Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File: UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier: aDBQ0Q1Oa8smGUQGQ/dNcD4uWKjSaqqrqcRiax7WFuM=
Subject key identifier: 73:99:85:07:BE:63:DE:E5:34:C9:C0:BF:D4:9C:87:24:ED:B3:FE:CF
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial: 0194BC04DD911DF6391F9BA068E9835AA5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number: 140D
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: iDTZj7Wjay7Ay+J8Xr0QqUrS8GZs++80hFLTQK7rcL0=)
2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:91:1d:f6:39:1f:9b:a0:68:e9:83:5a:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=73998507be63dee534c9c0bfd49c8724edb3fecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:e6:31:36:59:89:4a:18:8d:e8:b8:ac:cb:
61:bb:0e:96:84:2d:a8:34:e9:28:4f:97:b2:e0:55:
19:b3:4f:ee:65:6d:20:92:fb:c7:4a:b4:a3:10:c2:
f5:59:53:13:d6:58:64:2a:d7:71:97:51:fa:1e:ed:
8e:65:ab:29:8d:7e:c1:ce:96:ab:fa:52:bd:68:33:
3c:dc:94:3d:52:a7:44:89:b6:cb:fd:b3:d5:30:31:
8b:7d:e2:c8:32:51:14:87:68:40:c3:af:ac:45:1c:
f3:cc:e9:4d:ec:56:98:93:39:91:65:65:75:27:31:
f8:f1:2f:a0:5b:b7:e7:f0:41:f9:97:cf:c8:38:cb:
e2:35:e4:91:2e:98:48:f1:0e:9f:57:e7:9f:ba:58:
5a:c5:89:2a:b0:be:29:a9:22:dd:2a:6a:a4:21:c5:
89:3b:be:c7:f6:c5:e4:18:32:65:a7:7d:ce:13:c7:
f9:65:85:05:0a:35:a7:a1:b2:73:e4:d2:1c:a1:3b:
dc:e8:2a:3f:4c:4e:08:66:ae:62:33:93:93:e9:90:
8f:c4:fe:37:44:3e:33:36:f7:a4:d4:50:19:75:6e:
c5:9a:e8:b8:e5:97:de:83:69:89:58:ef:f4:cf:e3:
14:02:0d:aa:a5:f5:f5:19:6c:bb:ae:89:e2:13:45:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:85:07:BE:63:DE:E5:34:C9:C0:BF:D4:9C:87:24:ED:B3:FE:CF
X509v3 Authority Key Identifier:
keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:80:72:e4:46:bf:f7:e3:43:80:4f:7f:cb:83:1b:83:cf:
4d:9e:f8:05:71:29:85:13:79:67:f9:e9:25:0e:a0:06:ce:22:
c7:34:20:c8:3e:f8:4f:62:d6:98:99:ee:7d:bd:ee:1f:61:b2:
fa:71:10:9b:20:11:79:21:24:ef:87:ac:11:95:56:3b:bf:f6:
76:98:b1:f1:54:ab:32:60:f9:4f:9c:bd:a0:a0:d1:e8:83:55:
d1:0d:3c:6b:4c:3b:43:dd:75:4a:97:f5:ff:3a:ac:e5:bf:39:
10:b1:24:23:97:07:9c:78:0f:62:49:fd:87:b7:eb:24:84:2a:
d6:e3:be:6f:fc:58:65:6a:37:56:6f:48:56:14:9f:6a:a3:db:
17:ff:cb:93:99:aa:b7:12:94:f5:17:68:c6:1c:fa:ba:8c:ce:
04:b3:ea:5a:c8:4b:42:3e:a3:d3:40:25:a0:97:4b:d8:dc:91:
3b:7a:58:a1:0a:2c:90:65:cd:84:cb:47:72:1d:17:67:bf:fd:
fb:a8:3b:d6:08:6d:b7:5a:e4:2d:1b:79:c5:4b:1c:94:24:a0:
98:04:53:98:5e:e4:42:66:c5:16:77:4c:17:ab:fb:1f:5d:b9:
32:c5:ad:6e:00:d7:27:8f:41:1e:2c:73:1b:5b:42:3b:d3:ec:
b1:f1:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:40 2025 by rpki-client