Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: 18XsHdEtmS91tcgM2Fj/hXlUrv9ybA0G5+HXU1rfvy0=
Subject key identifier: 33:37:D1:0F:97:9F:00:C2:FB:7E:4F:CA:2F:CC:7A:B5:7C:05:8E:54
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 0194BC04A35A068F409D084DC1071422EA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 02A7
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: AHKOzgYDCyvjAkh-ui4tIs6DkuE.roa (hash: 4hfOmwMTypbmuLmMH8Qfr5/pQbm/yaKEh2rP/ouR/uE=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: iXnQxb9miaNpnGqGYAP4InE5/WZqpSRtPxhs9y8T7WQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a3:5a:06:8f:40:9d:08:4d:c1:07:14:22:ea:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=3337d10f979f00c2fb7e4fca2fcc7ab57c058e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:da:fe:87:5c:d1:d0:01:ec:de:65:70:f9:
39:df:32:b8:ac:a4:75:c0:90:59:88:71:bb:be:ee:
e7:3d:28:5b:0e:8f:f3:d6:76:9e:3d:d9:15:23:12:
0f:88:8e:2d:c2:74:49:83:60:09:2d:95:ff:cf:f7:
23:a7:5d:a1:d7:58:75:e2:b2:ff:63:e4:45:d5:96:
a6:4e:03:6e:a5:e6:64:5b:e5:0e:90:fb:df:15:5a:
74:17:da:9b:31:cd:d8:b3:84:d8:d3:7b:db:ba:e8:
ca:45:44:2d:dd:45:86:8b:20:90:79:4c:bf:20:e9:
be:cd:7b:f5:3a:16:fb:1e:18:87:6a:3b:36:f5:eb:
d3:41:9e:e6:aa:ac:cf:91:70:73:3c:2c:b4:17:ba:
3f:a2:20:e3:b6:be:b0:3c:ea:d4:97:70:1a:95:80:
bd:15:f7:5c:39:6a:95:c2:81:26:64:00:ce:eb:d0:
17:d3:b9:15:cd:74:b8:ae:2d:b9:a7:23:62:08:12:
b2:26:3e:dc:b3:a1:48:79:6b:6b:36:6e:f5:84:d5:
fd:26:2e:82:7a:d0:d6:5f:21:19:d3:dd:0c:e1:c3:
82:6e:a3:96:2f:95:8b:d0:02:9e:08:43:f2:64:8e:
61:bb:5d:d3:0e:6e:16:39:0f:f2:a7:fc:bf:3c:48:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:D1:0F:97:9F:00:C2:FB:7E:4F:CA:2F:CC:7A:B5:7C:05:8E:54
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:96:b6:ec:20:76:98:b1:aa:5a:63:29:26:1f:e3:12:ea:a4:
98:1d:6e:7c:5d:e8:66:32:40:db:fd:c2:44:a1:87:ce:54:4f:
8b:3a:46:4f:9f:56:50:3d:7f:d9:17:40:6d:d5:f3:e6:e4:90:
06:4f:9f:a2:c8:f1:ce:b2:ec:de:b5:a1:a1:e5:14:01:18:d5:
c9:c4:52:4a:51:2c:84:ba:b2:2c:a1:13:5d:db:f3:b5:e4:85:
e7:5a:5f:dd:5c:7b:74:f3:13:3d:d2:50:45:4e:13:9b:1c:df:
d4:3c:61:f4:8a:93:47:ac:49:47:8b:6d:61:6a:af:f0:2c:56:
db:76:fd:13:ac:62:69:cd:b6:95:74:b9:ba:f8:26:f5:33:a2:
e4:78:06:1e:3b:1f:1e:ac:57:ec:5e:cd:11:8c:9e:f0:3a:c2:
da:85:95:20:f0:8f:ee:21:8b:33:3c:d0:2a:61:53:df:96:95:
ce:54:e5:45:07:61:52:ce:85:e3:5a:f3:b2:e1:e8:7b:a6:67:
a5:79:45:c0:1c:33:65:80:3b:8f:2e:08:d4:23:92:fd:84:d2:
8a:77:4f:56:72:6b:6c:d2:67:4d:15:cc:8d:80:eb:de:66:02:
6b:0f:1d:46:dd:70:a5:51:cd:43:4d:2b:e0:7f:10:0d:28:67:
5c:54:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:31 2025 by rpki-client