Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: eyFU7Xg8AqOVy7GWTFxSeQMocpjuiotQh7Rkqeyx9n0=
Subject key identifier: FE:F3:C8:5F:B8:70:DD:2E:04:DD:DB:48:85:1F:C7:B9:5C:49:0D:B4
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 0194BC04FBC12226DE5D30521ECE2BFFB9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: TBLtEhOMq4blvsZO7wKJsRQWAATnJIBtiBn5DfjEoqw=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:c1:22:26:de:5d:30:52:1e:ce:2b:ff:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=fef3c85fb870dd2e04dddb48851fc7b95c490db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:9a:24:d8:cb:aa:c0:2d:5d:39:d1:44:e0:
db:00:3a:8c:07:1f:a1:d4:e7:aa:0e:a4:4f:5a:c0:
96:65:2b:1b:5d:f9:e1:78:91:9c:48:c1:bd:27:14:
2d:bb:ee:13:b2:6b:3c:32:45:41:f3:fa:9e:f7:34:
03:78:7f:cb:f9:eb:b8:99:e4:79:8e:02:a5:71:8d:
10:96:87:51:e3:66:13:64:39:f8:b4:9f:a0:e9:5f:
c3:4f:c7:4e:f3:e3:8a:c1:59:97:14:ae:e2:dc:d3:
53:12:81:28:79:b9:82:0d:03:af:75:34:40:4a:b9:
31:54:f5:2e:ed:0b:b5:64:97:44:bd:a1:9b:38:a2:
83:93:61:2e:ef:fc:9c:f8:0e:4e:4d:4e:de:e7:5c:
52:49:8c:94:d7:e6:a1:d8:7b:75:73:cc:10:69:4d:
80:32:56:73:d4:7d:85:da:fd:9e:b8:b3:d4:c8:b4:
c0:de:4a:43:a7:c7:a1:4c:83:be:2a:a2:0d:ee:c9:
ed:ab:1c:18:be:85:5f:6b:cd:9f:2f:97:75:95:55:
74:88:19:07:49:34:b1:4e:f4:a8:e0:fd:63:ed:3e:
3c:81:3e:45:e3:84:5d:3b:34:46:4a:72:ee:99:7b:
90:e4:ad:72:c1:f0:ba:da:12:c9:4e:5b:17:20:b5:
68:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:C8:5F:B8:70:DD:2E:04:DD:DB:48:85:1F:C7:B9:5C:49:0D:B4
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a3:71:b8:e6:04:f4:58:d1:75:c2:4a:35:91:77:c7:6a:46:
5e:26:0f:f3:a4:78:49:5d:bc:a4:e8:35:21:1d:4d:2f:84:4b:
6f:50:89:ef:29:d9:32:32:cc:7f:ad:94:06:6a:32:65:78:c6:
83:3d:43:cf:9f:1d:fd:54:8a:b1:71:da:49:ca:a5:c3:4b:54:
0a:2a:48:01:d3:85:a4:10:4e:69:66:e8:da:d8:76:91:13:b0:
37:45:ca:11:be:df:b3:9d:cf:5f:22:82:2f:c5:bc:02:30:59:
e7:a8:36:77:96:66:79:34:77:5c:54:d8:bf:d0:8d:a3:1d:6e:
d3:cf:73:5c:15:77:35:20:c4:25:89:d7:59:dc:45:44:4e:f1:
db:7f:8a:31:8a:c6:93:32:8e:34:92:50:a0:92:2d:d0:ef:c3:
e9:42:39:02:f0:71:9f:28:bb:88:38:37:ee:61:7c:d3:7d:99:
b6:75:f5:72:ef:d0:9d:93:ea:f6:ab:8d:a0:8e:37:4b:8b:3a:
7c:8e:0d:37:c9:52:e7:44:9d:56:36:2d:0a:67:55:7b:68:03:
a6:ec:78:f8:da:a6:44:05:41:72:bf:80:bc:e3:7d:5e:71:00:
fa:32:86:11:a1:ee:a9:bd:00:65:7b:88:49:2a:df:f6:f5:9a:
83:41:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:28:20 2025 by rpki-client