Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: n/W6cnJG3CSkYeS2A7DtYxhWkuXMtXuoHOozHN0bLVI=
Subject key identifier: 74:EC:BC:AF:F2:26:CA:19:DE:D4:80:76:56:FB:D4:57:EE:86:D4:B1
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0194BC7300646469424BB860EF799DA3CEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 0216
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: BcOVvuTPDGO0_pL0GbcBWO1VZhM.roa (hash: 7+ASLxZPu0A91rGfBxu8JIyIDtUrfljYYLKOifrTTzQ=)
2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: 7L7lWy8ccU+0pFf5WlucK+w5BXI86Xxvdkd9+rErZbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:00:64:64:69:42:4b:b8:60:ef:79:9d:a3:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=74ecbcaff226ca19ded4807656fbd457ee86d4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:ca:06:61:38:62:ce:5c:28:21:ad:04:b4:
51:25:54:1c:e7:22:d9:55:0a:ab:2e:ed:b8:c9:d9:
22:84:2f:5e:fc:d9:71:99:69:ff:98:34:f9:ac:28:
0a:1f:c8:0d:fe:eb:83:dc:b1:3c:74:a5:6d:53:b0:
3c:62:07:b8:5c:23:5e:0c:a4:9e:c4:2e:64:21:b1:
87:ed:94:db:ba:e3:1b:4f:50:2c:0e:e1:05:c7:5a:
e5:3a:0f:f0:18:ba:29:79:d6:e2:bc:09:5f:02:25:
4a:d2:cc:c0:b2:cf:ad:07:34:6c:55:18:6d:9e:27:
82:44:4c:87:4d:be:5a:77:b4:b3:d9:1b:71:29:46:
42:38:82:6b:75:ee:a4:fb:8a:f1:78:ba:e4:ca:b2:
29:d7:08:bb:50:40:29:a5:0d:8b:ca:84:49:8e:87:
ea:bd:9c:fb:71:24:08:53:6e:fc:01:1b:a0:32:56:
81:17:fc:5e:2f:b7:be:e7:0f:d8:5a:ed:e9:13:0d:
26:8b:ef:10:7b:28:5c:49:8a:c7:b4:11:fa:a4:6a:
6f:22:dc:71:7a:43:ea:f0:a7:cb:aa:35:58:5d:d5:
3b:b3:2f:fd:a0:54:ea:44:56:27:50:d4:24:d6:ef:
5b:f1:a1:92:18:a8:d7:1f:9b:c2:28:a8:ec:f1:74:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:BC:AF:F2:26:CA:19:DE:D4:80:76:56:FB:D4:57:EE:86:D4:B1
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e2:33:a8:ee:54:80:7d:44:54:b3:67:42:39:b9:10:d1:18:
6f:8f:06:46:45:23:68:b0:60:a7:f4:3e:99:9f:ec:fc:db:e6:
e6:3c:5d:1b:90:8c:63:5a:fa:4d:bd:c6:14:b5:5f:d1:05:f4:
ad:87:e4:5f:9c:4e:33:b6:d6:b9:e1:0d:9c:f6:a4:2d:5d:aa:
29:7e:e3:09:b7:76:a2:33:f8:3b:31:37:0d:ac:99:59:76:1d:
3e:0e:9d:72:94:d6:0a:71:ea:9a:37:bd:1e:80:50:4f:84:bf:
79:8e:a5:65:a3:8a:0e:7d:46:f4:cc:db:1d:34:30:74:7d:47:
a4:d4:f1:dc:e1:6d:e8:e3:69:00:37:74:1d:dc:11:3f:c1:95:
de:9a:8b:f8:a0:e2:46:6e:e9:81:0e:37:66:fb:e6:3a:46:ac:
da:7f:50:59:42:7a:0b:bd:f5:5b:9e:a3:62:bb:2e:33:7b:cc:
35:24:54:7f:91:af:71:10:62:7a:ed:f6:90:9a:a4:54:16:5d:
ca:3a:a8:d7:40:a7:18:4b:d5:ea:ec:08:4f:7a:05:e5:a1:6a:
5e:d3:da:02:62:5a:2d:a7:b3:d3:b4:c0:7e:37:8e:9e:c8:a5:
b5:2b:c5:b7:86:ef:b1:4f:58:8a:35:48:d1:65:cf:c9:1c:07:
f2:83:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:28 2025 by rpki-client