Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
File: UnrRl4bdVLNaS5atP7xXkyeORHQ.mft (raw, json)
Hash identifier: SYIEHraYppQdjRHHTDzF5YsB/kxdsDY8541hqX7CdLQ=
Subject key identifier: 92:2B:12:C0:DE:3D:0F:CD:67:27:AC:CA:45:28:DB:3B:89:9F:C0:C3
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 0195AC5918F1DF5D31659D2CDA7BB3446C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
Manifest number: 1343
Signing time: Wed 19 Mar 2025 03:01:14 +0000
Manifest this update: Wed 19 Mar 2025 03:01:14 +0000
Manifest next update: Thu 20 Mar 2025 03:01:14 +0000
Files and hashes: 1: KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa (hash: AJw2YCH/VuTSNYo91kTytnKXtEZrdqVQkspms9NQoho=)
2: UnrRl4bdVLNaS5atP7xXkyeORHQ.crl (hash: GRND7ikAtCFna90x3PawQWkXw+aD4sxJJ9Aly0IEE/o=)
3: bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa (hash: 7MucZNPxoy6xDKGVNK0X6Z3pxNOoq8ocl4uzKyv0GQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ac:59:18:f1:df:5d:31:65:9d:2c:da:7b:b3:44:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Mar 19 03:01:14 2025 GMT
Not After : Mar 20 03:01:14 2025 GMT
Subject: CN=922b12c0de3d0fcd6727acca4528db3b899fc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:e7:77:ef:c6:33:1e:15:60:c3:68:cd:aa:
75:a9:3b:ac:9e:b5:34:b9:06:88:8f:27:63:ed:1b:
56:ae:f5:2a:c9:42:90:b8:8a:92:eb:5d:41:9a:06:
b0:39:2a:6b:13:eb:42:fc:94:8f:54:ce:91:f6:a9:
22:26:c4:13:a7:87:19:4b:df:78:7e:f2:bd:30:a1:
f5:f7:36:e9:e3:b8:7b:10:21:8a:87:bb:e0:ca:32:
b3:1d:a5:3f:51:c5:d3:62:ff:a8:ae:1e:2b:05:bb:
fd:86:5a:05:77:b6:a4:81:27:5a:f7:73:77:3b:fd:
f4:48:e0:92:57:b4:04:6f:91:c0:95:2e:dd:4d:1f:
81:1c:24:d5:90:56:9d:df:5e:7f:96:7e:2e:cd:69:
2c:4a:0d:45:a9:ea:77:53:da:19:14:60:23:4b:52:
6b:b7:d2:ed:7e:b0:ed:03:b4:86:52:d6:da:7b:1b:
07:08:6f:48:d4:7c:a5:88:94:e6:63:e9:36:29:e2:
2a:26:ba:bf:a7:8d:cb:69:a9:af:50:26:94:ed:66:
8a:32:0f:e7:36:f1:10:41:af:17:e6:e6:a6:c5:32:
ca:58:05:e9:5f:82:21:ec:4a:b7:31:a3:26:a9:c2:
0c:82:59:01:69:81:95:df:30:58:96:7a:bc:6d:d6:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2B:12:C0:DE:3D:0F:CD:67:27:AC:CA:45:28:DB:3B:89:9F:C0:C3
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:58:a6:15:c5:af:1d:3e:e9:b9:54:bc:20:5a:9a:af:83:29:
77:a1:8d:e1:91:aa:9a:94:3d:8c:83:30:78:4e:a7:46:cf:a6:
40:5c:72:d7:ee:6f:9c:7c:24:2d:bf:c7:fb:9d:9c:eb:37:26:
f5:17:1b:8a:e3:6d:f1:99:bc:b9:9d:bf:26:d3:3e:95:b5:56:
99:22:75:82:d7:3b:a7:65:ba:c5:d2:93:40:8a:63:40:60:e0:
e5:aa:78:4e:4c:4a:6b:fc:ce:b4:1b:ce:74:ee:00:12:be:50:
cb:cd:19:f8:d4:90:72:0f:4c:b7:cf:69:43:bb:3d:0f:fe:8f:
93:02:0a:4c:58:88:9f:7a:f2:fe:02:e1:01:0e:71:24:b7:b4:
88:a3:2c:fc:71:dd:20:56:65:74:b3:3f:17:b7:6d:84:33:29:
70:c8:08:7d:60:70:95:84:27:4f:fb:6c:be:e4:4e:04:bd:e7:
8f:ca:fe:ba:a7:48:4f:96:50:df:f5:08:98:5c:8b:cc:d3:d0:
2b:19:4a:49:73:7b:87:4a:64:2c:ff:6e:fa:5b:c8:aa:62:53:
28:59:9d:30:d8:b6:91:8f:98:92:6e:cf:1d:41:8e:31:89:8d:
57:67:a3:ca:c0:4b:dd:3d:8b:ec:37:df:2b:3f:8c:1e:64:cc:
f3:5e:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:19:26 2025 by rpki-client