Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: wY3dCS60xTCqStD37ZyKi0Lqby3PH4RLPPZDiaqn/9Q=
Subject key identifier: 7B:78:80:BE:CC:93:82:17:BC:E9:31:A0:12:74:4E:4A:A8:4C:75:8E
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 0194BD4E40F1E5D67904EFE47F7003C0AE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0B85
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: jFz35OX02TGR8XD4QJ3qhMM7ps13L8cFGpu9KRqvya0=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:40:f1:e5:d6:79:04:ef:e4:7f:70:03:c0:ae:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=7b7880becc938217bce931a012744e4aa84c758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:b6:9c:3c:01:2b:fe:23:5c:b9:b2:61:d1:
78:45:0c:a5:8d:77:34:21:94:f2:af:5e:b8:c8:63:
66:82:e6:e0:c2:d6:11:4b:2d:59:42:c5:d2:5c:a3:
b0:69:11:b7:b9:cd:77:52:55:2e:aa:c3:09:eb:78:
85:35:51:54:6f:fe:05:5d:37:cd:20:94:93:88:0a:
cf:07:89:bd:2f:88:cb:92:52:75:a0:a5:4f:f6:14:
27:d1:3e:e1:2f:10:34:c1:a0:21:fc:25:d8:7c:17:
da:43:bf:f5:f7:65:a3:e3:33:e6:2d:46:d8:51:8c:
41:b2:f3:b4:85:d2:56:0e:88:bf:c5:d6:35:04:25:
0c:a9:9e:be:b4:28:f1:76:a3:f6:8a:2d:3b:64:1d:
e5:5d:2c:fa:b5:3e:01:9c:70:50:a1:a0:15:5e:57:
bf:ed:a9:3f:b1:17:05:51:fa:1c:4d:20:52:88:33:
8c:af:49:99:fb:0b:d9:9a:b0:1e:a5:e6:9c:23:96:
db:2f:74:d4:d3:30:fc:e6:8e:30:4d:0b:1b:b2:7d:
d4:18:1b:2a:30:8e:3e:57:bc:01:4e:14:f2:a9:40:
6e:ac:3f:46:f6:14:83:91:7f:32:80:f8:4c:a3:f0:
0e:3c:31:b4:39:7a:9e:62:55:6f:78:1e:a6:be:f6:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:80:BE:CC:93:82:17:BC:E9:31:A0:12:74:4E:4A:A8:4C:75:8E
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:07:e3:ba:21:b3:a0:18:01:d4:f7:01:30:73:23:19:d4:
7a:1e:5c:29:3f:96:09:a7:34:0b:c0:f3:22:0a:27:2d:2b:a5:
51:87:9c:03:c4:04:d7:9f:83:15:e0:3f:6f:d3:dc:b2:fb:e2:
d0:9d:46:7f:6e:2f:f7:8f:44:54:44:81:17:03:53:5f:4e:1c:
b4:57:35:5a:88:f0:aa:c0:8a:dd:e8:eb:b9:c0:67:57:40:ec:
16:5a:0a:1f:78:25:87:27:a5:f7:22:a3:72:58:0c:a2:88:d0:
82:c8:a0:0f:c0:a9:1e:43:ee:a6:56:4d:cf:82:6a:07:69:0c:
3f:2c:7f:08:6f:d3:85:77:bd:ba:98:70:80:8a:0a:02:9e:49:
13:ac:14:fb:68:58:2f:6a:45:86:16:46:37:ee:c2:67:56:15:
90:8c:17:82:86:cc:86:31:fc:b5:cc:f6:cc:8d:b2:46:50:f4:
bd:c4:e2:9d:69:44:31:72:38:92:98:8b:3e:99:b1:da:fa:dd:
b8:5b:21:22:01:cd:9a:76:2a:73:48:83:59:49:2e:20:fa:c3:
9e:d7:b5:db:c6:20:53:8f:d0:f2:93:1d:9e:32:47:c3:d6:71:
de:f1:06:7c:da:04:c9:81:8e:99:cf:48:8e:80:17:67:3d:93:
0c:6d:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:19 2025 by rpki-client