Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
File: UFzWGp9t6drMDTySFwbffVCvvW8.mft (raw, json)
Hash identifier: ni45oQM9kN9pXoHjurL/kM9E3vJYL8AuMGhjRnv3OJI=
Subject key identifier: 67:4D:C3:9F:6C:CD:C6:6D:A2:04:C9:DC:25:71:16:1F:D8:ED:65:67
Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Certificate serial: 0194BC730DD52B6D43FD67570DCA9F4A9E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
Manifest number: 0A7E
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 02fZd277xqKcuTMYmhFfbwx9HwA.roa (hash: bemKy7xu5/Ii5zazW11+IHavu8JMVH9QIzpKn7l6Pf4=)
2: UFzWGp9t6drMDTySFwbffVCvvW8.crl (hash: Z+zwj5JbgQ7bPP401dAV+P7fww+q1877VjLSemLhEUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:d5:2b:6d:43:fd:67:57:0d:ca:9f:4a:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=674dc39f6ccdc66da204c9dc2571161fd8ed6567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:58:63:a0:a5:ff:c9:8f:6a:a0:06:f2:22:
bf:8a:30:86:2e:5f:06:86:f2:cd:ff:a6:15:7a:81:
40:c9:8b:0a:5d:c5:1d:e5:5f:42:11:d6:59:11:90:
0c:8e:79:cc:2e:b4:f6:9c:5e:16:b7:18:1f:7d:b3:
3c:95:2b:dd:33:25:57:d6:71:7d:23:4f:c7:ad:c7:
51:82:9f:02:db:95:11:09:96:19:58:ae:27:82:2f:
fb:d9:84:cc:65:80:88:eb:8a:ea:a2:a5:84:48:97:
84:7a:ec:fa:13:37:cd:fd:e9:65:36:00:f0:2b:eb:
49:8b:11:ef:e4:b0:97:99:44:6e:a8:ca:31:e4:ae:
84:6b:b9:3e:13:5b:d2:98:5e:10:8f:47:bd:9d:61:
de:28:e9:a6:00:85:4a:9e:f0:ba:af:f0:31:d9:df:
6c:33:88:8d:68:08:df:87:c5:fa:a7:d4:31:6b:db:
33:25:96:57:96:89:1c:dc:00:e2:b9:74:50:75:e7:
3a:06:f7:af:0a:15:c4:e6:e8:0f:84:1c:5a:30:ec:
6e:a3:e1:a1:d5:0b:08:59:46:54:84:9e:49:27:f3:
27:02:cf:0b:5b:38:b0:c2:1d:da:0e:e2:2f:22:63:
a8:db:c2:8a:d5:99:31:00:1f:52:29:10:36:91:9e:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:C3:9F:6C:CD:C6:6D:A2:04:C9:DC:25:71:16:1F:D8:ED:65:67
X509v3 Authority Key Identifier:
keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b4:f3:9c:83:6a:06:3d:20:c7:e0:0c:e6:fb:b7:63:d2:55:
4d:a6:40:69:27:75:20:ba:b9:9e:ad:97:70:8a:c9:60:0f:f3:
90:b2:61:f3:61:8d:bd:e1:a5:6f:b1:70:d2:fa:7b:d9:15:eb:
13:ab:c4:1a:db:0a:56:4e:cd:f3:0f:23:d8:29:2f:9e:1a:a6:
45:21:08:98:3a:98:ae:d4:a2:b9:a9:a4:21:75:8e:bd:5d:11:
46:23:ed:95:f7:87:ae:f2:65:31:7a:de:1e:4a:df:26:56:c8:
28:df:71:87:0e:23:d0:37:2b:fe:22:14:9d:2d:29:34:4e:2a:
e4:0c:21:9a:eb:ca:16:0a:ca:a3:4b:95:23:3e:d1:04:b7:80:
7d:4d:c1:6e:91:8a:8e:12:e9:a2:da:4b:07:cc:db:ad:4e:d1:
89:e8:ff:ee:6f:56:0e:48:d4:bf:79:a1:3e:16:7a:f2:c1:fb:
b0:b3:fb:e3:49:e9:9a:22:a1:53:08:d4:ff:97:5f:d1:58:23:
9a:c3:dd:d7:27:84:69:cd:91:e4:87:f2:a5:04:23:fe:13:6d:
69:73:48:4e:c6:4b:20:67:31:e6:9d:70:bc:d6:e3:42:4c:1a:
81:47:6c:59:2b:5f:47:b4:cf:e9:3a:47:dc:9e:fa:36:fa:8a:
3b:92:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client