
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File: uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier: qoZ4OiRATxynziUKqJX7rB8r1GzHe2V5s26Njz//N/8=
Subject key identifier: B7:36:AB:C9:FD:3B:37:DC:3B:C5:60:E1:0D:34:EF:4E:B1:EB:21:BB
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer: /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial: 0194BC3BF4B1C58C97B9A767C96CB1792AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: pw7wm/ok4FmBrQX8ANiKXbgnvVEuvO97UCqtV2YKdtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:b1:c5:8c:97:b9:a7:67:c9:6c:b1:79:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=b736abc9fd3b37dc3bc560e10d34ef4eb1eb21bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:4b:7c:c2:08:c8:5b:01:ea:17:f4:32:82:
28:af:a1:54:09:37:95:f4:43:50:4e:3d:a3:15:fe:
26:f1:d7:3d:21:d6:d8:44:21:c3:d3:9c:d4:4c:85:
4a:55:a1:f1:ec:c3:f2:d5:16:35:ca:2c:a6:14:a3:
09:05:dd:5c:63:ca:92:33:e6:a1:fa:4f:a9:c9:ef:
5f:80:74:6b:f5:72:cf:03:a2:f8:19:ff:be:4a:9e:
7e:24:44:1c:5e:48:0e:11:12:78:b2:58:f3:5a:ed:
f0:20:3e:e8:17:d5:9d:2c:d2:63:31:78:05:28:bc:
4c:aa:7e:84:61:87:ee:8a:d8:d9:42:78:0b:45:d3:
a9:73:70:0c:27:b9:8d:a6:54:4d:68:7f:78:87:a8:
49:fa:24:c0:ff:9d:69:d0:e1:80:95:89:17:29:7c:
55:71:f6:45:23:ea:bd:7a:76:d5:3c:95:48:0a:d9:
24:d0:85:f2:6b:b9:59:6e:8f:ff:a5:b8:01:ef:c7:
03:5c:25:43:ea:e4:b4:1b:b5:a8:b7:d4:6e:5b:bd:
b1:aa:0a:ea:c9:f2:8a:1a:fa:58:13:2f:66:cd:a0:
eb:f3:8d:4d:34:b8:c4:89:bd:22:cb:87:9d:c0:86:
00:66:16:62:37:b1:1e:2f:06:c6:bc:ed:0b:e3:d6:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:AB:C9:FD:3B:37:DC:3B:C5:60:E1:0D:34:EF:4E:B1:EB:21:BB
X509v3 Authority Key Identifier:
keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7a:27:ca:e2:e3:8d:b0:fe:df:8c:ad:c0:28:a8:cc:a7:4f:
dd:f3:c3:ea:82:50:25:d5:bf:83:3a:89:cc:a6:e8:8e:b5:53:
7d:ed:43:c1:2b:8b:e8:2f:d3:f2:69:f5:21:70:73:d3:2c:4d:
f8:e0:a2:ae:0b:40:a4:56:16:72:39:49:70:a8:24:22:78:e8:
18:0b:d0:81:51:0d:7f:5e:63:03:90:d8:e3:7d:b7:4f:03:06:
e6:4a:6e:ee:73:7e:2e:49:36:98:b5:fd:1e:5c:21:29:0e:1f:
e2:a0:f8:9c:1f:dd:14:57:62:13:1e:e5:17:95:a5:40:42:d0:
5b:d6:10:a5:2b:4a:f1:dc:1a:60:e5:91:6c:04:b3:cc:cf:09:
00:96:c0:ae:bd:5d:9d:ee:29:4e:05:38:46:4c:0e:29:b7:88:
67:d4:c9:6d:ed:9a:02:28:62:d2:1f:c4:d3:17:49:7d:c8:c8:
d2:b0:6c:55:1e:9a:a0:09:6e:75:e7:b6:7c:d7:69:09:0a:46:
de:5e:69:5b:4c:41:83:f8:b2:3b:71:10:95:50:48:de:fe:55:
65:77:b7:21:a6:bd:8e:49:2b:06:54:36:17:78:95:74:45:d2:
dc:6f:b3:65:41:d3:ed:48:8b:2b:f2:44:ef:af:a8:02:a2:cf:
ee:99:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:25 2025 by rpki-client