Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: 67oRuyViZNqApGlt0Kr6i6fWCKYkyeexGF1s5WNmE5g=
Subject key identifier: 53:6F:A0:38:BE:A6:88:7E:F8:3A:F8:82:64:13:EA:0F:9B:A5:BC:B2
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 0194BCA9B4940C07A2B1C24F65AE6DCB2C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 0JNfBNzU72OAoNIfj1jhygVeYQU.roa (hash: oGcfqT/JJ8LL0qB7k2QsQSpg+/RTt2AO65zLWXlHWAA=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: zVxHG400F65ttR4pbMKdrpHXvT/4I4X0jjkleyetXao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:94:0c:07:a2:b1:c2:4f:65:ae:6d:cb:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=536fa038bea6887ef83af8826413ea0f9ba5bcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:c4:53:8d:e2:60:cc:d9:e2:d0:a0:25:e9:
39:b0:1d:7e:cd:cc:61:01:6b:30:c1:bd:aa:7f:40:
3f:e2:4f:12:aa:c0:a1:fa:46:80:95:7b:50:86:67:
06:8d:14:63:e1:a5:23:2b:a5:ee:a7:eb:b8:a6:bf:
db:3c:64:be:80:16:03:7d:3d:bd:a6:ac:3e:31:57:
44:36:94:1b:db:a4:22:b9:f2:d6:96:d4:6c:4d:4e:
05:13:6b:88:77:21:13:65:26:e6:4b:d2:f1:83:d0:
dd:26:ef:da:4f:ba:32:bf:cb:67:3b:d7:b0:7f:00:
4d:89:bf:70:6e:d6:48:e6:f6:54:b9:4a:db:2c:da:
9b:23:64:dc:58:f1:01:de:41:b9:cb:51:af:22:e5:
b2:bd:2f:76:dd:7c:4e:92:a4:24:8b:ee:1a:73:dd:
72:83:7e:40:27:e0:07:29:1e:1b:6a:38:9e:83:2a:
29:74:32:a8:43:d6:4a:b0:6b:ea:e6:ad:cb:b8:5e:
cb:97:13:89:80:1e:42:b3:1b:5a:49:69:1f:4f:86:
bc:18:20:49:18:e5:9b:88:96:96:d5:bb:b7:6d:b1:
15:74:9f:3f:ae:91:5a:e4:a1:e0:d0:76:fe:6f:68:
da:e7:2b:75:5e:9a:7b:da:67:36:4c:fb:18:9e:d5:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:A0:38:BE:A6:88:7E:F8:3A:F8:82:64:13:EA:0F:9B:A5:BC:B2
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4d:ab:02:1c:1a:e3:85:69:c2:af:14:35:6b:42:e3:79:47:
de:76:65:2a:0b:e7:7c:62:c0:2a:8b:69:1f:09:a8:ff:f1:98:
2d:00:b1:95:27:f5:6b:4f:56:e3:69:7f:a5:fa:dc:ec:fb:33:
36:30:38:4e:de:5c:7f:d4:fb:39:ca:60:b2:9b:21:2b:fd:52:
09:3a:f6:34:92:40:08:9b:83:09:b6:d7:5b:67:42:46:f7:51:
e4:fc:40:09:67:dd:2d:0c:44:85:a8:94:05:bb:27:89:2c:04:
0a:7c:ee:de:0b:22:43:b2:5b:d1:f0:60:9b:e4:f0:e3:15:3f:
21:cc:99:87:e5:bb:bb:ac:c0:54:73:77:fa:b2:4e:f6:f1:8b:
5c:11:ca:30:27:22:62:a0:fa:66:a6:37:2d:61:8d:70:7b:8a:
41:30:70:f7:90:d1:2f:a6:c0:39:0c:ce:d8:0e:31:24:a0:ab:
49:f4:c9:9c:87:27:d8:9f:cc:e7:b2:4a:27:58:0b:c4:d3:d5:
7e:52:10:6c:6e:8d:42:c1:11:aa:95:61:6d:e5:f0:bf:15:f3:
4d:fb:e5:d1:95:98:77:cc:60:3b:fc:b4:36:77:42:bf:c9:fc:
73:a7:f3:11:ed:9c:ee:fb:cf:6b:82:57:64:40:d0:c1:dc:7d:
aa:c2:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:47 2025 by rpki-client