Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: DQLrWMl+Fsk3x3aFBhb7lvNDwc51gpzy8VbvCBPlyZQ=
Subject key identifier: 5E:58:CD:E2:FB:6D:61:7F:0C:ED:9A:3D:E1:F2:06:0A:58:CB:2C:C7
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 0194BCE058FD664A1FA0F932BFE6CCC168D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: atzmGVK+oRM3694G+OzGPDl/WvSOiMgxdgs1EhzWQ0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:58:fd:66:4a:1f:a0:f9:32:bf:e6:cc:c1:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=5e58cde2fb6d617f0ced9a3de1f2060a58cb2cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:07:4d:a9:59:a9:9b:e7:d5:df:61:c5:e0:
d8:a2:ef:6e:f1:8d:d2:89:7c:39:72:25:8d:4d:3c:
65:53:df:3e:78:67:b6:f4:69:dd:ea:7f:99:9c:a7:
27:0f:8f:11:24:55:ba:15:91:40:8c:ef:1c:9c:1f:
6f:2c:15:8f:10:b2:b5:97:cb:d3:fc:33:d5:25:d5:
b5:44:ff:34:39:02:8a:33:0f:b0:d2:0b:06:f5:6e:
cd:d2:dd:a5:6d:ed:22:1c:31:8a:13:bd:24:2a:1e:
9e:8d:36:27:27:15:b8:92:64:6d:ee:a0:04:ba:8b:
df:b9:46:ef:b4:7a:70:a5:83:58:06:f8:8e:2e:1f:
01:fd:9c:f7:e8:be:ca:de:83:db:e0:d0:5e:b8:b2:
9f:ff:24:26:27:e2:e8:a6:8f:22:1b:ef:0c:e6:df:
8e:d9:d2:f9:15:9a:f2:da:2c:40:15:67:6c:3f:c9:
f8:52:18:ab:95:14:1c:5c:77:8e:85:c0:80:f6:15:
22:03:a9:8e:ec:c7:72:d5:fe:13:e5:8e:c7:10:46:
65:bd:61:e4:ba:e0:e6:36:48:85:60:2f:cd:7b:93:
00:00:59:9b:0a:4b:39:92:8d:34:ae:61:8c:0c:b0:
3f:17:aa:81:f7:0e:c4:e8:f7:61:a3:ac:88:c4:fc:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:CD:E2:FB:6D:61:7F:0C:ED:9A:3D:E1:F2:06:0A:58:CB:2C:C7
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:c1:7f:1f:b7:0f:0d:dd:d8:f0:35:af:01:c2:bd:d2:76:
5b:e6:45:ff:ec:ae:e3:09:d9:6d:ac:a2:49:be:37:e5:a4:89:
89:82:1d:13:86:f3:d4:5f:94:1d:52:75:ad:1d:fa:b3:fa:8a:
93:8a:07:d6:d2:4b:6a:ae:28:69:29:49:ce:bc:3c:50:db:42:
4b:48:4c:35:6c:a0:59:db:ed:1a:35:38:f2:1b:55:f5:25:fd:
90:12:ef:45:92:7d:2a:e4:40:e7:db:15:5b:9d:83:f9:79:96:
f6:ed:4a:6b:13:50:5c:ed:86:a4:12:8d:f4:f0:71:cc:b8:8d:
e2:42:70:74:28:0a:c6:5a:a6:71:5e:d7:1b:68:30:c9:a6:cd:
d2:1c:36:55:e5:32:87:69:34:07:94:be:3b:c8:21:08:ee:f6:
e0:23:32:a0:b7:a3:6f:ab:2b:d8:a9:53:2a:68:17:50:14:16:
fb:fd:b1:97:9c:42:b2:56:97:67:c6:f0:ff:98:7f:7e:05:02:
b0:71:8e:a0:26:31:e7:9f:64:50:8d:5c:b1:a9:6b:27:a0:f1:
7f:20:c3:10:38:24:3a:fc:17:c8:c6:48:da:9f:f0:7e:16:e0:
5f:e7:35:33:61:c0:fe:b2:b8:35:e9:15:a3:ed:44:63:9a:90:
31:2a:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:12 2025 by rpki-client