:ed:08:93:61:
74:8b:ff:11:06:00:40:df:b5:87:b7:60:cc:92:aa:
21:8c:07:4a:be:62:df:e3:b9:d0:9a:c4:b6:b1:8a:
e2:47:37:79:d9:3e:b4:fa:6e:f9:8d:4f:9b:27:4f:
45:2c:a4:3e:47:87:bc:3c:99:db:32:a8:cf:46:21:
57:9a:fe:36:40:51:de:fe:f1:98:d6:dd:1f:65:bf:
ab:c3:0b:8c:d7:34:98:34:bd:69:50:29:0d:99:25:
bb:fa:09:98:7a:69:5f:59:d3:f2:6e:02:0c:22:67:
65:75:e6:79:4b:cc:6e:54:65:aa:ce:27:fb:26:d3:
22:e4:4e:eb:20:8f:d8:ad:44:9c:64:b6:2a:db:79:
fb:55:2e:cd:9c:bf:9d:6f:79:44:41:d2:b5:0c:35:
6a:32:a1:b9:57:01:6f:d0:35:04:15:21:49:e0:a4:
f0:d1:f0:18:a2:96:b9:36:e9:a1:ac:bc:a7:64:81:
e6:86:ac:dc:4c:f0:c0:4d:99:2a:4e:a0:4a:d7:63:
85:1e:47:9c:e3:26:99:08:14:58:a2:88:c8:e9:e7:
81:86:48:7a:d8:36:f4:35:74:58:8f:33:2e:b4:e5:
e6:af:aa:7b:89:4a:c2:0b:b9:a9:11:75:2d:6a:80:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2B:37:6C:B8:ED:FF:A7:CA:B5:25:B2:AA:3E:E2:D4:5F:21:0B:AA
X509v3 Authority Key Identifier:
keyid:53:2C:80:1F:4C:85:02:93:72:18:36:8B:4E:65:D0:E4:63:D7:C9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyyAH0yFApNyGDaLTmXQ5GPXybk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d6:0f:a8:e1:1c:7f:bf:0e:7f:1d:e7:ff:a5:7a:2e:cd:61:
a2:03:2d:45:e9:e7:1d:00:45:17:e1:31:7e:9d:5f:60:01:4b:
f8:b0:49:0e:60:1f:86:fa:24:d9:a6:4d:89:61:42:4d:d0:e2:
26:03:1a:7a:e1:76:58:6d:ef:81:a4:d6:9a:de:38:72:26:9b:
47:c7:94:51:48:00:d6:ee:0a:c3:be:75:c0:a7:2d:0b:0f:61:
d6:17:21:12:bf:c0:1d:1b:44:17:ea:8d:dc:e5:34:85:95:bb:
44:22:00:37:3a:f6:88:60:cd:bf:9f:30:62:25:f6:1b:52:ac:
2e:0a:12:9c:8a:00:13:de:5a:11:b6:6b:c7:c1:31:a3:71:dc:
6a:cd:a3:b0:78:0e:5b:92:c4:b7:7a:bd:70:1f:c3:e7:9d:5f:
17:81:b6:25:6d:33:d6:e3:86:72:80:f5:b3:a2:11:d1:ef:58:
64:cc:b7:84:43:09:3b:a4:c3:af:da:8c:90:b1:1d:39:25:17:
d5:82:f0:15:01:ec:be:f0:09:7e:16:a6:06:75:8d:f7:a3:a7:
4b:00:2f:61:50:76:dc:ad:b3:2a:2d:79:37:6f:f1:4c:fa:01:
33:e5:8d:3b:25:e9:2a:b5:87:8e:b5:de:61:63:e4:4e:a9:20:
cd:3a:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:19 2025 by rpki-client