Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: xlWY4xTc+0DAk8kAC9WrV1RtwPFMD84aGEg3k7a78lo=
Subject key identifier: 34:8A:74:05:77:79:68:1D:F6:BF:93:20:0E:48:2B:13:AB:D3:22:8D
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 0194BBCE2D209DC38BDC34BA015611ABD365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 0BAD
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: 9wCXZrqjgpFwlr4fLh8K8ESQrmkoWXzF6SfwNvTv7iY=)
2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2d:20:9d:c3:8b:dc:34:ba:01:56:11:ab:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=348a74057779681df6bf93200e482b13abd3228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:3c:b1:1a:e1:eb:c1:2e:cd:72:21:e8:fc:
c4:0f:d0:d4:f2:70:7a:e8:4a:c0:0a:a0:47:b1:ef:
cc:12:36:c0:0d:7b:24:4d:71:c6:5e:f3:76:49:83:
59:dd:97:26:5c:83:19:ff:c1:ef:4b:cb:67:c3:a9:
24:b8:f3:a1:1f:04:cc:e2:46:1e:2b:be:c9:d3:63:
94:9e:bc:5a:74:9f:c0:0a:ef:c2:53:7c:96:fe:61:
1d:86:e3:31:5f:15:07:a6:32:65:42:d8:21:6b:33:
ce:d7:58:93:d4:7f:2e:5d:9a:82:bf:d0:d5:3a:d2:
69:ef:a3:26:bd:60:dc:dd:b8:aa:67:34:22:d5:74:
1d:35:7c:c7:b8:ee:88:61:c8:c8:6e:c4:fa:5e:04:
ab:3f:22:27:70:73:0d:a2:9b:09:57:44:2c:46:08:
2c:9a:1a:ba:4b:a9:7b:56:c4:01:1f:4d:17:7c:a3:
84:fd:44:43:22:e1:a7:85:b2:8a:b8:05:e2:da:8a:
58:d0:d8:e0:3c:4f:2c:a2:2f:a0:1b:8b:15:21:79:
f6:07:8e:84:44:79:15:b4:74:9c:b4:8e:3f:f4:83:
c4:2b:36:67:83:31:2a:1a:f2:de:e2:03:21:9c:29:
ef:53:da:a3:7e:f8:e6:8a:2c:ab:a4:13:92:fd:01:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:74:05:77:79:68:1D:F6:BF:93:20:0E:48:2B:13:AB:D3:22:8D
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cc:9b:18:b0:6f:a5:69:ee:1a:d1:b0:6f:99:c0:95:40:43:
a6:7a:81:19:11:c9:9d:51:e7:7c:01:d0:65:33:b3:5a:bc:6d:
f8:a9:20:35:14:bf:c0:7f:68:02:85:89:c8:5c:cd:f7:86:72:
b3:b8:d2:61:5f:99:02:dd:75:13:d2:b7:b6:8c:40:54:fe:d9:
11:a5:80:92:3b:4d:54:a7:b5:c9:55:5f:8d:2e:1b:85:fb:6f:
e7:54:0f:d1:e0:be:c1:d0:05:5f:cd:9b:84:d1:26:47:fd:af:
ba:dd:12:07:ea:1d:32:5c:64:5d:ae:98:d4:6d:42:dd:8b:23:
50:d5:b7:4e:a3:1e:a7:6b:e5:26:ad:d5:3a:f6:f7:09:74:c6:
97:c8:3c:c2:b8:81:41:ac:90:54:5c:c9:b3:26:72:5c:80:8a:
87:09:a3:23:2a:c2:dc:d1:7f:9a:54:ea:f1:87:38:b1:33:76:
c4:aa:bb:f6:06:c3:c1:8a:79:e9:b6:5b:1f:71:59:96:09:a3:
6b:50:94:02:5b:a4:4e:22:df:d0:9c:d6:ec:62:6c:51:36:15:
67:9f:70:6f:02:4f:3e:a1:3e:14:8c:5d:bd:00:7d:83:d2:ae:
29:15:e4:38:83:d4:f6:9e:01:8a:77:16:48:92:b9:3c:02:0a:
4c:bf:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:13 2025 by rpki-client