Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: J+n8g/+zvrPjmK86LxBKwtsZSFEZJ/AWIvIRtp07soM=
Subject key identifier: FA:81:1B:37:D7:1F:64:95:32:CD:07:8C:75:49:74:C3:50:CA:CC:82
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 0194BC732A14D09F0A92A290CAE82C281D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: ShwAi/K8vEpooqYf9HdKuQet52VppwNiRKlBPif10hY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2a:14:d0:9f:0a:92:a2:90:ca:e8:2c:28:1d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=fa811b37d71f649532cd078c754974c350cacc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:a2:1d:ba:ef:6a:c5:9b:ba:6c:9c:ff:7f:
bc:b5:b2:36:2a:6d:9e:76:17:81:13:73:cb:97:7c:
2d:31:7e:e6:da:4e:cb:db:72:4d:c1:8f:fe:ba:6e:
5d:98:3f:5c:2b:23:2f:14:13:59:6d:36:74:2a:9b:
2e:b2:ff:49:d8:0f:55:4e:31:1e:9f:6f:fe:54:8d:
c2:9d:b5:c4:3a:bc:ca:7b:42:03:ea:d6:3e:e3:5e:
a9:4e:fd:39:14:8c:f1:b4:19:ce:8a:89:94:11:c6:
c1:54:77:60:e6:b4:00:9c:32:77:49:7a:9c:92:e5:
13:ff:60:e9:00:1c:a0:bc:92:9e:cb:c6:67:61:a8:
0d:33:60:b6:22:d0:41:cb:5e:4a:90:f5:41:e5:09:
aa:9e:95:c8:31:8e:c1:45:24:9e:10:c6:31:a9:7d:
46:a5:97:f0:c3:e8:f1:06:22:f4:e1:3a:0c:d9:80:
fe:cb:4a:6b:fa:a9:dd:04:91:cf:f7:b2:90:ef:fb:
90:25:10:d0:c3:ae:d3:f7:d5:c5:bb:6f:fb:d4:b7:
e0:8b:29:e8:51:0c:25:ba:78:b1:c7:f3:d2:44:af:
11:cf:bd:a9:62:d6:b0:cc:6d:33:3e:23:28:88:ca:
23:f5:6c:57:1c:8c:9d:e4:e9:4f:0f:f8:e4:24:f7:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:1B:37:D7:1F:64:95:32:CD:07:8C:75:49:74:C3:50:CA:CC:82
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:28:70:15:00:7d:bb:e6:1e:e0:b8:c7:e6:eb:92:0e:f7:
df:e2:f1:20:b4:55:70:22:4b:dc:12:2d:84:ec:64:a5:df:94:
fd:fb:81:bb:4f:fd:18:5d:9e:ee:52:be:cf:d5:63:69:c4:59:
64:ee:14:74:f6:df:2a:0d:f7:a2:c3:1e:ec:b5:22:03:d3:c0:
d6:9d:1c:7a:b0:97:ee:5e:81:db:a5:4e:c0:06:2d:3d:41:af:
2d:a1:74:7d:79:57:e6:47:18:6a:9e:98:09:d5:8d:53:3a:08:
f0:2b:c9:4e:48:03:f1:6d:4d:b4:18:0c:c1:36:4b:9f:e1:e0:
44:17:12:b4:3c:55:42:90:1b:39:f5:49:15:ab:b3:d3:79:06:
77:b7:ee:61:75:49:9f:e6:bc:d4:de:5f:e1:71:1a:09:f6:c5:
a1:d5:3c:f7:e3:96:d6:12:ac:ae:a2:54:b7:76:e0:79:60:ac:
52:03:3b:20:d3:ac:fe:d5:2b:a2:42:8d:2a:c9:92:10:a4:33:
34:58:64:8f:6e:bc:de:db:03:67:23:c5:23:cc:df:02:c9:85:
d1:2d:db:f2:10:e9:1e:70:4e:eb:ae:15:30:1e:41:1a:17:05:
16:a0:5e:ec:c5:bf:3c:d1:22:ce:83:59:e0:98:9e:4e:95:79:
44:e1:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client