Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: bVBbO9Dpcdpymt9GdHErHe8INOSDY21esvLIyzPp608=
Subject key identifier: 32:CB:33:A2:11:B6:74:DB:DE:71:C9:51:91:B7:B0:F5:2D:99:39:18
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 0194BD4E6339EBEFDE8892CFE291AD0D391B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 0408
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: 0cXtbmMb4K/uyHTe+rhED/dK0qNGjpBpEEEsXZgeE5Y=)
2: t8F8AQFw9Sg48lwFee2Za5xm6eA.roa (hash: cgBwDEoKUz1R8zm3vcS1da7Rti7yA91OjhAhCXmPdRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:63:39:eb:ef:de:88:92:cf:e2:91:ad:0d:39:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=32cb33a211b674dbde71c95191b7b0f52d993918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:1b:36:2d:be:9a:e1:8d:4a:ee:b8:73:0a:
56:00:c2:c5:1a:11:4a:d7:05:b1:9a:34:4c:0d:1d:
2c:9a:4f:8f:4b:fa:b9:bd:b6:64:cd:bc:2c:02:6b:
d4:c3:4a:0a:b3:b2:cd:e5:3d:fb:c8:a1:2b:4f:9d:
3d:98:ce:07:f8:25:24:1d:30:be:bb:75:f1:72:76:
d1:af:14:3f:d1:77:14:1b:4f:81:dd:21:34:57:5b:
13:4c:da:48:ef:80:05:c6:e8:b9:a0:15:dc:ea:67:
fa:d7:49:3e:bf:19:62:0f:88:cd:6e:e1:26:52:e4:
50:fb:b0:c9:42:bd:7d:2c:b9:d3:38:aa:4f:36:6e:
bc:e0:52:ae:bd:0d:43:27:a3:86:9a:a1:b5:b7:73:
f3:b6:5d:af:d1:c4:1d:2d:f2:86:10:ed:99:bf:33:
34:bc:6d:3f:4a:46:d1:f9:ef:98:2f:a0:ca:23:3c:
c2:c4:33:f0:a8:4c:0e:69:c3:76:6a:61:0a:a1:a3:
59:dc:ed:bf:ad:59:8f:3b:6c:3c:23:af:c6:de:60:
6f:ee:e5:d6:45:5d:ac:12:4d:f9:ae:c4:74:90:4e:
60:b5:96:f1:be:fb:f9:bb:99:06:d1:6d:d3:5e:4b:
e9:c1:da:c8:fc:3d:e2:0d:bb:02:9e:e2:38:42:b9:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:33:A2:11:B6:74:DB:DE:71:C9:51:91:B7:B0:F5:2D:99:39:18
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f1:9a:85:76:6a:10:42:e6:cd:5d:65:46:e1:8d:22:99:fe:
5c:23:ca:4c:f0:6f:ec:95:b5:4f:e9:6d:07:c2:f4:97:2d:99:
2a:63:6e:64:5e:6b:7a:9f:3a:ab:8c:0a:32:c5:1f:4c:5e:a6:
7a:66:13:6f:77:a4:21:32:ba:a0:93:28:91:09:20:4c:c2:70:
f5:e1:7a:0b:72:88:97:c6:c1:95:ab:b2:8f:f7:29:e2:e6:26:
1c:32:e8:de:5f:1f:74:17:18:0a:63:99:0d:22:25:5a:bb:10:
86:3e:30:72:6b:b0:d8:aa:5c:0c:75:70:c8:76:8c:fc:3a:09:
06:1a:c1:66:1c:18:0f:b6:46:a4:d1:d1:95:e7:03:ac:a3:5e:
89:65:a2:34:cc:b7:a3:3b:4f:ae:9f:24:97:42:35:36:af:5f:
2e:44:33:7e:c7:eb:78:10:78:af:dd:ab:db:24:e4:b5:ba:44:
dc:c3:3b:1f:82:f7:9e:96:da:23:b3:8f:3c:26:59:14:12:9e:
f8:c0:34:78:dd:3a:e7:07:3a:7c:12:8a:9c:7a:42:51:39:10:
43:87:dc:52:0a:c3:7a:c9:5a:45:6f:f5:2e:54:37:c6:09:ba:
71:eb:d7:d8:88:df:21:64:a4:16:33:c5:73:96:1e:cb:be:90:
52:74:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:15 2025 by rpki-client