Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: 8vMDXDTID0oZaJAz7o+SHejdNnI+t97sfVzdk/UYa/k=
Subject key identifier: 69:FF:16:CF:9B:FF:F2:BD:07:45:64:B8:C0:F4:33:60:45:C4:E3:27
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 0194BCA981D75F38F688B61A22EEBC7612FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: d6NS4HBug1HvZtBymo36uDIG1Dt1hlHrhTyyctgzI9w=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:d7:5f:38:f6:88:b6:1a:22:ee:bc:76:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=69ff16cf9bfff2bd074564b8c0f4336045c4e327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:70:00:66:5a:07:2c:17:c5:fb:7c:2d:03:
94:21:8d:7c:a7:b7:e3:f7:8d:d6:27:f8:ff:39:17:
5a:e9:99:90:68:c1:37:74:e1:e7:63:18:4d:ca:2d:
c1:eb:74:5b:ef:b0:39:c6:ec:0f:6a:98:34:f0:18:
45:f6:c3:26:ef:c7:f4:b2:f6:c5:cc:61:f8:e8:3a:
0b:70:d7:9f:0e:3d:a6:0b:81:3e:c5:7f:6f:be:49:
01:d7:5f:2b:22:6f:aa:f1:a1:0f:c3:4f:b3:2c:14:
03:f0:20:d5:03:ce:0e:36:f0:18:02:84:c2:34:03:
c2:1b:c4:8b:03:a1:5e:51:c2:3d:95:90:44:fd:02:
49:3d:c6:32:b8:d6:04:ab:5c:e2:79:2d:44:f7:1c:
19:52:d0:5c:0c:c3:34:5a:42:04:bc:df:2a:77:4f:
33:91:0f:58:a7:3f:f2:a6:3b:47:d9:09:c4:fb:2c:
59:35:f9:04:39:cb:08:c0:f3:a0:de:72:19:4a:ef:
e0:c8:e6:c7:4f:2d:fe:20:d1:a1:26:a4:6a:3c:4a:
61:f9:e8:da:69:de:37:ad:c1:64:dd:58:17:4c:b5:
c0:40:de:3f:71:57:a3:26:c4:f6:d4:0f:05:00:f3:
2a:59:f6:4a:d9:bd:1a:37:53:1b:a3:78:ee:2e:28:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:16:CF:9B:FF:F2:BD:07:45:64:B8:C0:F4:33:60:45:C4:E3:27
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3f:9c:05:69:e6:84:2c:bc:ee:ab:99:65:12:4c:a6:d6:38:
d6:d7:8b:05:3e:e8:d8:d6:9d:57:00:1c:7f:58:4d:da:54:04:
11:ac:e2:7b:ab:dd:f5:9c:13:11:93:87:5c:03:af:7d:c1:cd:
59:11:83:b1:23:43:42:6e:1c:f5:0d:f0:ac:70:23:a1:f0:94:
31:3c:30:9f:a0:c8:14:10:e8:2e:10:c4:b8:97:67:4a:9c:d7:
d0:a7:fc:30:2c:64:15:05:57:ea:81:e1:c3:89:b4:60:91:66:
b4:48:46:83:de:a9:d7:92:42:a4:46:f0:13:9c:fb:77:a0:fe:
d4:61:33:b7:35:24:24:f9:d5:b7:66:7a:01:23:03:c9:26:cf:
d8:b7:a0:14:72:0f:a1:48:6d:4f:fa:29:c2:e7:fd:b5:99:47:
cf:62:75:79:bc:10:f2:e9:75:d3:60:aa:ab:1d:94:6a:d8:97:
eb:35:a4:57:c7:74:d8:aa:c9:7f:8b:6e:3e:b5:4b:56:fc:cd:
b1:ba:ef:c5:d8:13:49:9a:d1:04:8d:e9:13:a8:a2:b8:8d:be:
5e:79:96:a1:30:76:ad:9a:2a:0d:97:a9:17:cb:36:b2:00:07:
cb:85:72:07:78:70:85:ed:cf:ef:16:b5:cf:34:7e:af:ed:2f:
2e:ac:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:13 2025 by rpki-client