Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: e0wH0M6ZdCchYbMK66iqUFHPkXwdEpb7q78JkZ9noGc=
Subject key identifier: 0A:83:2B:1D:68:AA:CB:D0:4A:C3:D4:0B:91:CF:26:16:28:C1:FF:6C
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 0194BCE0864A459D4DE12AC8BB6714D3E2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: GUe8adHU4fX4MZDCu48u0IgQw2BHPyT9T8g663PyF2o=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:86:4a:45:9d:4d:e1:2a:c8:bb:67:14:d3:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=0a832b1d68aacbd04ac3d40b91cf261628c1ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:56:aa:d7:d8:0a:74:09:ad:14:17:3b:df:
07:b0:1c:c9:1f:47:0b:9d:15:8a:e5:d7:6a:5c:55:
a6:3e:e5:52:f3:4f:7b:8a:a7:36:08:88:92:78:db:
7d:91:62:b4:a8:b9:9c:8a:0b:56:8f:60:7e:0d:f2:
8a:12:52:ff:8b:cf:bd:d1:19:61:d0:6f:df:85:01:
51:35:6a:68:9c:f8:0a:c6:23:b3:0b:f7:f1:f5:83:
71:ab:82:c6:7b:38:09:26:50:a5:b5:e7:81:b4:2f:
74:e4:de:e2:40:38:e5:5a:91:77:1e:00:74:90:77:
7f:f9:d5:e3:6b:d6:7a:7a:31:88:92:29:60:04:18:
5a:4f:45:b7:32:4f:4d:72:59:ea:6f:89:2a:0a:4e:
e7:52:e1:78:29:a6:fe:f8:05:39:08:1b:56:c5:49:
fc:3c:71:9b:75:cd:04:65:c9:da:54:7e:49:f0:49:
4a:2e:0e:08:13:34:fd:06:c4:7f:66:5b:f3:36:4a:
02:26:e0:6e:e7:14:83:8c:9f:7c:09:b7:0f:26:9a:
68:53:e1:18:5d:8e:20:43:38:97:1e:ef:75:97:ab:
32:89:d7:2e:54:cc:5f:10:96:e2:b2:eb:69:e3:52:
1d:01:b4:5b:5f:26:11:68:64:bd:8c:fd:2b:a3:1f:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:2B:1D:68:AA:CB:D0:4A:C3:D4:0B:91:CF:26:16:28:C1:FF:6C
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:41:82:b4:4f:cd:0b:8b:b6:e1:91:c0:32:c6:46:ff:b6:2d:
5d:db:03:e3:8f:c6:83:f4:c6:a6:27:2e:6d:61:cb:37:a6:80:
6a:d3:34:1e:0b:47:27:ec:11:7a:5d:de:3f:b8:d9:67:9a:60:
94:c9:1c:fb:88:8e:3b:d0:eb:fa:08:36:e3:2e:28:c0:76:ab:
11:8e:60:8b:02:d4:03:53:35:37:47:c4:4d:c5:b6:94:8d:9e:
2d:98:c1:e0:ca:5c:33:e6:71:4d:12:66:16:bd:60:7e:cc:1d:
41:46:35:e6:bb:63:ef:66:7a:25:64:e3:1b:ce:ee:08:99:e3:
3e:ee:fb:3c:cd:54:40:03:67:a2:44:b2:05:04:f6:cc:30:4f:
ab:a8:9d:ee:28:44:26:c0:8c:8b:f8:f7:51:9d:66:55:ce:b6:
68:1c:ef:98:7d:8f:8a:47:c1:e0:0f:12:c4:0d:71:a9:98:f4:
01:4c:4a:b7:d0:60:5c:eb:0d:d1:2f:50:bd:bb:e1:ac:49:11:
67:44:cd:17:1f:54:b1:08:c2:9a:44:4c:ed:5b:ba:32:91:b1:
f2:6f:05:c5:e1:16:f7:fd:82:3f:e8:22:f0:93:8b:e8:eb:88:
87:f4:e4:91:c0:0d:6f:39:dc:e7:66:c4:e6:87:0f:de:f8:0d:
91:f1:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client