Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: 7Nazm+gBMQkSeJrj42JIpeNDKE5mChH7UQcmOVsFeVU=
Subject key identifier: BD:BC:FC:BA:21:64:36:E5:CF:11:58:04:D3:BC:93:F6:3B:7F:B2:25
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 0194BC3C67F2CF1E2D5B198E0324D2996C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0280
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: PszzYvXVKmbj66+t3HtrX80eAY/2xwWenyvYL8nlC/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:f2:cf:1e:2d:5b:19:8e:03:24:d2:99:6c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=bdbcfcba216436e5cf115804d3bc93f63b7fb225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:79:d3:cf:92:97:f8:b5:8b:f3:59:97:be:
f4:06:3b:9a:58:fd:83:fc:38:8b:3d:ed:26:39:f5:
e4:c5:d4:0f:ed:ae:ad:68:68:be:a8:57:3a:70:72:
ce:75:ca:a4:23:79:cc:f6:68:92:a6:71:1f:ee:d9:
d8:98:16:c0:25:76:74:62:9a:17:7a:7d:ae:aa:8e:
16:8e:61:45:c8:ed:89:11:73:0a:8b:5d:54:97:4b:
cf:b0:43:0b:81:0e:67:17:25:3b:cb:eb:8b:0f:11:
26:c5:0f:31:8e:7d:16:0f:6a:62:e5:7f:24:6a:21:
2a:6e:d8:96:8e:af:57:c3:db:0e:4d:77:08:13:f9:
c7:9a:c9:23:ae:7e:07:cd:20:bb:9f:fa:62:d2:a0:
d6:a0:c9:56:38:78:47:60:87:66:a4:a1:18:58:27:
64:85:a9:55:48:47:8d:d9:e6:7e:ff:88:97:47:12:
39:72:ef:14:30:e1:6e:81:3b:57:08:0b:18:db:59:
bc:9a:59:2e:d3:00:bd:5e:41:fb:e3:7f:44:a8:f8:
c4:82:fe:fb:30:ee:c7:52:c6:07:02:91:ff:9b:10:
ce:1e:c6:53:48:80:9f:1e:28:dd:02:21:e8:4e:e2:
ae:28:9e:9c:8b:fb:ca:1d:a5:31:4e:24:60:07:f9:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:FC:BA:21:64:36:E5:CF:11:58:04:D3:BC:93:F6:3B:7F:B2:25
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2f:24:0d:98:25:d0:c7:66:a1:09:6b:1b:60:a4:45:1f:f2:
31:ca:48:8e:fc:0a:08:2b:1f:39:c4:b4:f7:0a:9c:06:21:1a:
4e:db:bd:05:db:c8:00:6a:88:19:fb:a2:ee:02:fe:88:77:37:
82:0c:f5:2f:7b:0e:19:67:1c:dc:58:4d:2d:e5:15:3b:57:9e:
e8:2b:92:57:7f:60:df:ab:84:c0:5b:cb:5d:13:3c:07:da:6d:
a0:d9:a5:12:47:cb:21:f7:6e:04:71:0c:e7:65:31:d8:03:09:
b4:fe:98:cc:8a:b6:61:9d:a5:76:26:d2:ab:4e:ae:2e:77:0c:
65:86:7f:bc:07:2c:6c:a2:24:7e:43:12:54:fa:35:8b:e0:de:
52:8f:8d:76:1f:b1:e6:83:62:8f:fb:cb:94:72:9b:b7:b7:f8:
9d:74:5c:67:ce:0e:a5:89:2e:ab:89:59:c3:60:00:15:01:89:
ef:a7:f1:57:2f:95:94:19:16:9a:5a:15:67:57:cb:e3:40:43:
10:48:b0:30:30:39:9b:29:57:a9:7d:c7:ee:c2:6e:ba:8a:74:
56:66:f6:03:ef:7b:4a:0f:79:ba:bb:ec:b4:4c:c3:aa:de:17:
31:b4:25:15:7f:b3:57:16:bb:01:fc:57:b1:4a:bf:26:cd:9a:
bd:a8:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:50 2025 by rpki-client