Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: qn8JgNyHlUGOkx8YFf4w60sPsnC5zSKjXNwa+rfLIrI=
Subject key identifier: 3A:9B:E4:F7:94:DD:D6:AC:1A:60:02:12:A4:25:46:0C:6F:81:8B:52
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0194BC05001442F1166B974BCF044686228B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1306
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: gSEAwvQy8HY0pXsb5Zk+z1QwjXbdKbL1ITYTHiZjOqA=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:00:14:42:f1:16:6b:97:4b:cf:04:46:86:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=3a9be4f794ddd6ac1a600212a425460c6f818b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:fd:94:68:ce:6e:3e:24:23:02:71:ab:d4:
d0:b8:c8:2e:b3:7e:74:d6:9e:27:32:80:02:1e:15:
a3:d5:b0:66:e6:dd:93:45:c3:ac:c2:65:c9:45:05:
c7:b6:cd:f3:51:df:bb:ac:c7:b2:cd:91:5d:13:b3:
08:93:c9:f4:1e:82:4c:d3:be:af:d5:f1:71:c4:59:
b4:f6:b1:ba:8b:71:ca:6d:3e:0f:96:e8:ce:39:4d:
b9:ad:62:78:b1:4f:79:05:b1:5e:a0:e8:16:82:57:
a6:97:17:27:6c:84:bd:46:b9:0d:24:2c:c2:14:18:
08:f3:92:0e:97:00:a2:72:56:f1:94:75:77:bf:fa:
00:32:0e:b9:a2:83:6b:3b:23:5c:4a:e4:2c:26:c6:
f0:73:6f:f0:d7:fa:79:55:f1:a5:32:77:de:27:f0:
c1:00:8d:8f:65:eb:67:62:41:7e:69:5c:37:72:ea:
31:6d:b1:37:61:1f:b8:b2:0e:44:fb:48:24:c9:17:
d2:f9:a1:9e:c5:5f:74:9a:26:79:66:46:41:a6:d9:
ed:26:4a:85:ac:c5:7b:32:ad:45:66:90:bd:e0:87:
fa:0d:8b:b7:b9:02:14:a0:35:54:5a:24:8f:35:5c:
3e:61:10:e4:1c:f2:eb:9a:4f:87:2d:f1:61:56:ad:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:E4:F7:94:DD:D6:AC:1A:60:02:12:A4:25:46:0C:6F:81:8B:52
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f5:ad:96:45:be:51:97:0a:7f:16:e8:39:d8:14:18:94:43:
5a:8e:8a:d7:e6:5c:5d:22:64:82:45:d3:57:48:af:76:bf:0d:
69:16:99:1d:c5:06:c5:2e:0b:78:c1:90:bf:0b:40:8d:01:55:
82:bf:6e:22:4c:d9:47:fa:c7:1f:23:be:f8:6d:af:c8:42:27:
f4:a2:5b:b4:3d:83:24:35:ca:fb:f5:68:e7:e8:8f:b9:90:ab:
ce:89:88:77:32:75:2d:27:bf:65:72:79:05:3d:71:b5:5b:23:
8c:8c:15:34:80:32:99:9b:c5:c5:9c:81:41:40:ed:55:74:67:
e0:9b:4b:83:dd:4e:19:4c:34:58:8e:f9:43:c9:90:5f:55:c4:
6c:8b:ee:4d:e8:8c:ed:4d:bc:4a:01:30:77:85:ee:ac:b2:57:
9d:d4:dd:ff:92:81:e7:b8:1d:52:5c:92:14:d4:c5:9a:c9:4d:
ac:f6:9f:d0:3f:fe:bf:a3:31:4d:38:b4:ba:6e:2e:20:51:51:
93:44:0d:f3:73:80:bf:7b:71:13:4f:4d:f2:73:d2:15:a5:23:
76:3e:9a:d4:22:81:a8:60:49:4d:28:3d:a0:58:73:a7:57:00:
32:ff:f4:88:09:33:37:9f:e7:32:42:ae:db:5c:3a:eb:26:27:
1e:e2:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:02 2025 by rpki-client