Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: 8lt/bIsAKKnTeRrpyp9xVcrrppLrNW49ixn79JUI51s=
Subject key identifier: E4:E1:3C:AC:67:9B:12:C7:F9:70:07:31:93:70:EF:F0:6C:08:AC:CD
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 0194BC04C85A20ADF98CDAB94735DC99A331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0AC2
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: lnbtz8QgxxYoR4wnJsIUmWax8N/pPe/UyxJkwVXXjHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:5a:20:ad:f9:8c:da:b9:47:35:dc:99:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=e4e13cac679b12c7f97007319370eff06c08accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:b1:a1:c4:46:85:e3:c8:5e:71:e7:0c:12:
c9:f6:0d:65:c8:cd:80:1c:96:7e:c9:52:a6:08:9e:
ff:71:05:bc:07:d5:da:b5:6a:85:f9:0a:4c:a4:f7:
88:aa:2b:68:05:a9:c4:53:96:1d:52:de:ba:da:28:
3b:52:20:e7:10:09:0e:a7:2d:57:26:95:82:d2:3f:
b5:47:8d:30:ac:1d:0d:58:1e:52:f1:ea:cc:bd:fd:
ab:63:15:05:a5:ad:07:49:59:eb:d5:7a:3b:68:4e:
72:18:ee:10:7c:a6:97:50:80:62:e8:bf:6d:dd:64:
cd:cf:95:ec:83:d4:86:d3:83:f3:b6:0d:ea:3b:36:
ac:bd:5d:6b:dc:45:d5:76:84:41:0b:13:f5:9d:49:
2f:99:4b:f6:41:6c:2a:bc:71:e0:a3:ef:94:68:e4:
f4:a6:b4:46:73:53:de:3f:ed:09:5d:2e:0a:ac:18:
81:36:77:7c:4e:44:3b:31:0a:4e:3b:df:91:47:82:
9c:17:56:a2:d6:99:33:38:2b:cc:f2:4e:05:de:09:
bd:bc:2f:d2:ee:0e:72:05:b1:b1:80:83:a4:1e:b7:
bb:40:99:36:44:3f:e2:4d:96:d3:96:e2:ab:a4:26:
46:97:dc:eb:28:cd:47:d2:46:ed:8d:1f:0b:01:54:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:3C:AC:67:9B:12:C7:F9:70:07:31:93:70:EF:F0:6C:08:AC:CD
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:47:5f:b6:ef:47:9c:3d:eb:90:17:0c:da:c4:6b:d8:77:48:
2d:1a:88:9e:1a:66:e4:d2:bd:ca:d4:7a:61:9f:c1:3b:0c:c1:
92:90:c8:ac:41:23:3d:47:be:cb:8d:cb:ba:ea:97:a2:52:3e:
a1:12:4a:a8:ce:61:9f:b6:17:bf:27:5e:8c:7e:e4:ff:68:64:
13:04:a9:78:c0:9e:c9:d0:cd:66:ef:8f:1d:df:45:2d:f8:87:
1d:31:f0:e0:1d:de:64:f1:6e:ac:be:46:da:83:4b:75:7b:13:
09:37:75:a4:0c:14:32:3c:51:2d:41:4b:7b:ae:62:35:85:ee:
72:e8:3e:3a:47:67:a5:ae:8d:37:a9:6b:e3:d1:81:6d:64:30:
3d:6d:4f:00:f5:d0:5f:d5:ab:3b:d9:38:55:c7:cd:c6:eb:80:
bd:a7:2e:43:d3:3b:f6:2e:0d:ab:18:5e:0c:06:e7:c2:c5:66:
a3:fb:fd:18:cc:71:58:04:47:4e:55:5d:bd:8a:2f:07:a2:28:
c5:43:58:3e:80:7c:32:2b:3b:32:b4:35:1a:8b:f4:46:ed:7f:
49:9d:f4:82:6d:95:6e:3a:6f:8a:15:9d:6b:78:d6:29:f3:58:
9d:5e:7b:2f:0d:82:f9:fe:43:8b:58:11:3f:c5:59:e5:2e:1f:
07:03:9b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:09 2025 by rpki-client