Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: w+9wBgajlFMzaQ9kAZKrXUjRQtpfdEa8yRC2mTjO/EM=
Subject key identifier: 28:66:B7:12:0A:D9:52:B9:58:E6:51:21:F6:6F:D9:8E:99:41:04:66
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 0194BC7301E89BE455B22AA7CDF2192B3EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: DSQTMME8p/P7s9xk5fOr+T27BiLus6CxMsz7fKrkz0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:e8:9b:e4:55:b2:2a:a7:cd:f2:19:2b:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=2866b7120ad952b958e65121f66fd98e99410466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:56:1d:2b:f7:b7:cf:30:e5:61:ca:73:33:
4a:f8:59:39:a6:3e:73:2d:ae:08:9c:00:27:3d:5a:
5c:01:32:1c:31:ba:de:53:bc:fd:56:4a:45:6a:58:
8d:6c:0a:44:f6:fe:aa:09:34:80:ba:fc:f0:a7:b0:
35:eb:2c:bc:16:f8:18:44:1f:2a:8d:d2:ba:67:7c:
8e:94:12:40:2f:c9:ad:01:5f:8b:94:ab:c4:f0:f3:
00:63:b2:c1:ca:dc:9a:7a:8d:de:72:25:d4:03:f1:
ea:ac:40:cf:4e:d6:a4:8e:f4:cb:fd:b0:0d:29:3e:
b8:1a:29:78:f7:cf:aa:e3:1b:75:9e:6b:c8:04:65:
ba:0d:9c:3e:2a:ca:13:14:a8:e7:4f:35:55:f8:5e:
7f:89:f4:8c:ff:a8:b6:e0:9f:91:61:1b:37:f0:69:
d4:80:bc:e3:92:2c:a2:ab:58:6d:93:2c:d2:25:f8:
42:2b:cd:bc:b5:38:95:a4:a9:74:23:d4:78:57:ef:
f0:74:61:d9:27:3e:ed:0f:14:22:fb:9c:68:6a:6d:
93:09:1b:64:6a:ca:32:1b:50:ac:37:0b:cc:08:c4:
ae:da:6b:b7:d6:87:e5:8f:66:81:e2:c0:04:56:b1:
4d:f3:20:a7:fe:ca:4c:29:2a:60:05:6a:fd:86:05:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:B7:12:0A:D9:52:B9:58:E6:51:21:F6:6F:D9:8E:99:41:04:66
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8c:af:08:80:02:1a:68:4a:bb:5d:ea:35:2d:9c:48:cc:37:
ca:74:e0:08:6e:c8:d9:84:42:d0:65:ab:2c:3a:48:b1:0c:71:
39:f8:b9:2f:ed:80:fd:41:13:a6:96:32:3a:03:fb:2e:25:95:
84:23:a6:2f:93:a5:fc:13:21:08:3f:fb:a7:7c:f3:31:32:96:
30:a2:0e:ca:14:35:45:38:25:7a:99:a8:da:81:1c:59:52:d6:
9b:78:cc:a0:cb:bd:5e:91:42:a0:75:43:a9:cb:d9:54:ec:95:
d0:be:21:0a:42:40:02:2f:08:98:29:97:96:db:dd:31:b5:84:
e1:19:79:8a:49:3d:1b:17:28:58:82:09:5e:36:04:31:ec:ca:
bd:98:21:bc:c5:1d:92:c6:67:98:ed:7f:9a:c5:57:d3:83:d9:
68:cd:02:07:0d:4a:b9:71:b5:98:a8:92:b6:d5:c3:4f:ad:ac:
a6:e4:2a:83:bb:5d:0b:0e:ea:08:35:71:04:2e:0e:09:21:bd:
f3:70:cc:c4:1c:3c:59:80:20:ba:68:a1:bc:e3:67:68:69:40:
47:98:70:ca:78:d0:9a:c6:f7:35:8f:12:fa:c8:07:b1:73:09:
e9:4b:c8:55:5c:75:45:b1:ae:9f:43:8d:9e:fb:c2:4e:5c:dd:
82:cf:84:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client