Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: G7P0j+kej0qwytiyuhZdCGCeLF4/yxyXfHguticj4G4=
Subject key identifier: 2E:59:27:CC:97:B8:94:BC:6A:40:1F:C8:27:67:CE:78:50:CF:6C:98
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 0194BD852989720E7580F6F46CAF3CB60652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 0CE6
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: P77Q3SiMGocGRB6eMcUK3MHjTkI.roa (hash: s4PL8KdADdPsj9L9e3HHEkTIVlBNiN0s/bQOnwu+zOw=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: 2gxYpH+1XTf2O0JWChvP9JynJB1N1TS2reQdGL6827A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:29:89:72:0e:75:80:f6:f4:6c:af:3c:b6:06:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=2e5927cc97b894bc6a401fc82767ce7850cf6c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:0b:4d:9a:fc:77:09:f0:cb:8a:93:38:0e:
9e:94:2a:8d:61:98:07:d7:26:fe:e7:b8:0f:6a:2d:
30:b6:28:dd:43:f5:90:ad:9d:d4:8f:4a:da:66:52:
9d:88:7f:5f:18:b9:6e:22:69:a4:c7:da:06:41:e8:
04:c9:d3:f4:71:67:08:bc:a6:a5:70:f4:3c:48:8d:
aa:27:25:eb:ab:e1:d8:f9:30:a5:62:2e:9c:9c:73:
cd:ae:d5:9e:f8:71:4a:03:58:04:be:82:f5:59:83:
59:f2:9e:85:d9:61:e7:a3:91:1f:cc:05:c2:c4:0d:
49:04:48:48:ed:8a:7a:3b:c2:3b:09:b0:39:7f:99:
29:b1:9e:1f:c0:81:df:a4:dc:7b:9b:9f:b4:ce:af:
a5:af:21:52:aa:a7:07:04:9a:54:11:27:81:cc:51:
9e:14:cf:af:89:ba:e7:ce:17:da:1f:11:95:3a:b8:
11:e6:d0:63:e4:67:2d:79:92:f3:09:a7:95:5e:63:
26:36:af:2f:e3:6d:61:ff:66:f2:d9:e5:a7:7c:89:
5c:17:59:81:d3:ee:30:e5:0e:40:2b:3d:e7:d5:94:
9e:f2:33:af:a1:06:7e:35:df:a4:87:2d:aa:17:5f:
49:e4:0a:6b:48:a7:d3:bc:70:05:70:96:e1:c8:6d:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:27:CC:97:B8:94:BC:6A:40:1F:C8:27:67:CE:78:50:CF:6C:98
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a3:5e:e2:fa:2d:02:34:c5:c3:c9:d7:9a:5d:cd:79:b4:fd:
03:5b:78:24:ea:75:a6:7f:0c:51:ef:14:03:5c:90:18:4c:75:
1e:5b:83:7d:9c:d3:00:30:3f:47:9e:1a:73:5f:6a:bb:4b:7e:
d7:0d:2f:fc:fc:c4:2f:33:87:81:b9:1d:d2:46:88:78:d3:09:
6e:43:bc:78:ae:71:57:c0:21:8a:aa:d6:a0:70:65:f6:37:d2:
0e:33:5b:4b:8a:00:d1:51:e2:da:93:14:50:07:e7:7d:8e:94:
bd:92:73:df:1d:20:69:42:6d:df:e1:62:ae:77:50:7f:46:a9:
46:d7:0c:43:ad:24:f1:8b:2f:a7:2e:31:b4:10:8c:ec:f8:db:
93:e9:f0:6f:00:a8:7d:cf:be:08:95:fa:24:9c:9f:51:bf:c0:
5b:39:9b:9e:cf:73:0a:ce:cb:87:f1:ce:d5:ca:0c:b1:59:ff:
53:d0:12:f9:52:4f:3e:9d:b6:0b:97:c8:5f:de:97:8e:81:29:
d7:4d:9c:7c:2d:e9:dc:4a:ee:e3:28:87:d3:ae:eb:56:89:fe:
45:e0:06:7a:5f:20:a5:96:db:b3:a7:b2:90:f9:a2:df:ec:dd:
3d:72:e9:91:06:a3:99:26:21:cf:e4:2d:91:a8:d8:0b:02:3d:
46:a6:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:43 2025 by rpki-client