Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: MpwY3N+rSF10WYDFzym4HbF+ICqYEIqaHRZIy7NgU8w=
Subject key identifier: C9:0B:F8:23:57:B2:EC:D4:0C:4C:77:B1:24:5B:91:4D:D9:7E:E8:18
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 0194BCAA1C41F728EE85CEA3CC665C4549CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: E5
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: RnwjYMD2WR5JlDjtkfTyMJ3PNjc.roa (hash: 3aqPiO+RjVlTlzU+NaBL+QR3qjiXb7dyzFOn7QHqZP4=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: 9f5U0ahBHgjKbR9llHHlxNCD+Y4mR+g/QSOjsB/gP6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:41:f7:28:ee:85:ce:a3:cc:66:5c:45:49:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=c90bf82357b2ecd40c4c77b1245b914dd97ee818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:ff:f4:8d:e6:51:ac:97:55:a8:12:81:73:
e1:52:e4:e7:69:68:0b:e0:cf:37:ad:20:f6:eb:2d:
d0:9b:37:75:a8:fa:4d:5a:e1:d6:ac:d6:27:cb:e3:
c7:60:bb:a8:a2:3e:74:cc:36:00:75:8c:83:f6:d8:
0a:b7:7a:4d:e3:97:2e:1b:64:d9:8c:29:58:15:4a:
e1:cc:11:bb:b9:34:07:9b:f5:c4:3c:35:62:ae:74:
57:85:1e:f9:cc:fa:88:27:8e:12:bd:9a:22:8a:42:
1f:c6:21:43:ed:d0:69:a4:e3:1f:15:57:4d:f1:65:
37:a0:88:5d:f9:47:cd:ec:f6:f1:39:29:f1:ca:f1:
a2:cf:3b:c4:8d:c1:d8:52:0a:50:fd:42:db:e1:79:
eb:c9:ab:b6:c1:76:95:45:89:11:4b:88:87:bd:18:
0c:bc:b6:f5:0f:86:76:40:d9:39:87:95:98:e7:52:
4b:d7:66:62:fc:7e:b4:e7:1f:86:c1:21:0e:2f:14:
af:74:b1:58:f4:18:e4:07:23:ba:02:c9:a9:bd:ba:
af:6a:a8:c6:2b:4f:37:02:3f:2d:3e:c5:11:c8:43:
00:13:16:72:bb:65:83:44:6d:cf:50:46:c3:b1:07:
a7:a3:7c:9e:15:ad:a0:ca:60:f8:88:46:c6:21:f1:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:F8:23:57:B2:EC:D4:0C:4C:77:B1:24:5B:91:4D:D9:7E:E8:18
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:41:dc:44:83:27:c1:0a:6f:53:17:b7:64:ac:96:d9:0b:a4:
3e:53:05:97:4e:e3:2b:de:10:2f:5a:3d:ae:d4:b4:ea:fe:2b:
b2:c1:b8:f0:cf:20:49:15:99:1f:53:5d:0d:3c:ee:0d:3f:c7:
a5:d5:8b:fa:b1:bf:a6:88:19:1e:62:6e:98:7a:f8:70:ff:d5:
63:27:13:4a:d5:78:5d:43:dd:e5:9a:c0:7e:c8:cf:5c:43:b9:
62:57:15:46:12:e2:0b:42:f8:00:5a:41:73:e7:1f:e5:34:0a:
38:9f:9b:2b:f9:b5:aa:9d:d3:52:a4:84:2d:f4:51:22:54:1f:
1e:e9:79:38:4e:12:8c:7f:d2:05:eb:b5:fd:04:f9:20:77:51:
d5:98:63:7b:6a:db:a4:50:f2:47:e3:b4:c6:6b:66:c4:73:f1:
a1:b8:b2:b3:b2:b4:9b:4a:e8:1b:3e:1c:ad:26:97:0c:50:a3:
3e:5d:21:2a:e7:49:9b:98:6c:87:da:86:09:d8:f4:31:78:de:
9b:25:7c:66:cb:93:41:c6:d0:18:cf:41:23:c2:79:88:e1:b5:
c5:a3:72:e7:90:2d:ac:f5:98:ea:b6:09:6e:25:5e:f5:cb:8f:
00:67:6a:a8:b9:4c:e5:3a:3f:a6:fb:db:1b:35:61:cf:a1:ef:
52:0e:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:31 2025 by rpki-client