Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier: tDNgSVc2TdbYRelXL8nrSwzOKbdv2UpALw5uT6j/eFc=
Subject key identifier: E7:09:76:B9:69:04:18:C0:93:36:35:94:AB:DD:F3:18:70:CF:AE:5B
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial: 0194BCAA2E1135A1168395CB84E6B80262A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: SI9fzUx0ACAbjZkpE+jJvu6ZUwZblpORlbhHcXssFOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:11:35:a1:16:83:95:cb:84:e6:b8:02:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=e70976b9690418c093363594abddf31870cfae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:9a:6f:c0:e0:43:78:0c:40:12:31:87:ae:
51:ac:30:a9:23:1c:4e:ab:ad:8d:68:23:5c:6c:c0:
03:aa:18:95:ac:17:cc:11:a9:03:96:54:a6:2a:3d:
74:23:bf:43:32:f8:8d:39:54:ac:b1:d3:cf:bc:d9:
86:7a:c3:d2:ed:3b:64:9a:60:b4:f8:d7:d8:ad:e1:
76:8c:24:75:6b:4e:24:dc:b0:f9:5b:80:28:ea:e7:
04:5a:4e:36:c8:a8:67:d9:61:a4:17:99:c3:76:96:
29:62:56:34:23:37:46:7b:98:e4:82:1f:6c:79:0c:
71:c9:87:8a:f6:5e:ed:c0:ed:18:a0:b0:f6:2a:af:
45:b8:77:6f:12:d0:3c:ac:4c:9f:fb:6b:fc:a1:9b:
d3:19:b1:2c:24:20:c9:81:a3:18:fa:12:02:2b:8a:
7d:39:14:28:0c:4c:ce:09:75:74:16:00:f2:3f:16:
cf:a2:94:fe:c5:d3:e4:b0:a8:b9:35:27:95:b5:f3:
43:ee:e4:5a:b3:64:be:f0:2e:74:ae:a7:5f:c6:60:
68:98:7c:bd:24:bc:39:68:39:22:a8:1b:1e:0b:6a:
ed:6e:c7:dc:28:b8:86:5d:28:26:8e:6f:8e:3e:12:
1f:09:7c:97:f5:a5:0e:e8:cc:6c:90:dd:cc:59:0d:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:09:76:B9:69:04:18:C0:93:36:35:94:AB:DD:F3:18:70:CF:AE:5B
X509v3 Authority Key Identifier:
keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6f:d6:96:6d:dc:65:b6:18:a5:3c:0b:b5:49:b8:f2:73:a0:
94:14:49:f0:5b:a7:94:50:72:63:93:ce:79:05:48:f1:a2:52:
91:96:41:52:40:5a:dd:65:c1:e1:6d:a5:08:70:cc:9d:4f:9d:
e4:5e:bb:7e:a1:70:3e:ee:6f:49:70:2a:3e:53:d4:8f:4b:e5:
77:36:b6:7a:ea:2f:e6:56:74:b7:f3:72:77:3f:56:47:ce:82:
33:ae:a3:c4:e5:da:c1:c6:8f:f9:63:66:8c:54:0e:cd:bd:57:
83:f6:9a:68:5f:37:15:36:36:78:44:1b:21:22:b7:cf:d4:70:
07:a4:ec:92:d8:17:31:99:65:37:ae:9d:d6:c9:21:0e:1d:34:
83:c1:14:bc:46:4e:11:25:6a:5a:ef:48:27:90:ba:29:65:c7:
03:ba:78:d2:8d:7e:b1:f2:58:31:db:91:60:a1:a4:f1:d3:0c:
1e:9c:c3:ac:de:80:91:e9:16:34:da:84:f8:16:cf:18:eb:70:
32:b2:3b:af:72:d7:8f:99:db:80:4c:f1:a9:fb:be:4b:92:e6:
ef:a6:3d:da:ed:5d:80:cf:7f:d4:49:fd:57:a8:a5:bf:4e:93:
b5:42:37:8e:11:7e:5d:5b:66:b0:fc:67:90:77:67:69:67:76:
cb:b6:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:04 2025 by rpki-client