Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier: p8iF6XpBJaATZ7vEC7e5+zzNfEhP2I3ywKe2hnfRF90=
Subject key identifier: 33:57:C8:A8:29:F2:47:96:70:0E:1F:BC:A1:F9:BE:0C:69:22:2C:E8
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0194BC72CD56AB6A5FAC19867DB9D976A7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number: 1442
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 0OiHMEoODaglH2piDNs43HD_DTA.roa (hash: nmiHh4LnosZp9xNDhf28YCBjscaOe+Oer/aAI6fnkBI=)
2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=)
3: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=)
4: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=)
5: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=)
6: MB9T19vthK7MTZHpTh1OqER4AWs.roa (hash: B1sGRlrnBGDGT0J9HTZJLXEdy3QoRPR556tv7l6zzGg=)
7: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=)
8: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=)
9: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=)
10: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=)
11: r1MvtzFdjoY9o2lQ_v9NAsGc6dA.roa (hash: +Nbsboy+8QB54oP/JsGumDkn0f1hZ/lh34xgCjFaMhw=)
12: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: dm8zJ3rXKl8zzpT5xDlxdRLRtdapU6pcXQkvZJDMjyE=)
13: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:56:ab:6a:5f:ac:19:86:7d:b9:d9:76:a7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=3357c8a829f24796700e1fbca1f9be0c69222ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:be:c7:36:2e:ee:89:d4:0a:bf:85:97:77:
cf:97:de:04:81:14:1f:88:54:f6:fc:b6:4d:9e:41:
0f:87:02:1a:1a:b1:1d:41:f4:3f:bb:0c:d7:55:9e:
54:45:44:ad:f9:15:bb:d3:a8:e8:74:e9:21:6e:a6:
d9:77:c9:59:22:d0:b8:3b:98:0c:a4:4b:15:74:fc:
3f:79:fb:5f:e9:3e:5f:80:b0:05:66:9c:ba:f4:71:
f4:77:b9:56:a1:ac:28:48:fc:1d:12:76:47:b0:94:
a3:2e:6d:9b:51:bc:2f:c5:87:8c:69:1d:84:a0:70:
81:3a:15:d4:d3:01:26:9a:c8:7c:3e:23:10:19:c1:
ea:55:7c:f8:1f:c6:18:b7:26:af:05:b1:00:ce:16:
2c:92:f9:27:2a:9f:4e:ff:72:fa:5a:61:b0:4d:2c:
46:3a:d0:a5:b0:c6:82:be:df:3d:67:70:4c:8a:ac:
72:42:8f:72:88:cb:fc:f1:14:4e:c4:36:23:d1:98:
a1:6c:b2:fc:35:9c:aa:8e:a5:5b:d3:0a:99:d8:ad:
c0:0e:68:72:c9:df:a2:82:e0:bc:f0:85:99:61:de:
7f:b1:cb:d1:ee:9b:0f:50:86:d9:b3:7e:62:5a:ee:
1d:26:a4:1a:04:ea:1f:d5:a6:b5:24:53:0f:01:64:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:C8:A8:29:F2:47:96:70:0E:1F:BC:A1:F9:BE:0C:69:22:2C:E8
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:79:42:21:0e:bf:54:a1:23:6a:98:64:53:5a:4f:b1:43:
50:90:9d:3a:3d:63:c7:e0:55:78:9c:f4:ad:47:7c:ed:a4:c9:
45:57:0e:b8:66:ef:c3:96:d5:fa:53:2c:37:7d:c4:dd:aa:d4:
87:0c:4c:d3:4c:ea:4a:d8:51:c0:5c:7c:10:96:b4:07:d4:c3:
18:9c:fa:b1:02:72:fa:ed:e5:f5:d5:49:a4:32:7c:66:34:7f:
ba:2d:a0:a2:12:86:6f:83:56:4d:3e:2d:a2:df:92:05:5a:21:
b5:16:31:26:ee:ff:f8:a1:fd:76:e1:81:a4:b8:21:45:e2:94:
37:8a:07:57:4d:fc:ea:f9:70:19:59:8e:e2:07:81:07:91:65:
89:f3:36:43:79:d0:a2:d4:9b:e4:fe:35:6c:cf:b3:59:57:29:
0b:98:e9:a4:33:33:bc:85:f7:b9:d4:dd:05:3c:bd:f8:86:25:
d9:66:65:1a:63:42:d8:91:18:cb:e3:81:62:2f:ce:27:fb:52:
71:44:91:08:14:57:fc:13:90:9b:55:19:58:da:29:bf:5f:82:
09:be:36:c5:71:6a:d6:c8:40:d9:e5:d1:1b:cd:43:a4:51:1d:
06:90:47:0e:03:ab:32:98:ea:8e:04:c1:cf:be:e3:f8:79:69:
41:b0:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:52 2025 by rpki-client