Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: eNypr04v0g9ig7J+5p+GMOmXN929bdyygFbW2PDXXTo=
Subject key identifier: 4F:DE:CC:F4:A6:F9:C9:37:81:8A:A5:62:74:42:C1:C9:59:F5:A7:EF
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 0194BCA9A6927CAFAA64D9BA2E04467B969C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 075C
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: /K33IvRyNyoswwDxSQ3BiVH2pp+xJY8/kOrtU1jT+IA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:92:7c:af:aa:64:d9:ba:2e:04:46:7b:96:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=4fdeccf4a6f9c937818aa5627442c1c959f5a7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:a7:ee:a1:f7:24:b2:2d:f5:e0:67:d0:c8:
0f:a6:40:20:2c:db:aa:aa:2d:5b:22:86:af:20:e0:
f0:b3:89:27:ec:7a:0c:7c:d8:5b:c6:0e:5f:5a:64:
dc:3b:3d:e3:c8:38:aa:30:c5:77:95:cf:59:ea:9f:
e2:71:13:09:74:03:c3:64:7f:fa:80:24:2e:ca:7b:
24:37:f1:41:f8:5c:63:7c:9b:2b:27:09:a6:ed:f3:
6b:4d:59:af:02:bb:77:f8:47:82:12:e9:f8:8b:24:
e9:64:77:64:cc:9a:0b:26:02:8a:f2:9d:69:7f:49:
d9:8d:18:28:c6:87:1e:ff:ac:31:18:66:f1:80:5f:
45:0c:bb:65:08:7a:35:71:d3:60:b3:2b:cd:86:3d:
e9:da:93:03:b4:e3:39:29:0c:df:67:53:53:0e:96:
fd:33:91:15:7e:18:5a:98:25:14:ef:85:de:5c:1d:
90:b7:da:70:ee:88:bd:06:20:eb:f3:55:94:c5:4c:
cf:e2:23:90:eb:d5:58:bc:00:bb:a8:3d:b8:ef:98:
20:ef:d5:71:be:1d:ed:58:ed:66:28:51:ee:0e:e5:
4d:22:c9:20:f3:8d:10:0f:8f:4f:91:86:4b:7c:c9:
0b:ae:bb:f1:f4:7f:84:42:c1:86:c0:6d:23:af:a2:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:CC:F4:A6:F9:C9:37:81:8A:A5:62:74:42:C1:C9:59:F5:A7:EF
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:4e:a8:ec:eb:00:89:31:7d:24:79:9d:35:fa:0d:7a:8d:
5e:cd:57:d2:d2:41:d3:9e:e8:58:25:7a:6c:85:ec:a9:49:af:
13:ab:6e:6c:8a:6d:6e:23:39:48:af:07:aa:98:2a:21:27:69:
b5:16:5f:68:4b:02:af:6b:22:bb:2d:da:91:e1:3c:bf:51:be:
6a:3d:d6:91:fd:5f:c3:0a:e5:1a:0f:08:59:07:cf:04:a8:c7:
87:83:96:98:35:a1:de:fc:51:c4:55:03:38:f5:72:fd:0b:a1:
d2:91:92:d3:a1:cf:b7:89:1f:05:cc:7c:cd:be:f8:1b:ed:88:
cd:55:51:aa:0c:d2:b9:1f:4d:ec:45:ab:79:f6:f6:37:7c:a8:
57:34:8e:5e:67:fc:4b:33:da:40:bc:cf:95:53:78:db:9e:5c:
ca:a4:c2:7c:61:ff:25:23:4a:8c:72:12:0f:56:66:77:ca:e9:
73:4c:9f:81:ea:56:44:f3:56:e2:9f:33:63:84:0f:79:6c:7e:
1c:11:f2:16:cb:66:18:de:38:a4:97:15:d1:f2:58:43:7b:90:
50:03:7f:7b:95:f7:a1:1c:54:c8:e2:25:1c:4f:d8:40:a1:a7:
f8:49:3e:37:81:49:30:0a:4c:9d:be:d0:8f:cb:49:ae:55:d2:
da:c6:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:20 2025 by rpki-client