Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: 6jIi+DKj8fzOWa4q2ajb1wr9XRAE3Igvl9dDzIF908c=
Subject key identifier: C4:AE:F8:02:2F:6D:46:C8:CD:B0:8D:BE:C8:17:D0:2B:98:92:C8:47
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 0194BD4E5A0B2DD9B65DB757952392FC32C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: Kp9T4yQ0BWzmIgTW27o6VMb8qh4.roa (hash: 8tmSpbSEt6oRRtmXjjT27qxLy0bdW3q5K1nXAwi0cxU=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: lw3VpAO+irFGIPlqAZBtYwBte8TUan/NaU5Bq9xlQNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:0b:2d:d9:b6:5d:b7:57:95:23:92:fc:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=c4aef8022f6d46c8cdb08dbec817d02b9892c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:50:5b:e5:2e:da:13:c2:77:0f:c2:db:8a:
6a:22:31:20:fa:8a:80:80:a9:1a:b5:45:78:55:93:
b4:f5:43:78:7e:46:c5:7f:59:d8:4d:54:78:38:e4:
23:f8:e3:51:b5:24:ca:67:3b:44:63:48:98:53:40:
e8:b5:89:a7:9e:be:c5:29:0e:57:1e:b6:d9:d5:5d:
ca:b3:f5:90:28:e0:70:31:ae:8f:58:59:c0:1e:94:
51:3d:29:25:de:a8:ba:e9:96:10:7c:be:76:33:b5:
48:d1:fa:e6:22:1a:0d:f3:e2:37:82:e9:b2:2f:43:
58:9a:1c:ba:b0:e5:8b:44:81:4c:61:19:78:c5:c9:
14:5f:47:90:45:b3:43:fd:4f:84:f7:b3:70:4c:19:
6e:d6:b6:91:8e:eb:dd:29:30:ac:61:db:4c:c1:c9:
c2:b8:16:e7:57:47:56:ec:38:1d:be:1b:fc:f1:60:
37:8a:86:fb:e9:5f:27:26:78:28:23:ce:82:bb:e6:
2c:e9:49:8c:c0:ee:c2:ec:8f:fc:51:67:7b:ea:84:
6a:6b:8d:31:53:a8:cd:03:99:ab:5e:f6:16:84:49:
56:60:8d:d2:96:63:ce:03:b6:1b:31:0b:46:c6:dd:
c9:e8:5f:5f:02:9d:07:9f:bd:ab:3f:c6:15:28:f9:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:F8:02:2F:6D:46:C8:CD:B0:8D:BE:C8:17:D0:2B:98:92:C8:47
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4c:75:45:37:b7:3a:f5:f7:49:75:18:59:be:82:c6:6a:6f:
b9:f4:c5:7a:3c:ce:03:36:97:b3:da:32:7f:ef:5a:97:97:97:
97:5b:79:fe:80:ea:24:c4:dd:10:fc:ac:f0:68:ab:27:3e:be:
76:67:16:25:60:22:d2:90:d7:78:aa:af:ea:8b:9e:a7:41:23:
b6:bd:d2:d6:79:4b:96:fe:d9:49:92:06:a1:10:7c:88:f3:2e:
ac:24:07:69:4d:ea:9d:06:1f:22:91:cf:2c:6e:8c:cc:81:ba:
8c:54:76:dd:99:f2:8d:25:90:c0:fb:7d:13:9d:6d:d3:d6:10:
9a:85:00:61:0d:46:42:34:8a:30:88:04:7c:f8:31:a4:88:8f:
c2:c0:10:d6:43:36:10:f1:21:20:10:da:03:5b:76:76:4b:0c:
98:0c:ea:05:c7:bd:23:e5:81:43:a4:9e:a1:88:75:ce:8a:85:
16:75:e9:bc:f9:03:a2:af:35:9e:16:6a:43:1a:e3:5f:3f:61:
27:02:59:5d:01:f8:19:d1:58:a8:c5:42:ee:e3:b5:85:83:f1:
15:f0:89:5c:02:49:1a:dc:15:3f:c2:19:4d:a4:53:bf:a3:e6:
74:cb:fd:a1:5b:7a:c2:08:d9:b6:71:d9:24:bc:b7:41:17:57:
59:56:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:16 2025 by rpki-client