Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: W9L0FOaVPnKV5my82G6X+XR0rhdnk9jyd53XJK50CXQ=
Subject key identifier: A8:DD:F8:A4:AC:5B:12:B9:C0:24:37:96:B4:13:F5:85:C7:E4:49:2B
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0194BC3C18851693D54AE30A9F096C9CF7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 03FB
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: BEEt59DP6FNYHjOke3ew8NOgIZYQoWooNrjQCHuizCw=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:18:85:16:93:d5:4a:e3:0a:9f:09:6c:9c:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=a8ddf8a4ac5b12b9c0243796b413f585c7e4492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:d8:18:8f:91:e9:7d:d0:05:70:a1:66:f0:
7a:2d:b0:d3:de:aa:db:ed:69:e8:b1:a9:a6:75:d4:
f6:35:ab:80:a1:f8:4a:0d:9c:2e:44:08:7d:ad:a6:
20:4f:2a:b9:04:2b:2e:c8:2e:af:b8:37:f1:05:d1:
42:20:3b:4d:d3:21:58:3b:bc:9f:1d:9e:f0:eb:0e:
17:7a:9a:cd:b5:a3:6c:89:f1:49:89:21:4a:28:2e:
28:f2:18:f7:de:fc:b9:d9:91:40:c8:e3:4d:b3:dd:
9c:9a:b6:5d:e9:e3:3f:83:fb:68:2c:52:4d:50:c9:
64:df:28:d6:09:46:3e:85:7d:2c:df:ac:89:ec:de:
50:17:c4:b9:a0:39:ac:5d:d9:db:a5:dd:d8:a2:fc:
0f:51:4d:a2:8f:48:5d:c6:9f:a5:39:74:9d:c9:d3:
bf:5e:07:53:b4:bb:e8:eb:f4:20:e3:3a:ac:d8:59:
7c:b1:59:6f:5b:38:2e:56:c5:e7:0e:cd:ca:57:48:
f3:ba:7c:e8:e0:3a:6a:ee:60:d3:57:46:6f:4a:f2:
71:4e:5b:f4:47:3a:c9:c3:40:cb:bb:27:80:cd:38:
af:7d:46:5d:26:23:db:99:3f:b3:bf:1e:2d:ca:e7:
a3:25:f3:c7:76:27:55:e8:76:aa:32:ec:72:f8:2f:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:F8:A4:AC:5B:12:B9:C0:24:37:96:B4:13:F5:85:C7:E4:49:2B
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:14:ad:82:37:b4:c4:26:7e:22:69:26:82:f5:ba:d9:53:
47:05:0d:74:03:e1:83:4b:a7:9b:ff:08:d6:42:3b:80:5e:c0:
56:6e:83:0e:b0:d2:42:47:07:92:92:02:50:01:5c:61:69:2e:
2c:26:b6:b4:95:8a:5b:e1:c9:0d:1f:a5:b1:de:6d:6b:5b:b5:
0a:ac:e8:d0:68:0e:87:dd:e3:00:7e:1a:21:53:92:24:31:97:
86:2f:c7:06:d2:ed:a9:a9:93:b7:ec:d7:99:48:b3:24:2b:16:
5d:d1:a4:df:4a:b5:5e:c4:e8:0e:e6:69:48:d8:ba:dd:72:f6:
80:f5:97:04:da:79:6e:f4:a7:84:ae:36:9f:f9:6d:6e:1e:f3:
fd:2f:8c:3a:a1:61:bc:a8:84:b8:cd:e8:a4:08:d8:26:df:61:
59:47:aa:ec:09:34:f6:86:e3:e7:7f:9d:97:12:a9:40:76:b0:
8c:4f:e1:56:68:fe:1c:4c:d1:20:8c:62:55:0b:f8:9c:39:d4:
5a:b1:f4:81:7a:69:3b:0d:2c:1a:62:87:8f:92:8b:6e:e8:11:
59:0c:14:c2:82:74:64:c6:c3:b3:3d:19:fa:06:e0:d6:e2:7f:
4e:0a:1f:72:da:c0:41:1e:30:9e:e9:af:77:e2:9d:8e:81:22:
92:61:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:14 2025 by rpki-client