Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft
File: UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft (raw, json)
Hash identifier: v8D7Uf67KqdNyuIvtRRLMKFZKCSypLfBW87UQsoxl/8=
Subject key identifier: AB:51:AA:E9:3A:CF:B3:86:E9:9F:D2:72:C5:EC:A1:A9:3D:7B:B4:86
Authority key identifier: 51:4E:F1:A8:C3:67:E7:05:2A:3F:2D:73:6B:1B:45:7D:A6:96:64:96
Certificate issuer: /CN=514ef1a8c367e7052a3f2d736b1b457da6966496
Certificate serial: 0194BD3A119FA4A4D985AB49EEE4CA2A4A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UU7xqMNn5wUqPy1zaxtFfaaWZJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:38:06 +0000
Manifest this update: Fri 31 Jan 2025 16:38:06 +0000
Manifest next update: Sat 01 Feb 2025 16:38:06 +0000
Files and hashes: 1: UU7xqMNn5wUqPy1zaxtFfaaWZJY.crl (hash: oxmJq5ETvwxZ4+EswVa2FOQvDkQ6tC91vdIjqjBILqw=)
2: n1FEoz2snxoGhQxSX-iz_8jdCdw.roa (hash: qD6XNtNhAHZ+9olAUMZSVhYU1s86km9BFrLB+jwvYx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:3a:11:9f:a4:a4:d9:85:ab:49:ee:e4:ca:2a:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514ef1a8c367e7052a3f2d736b1b457da6966496
Validity
Not Before: Jan 31 16:38:06 2025 GMT
Not After : Feb 1 16:38:06 2025 GMT
Subject: CN=ab51aae93acfb386e99fd272c5eca1a93d7bb486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:69:d2:1f:6c:14:78:46:b4:cd:6c:85:ee:
a9:03:10:b7:dc:cf:b6:c2:bd:f9:87:26:53:70:e1:
dd:3f:d8:b2:53:3b:39:60:91:a7:42:fc:a3:97:77:
8d:72:66:c2:75:ba:5c:98:52:8b:fe:77:7e:18:b7:
46:9c:42:cb:d7:29:07:c9:f8:d0:16:51:39:49:fb:
c9:34:d8:3e:fe:82:71:5d:71:71:02:8a:77:89:dd:
3c:80:13:b1:fc:a2:d4:5a:bd:5b:7d:ab:7d:76:a7:
82:63:6c:9c:0e:01:9c:d7:c3:46:d3:94:d2:63:f3:
04:fa:c2:d9:6f:f9:66:fc:75:3e:38:68:65:77:2e:
43:c3:ac:da:eb:a7:88:4b:95:ad:ea:0a:c3:c9:ae:
31:24:c8:20:cc:fa:24:35:70:aa:73:ff:d3:5b:fe:
b8:37:8b:5c:d8:19:b6:01:c5:46:94:b9:5f:83:c8:
f2:b5:60:1c:33:17:66:3a:ba:9f:05:a7:b9:f9:0b:
e9:e2:43:5b:af:79:77:3f:fe:54:9a:7b:24:fa:4c:
4b:ba:17:24:1a:2c:84:75:39:28:9a:88:4c:89:16:
84:c9:ef:21:38:5d:49:2c:b4:07:c0:e6:49:c1:f4:
2d:5e:fc:76:e3:d6:56:ec:50:f3:ae:66:63:49:c0:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:AA:E9:3A:CF:B3:86:E9:9F:D2:72:C5:EC:A1:A9:3D:7B:B4:86
X509v3 Authority Key Identifier:
keyid:51:4E:F1:A8:C3:67:E7:05:2A:3F:2D:73:6B:1B:45:7D:A6:96:64:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UU7xqMNn5wUqPy1zaxtFfaaWZJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7d:5b:00:8d:b5:a5:b4:6b:7c:e8:66:27:3b:0e:89:ec:ea:
6f:18:b2:94:79:94:95:d7:87:2f:c6:ff:14:bd:1f:1b:ba:66:
e2:a3:e0:52:61:2e:44:f4:61:c1:d9:65:28:51:f6:f8:17:6e:
fb:bc:33:a3:e0:4d:46:ca:21:28:ce:12:66:b8:86:d0:55:c5:
49:7c:34:8b:9c:8f:6b:ac:ca:ee:cc:a9:33:d9:63:cb:9d:a8:
c1:13:0e:da:96:09:51:9c:58:64:39:7e:70:8c:7b:d0:29:f2:
d9:5b:c3:b1:59:88:3d:dd:80:09:d9:3f:97:47:01:6c:de:08:
4f:33:1f:0a:2f:c3:5b:32:a3:06:8e:bf:67:5d:cc:3f:8e:55:
e8:64:55:e6:81:56:b8:a0:e9:19:83:6f:e6:bc:45:e6:a9:c9:
bd:54:6c:c7:4e:db:89:1d:73:42:b7:8b:63:32:c4:1d:91:59:
2c:4a:23:4c:5b:72:dd:58:bd:94:9c:91:ef:63:5c:3a:5f:b0:
f8:a6:e2:ae:02:bf:8d:47:42:e4:cc:fd:99:a8:14:96:74:0c:
d5:8b:f4:a6:eb:37:65:9a:1c:d9:f5:91:14:ba:fd:2b:8f:40:
44:f6:e8:b4:40:9b:65:e5:43:96:e0:2d:d8:85:8a:6c:ab:79:
25:f0:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:46 2025 by rpki-client