Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: n+4MblrNHAUagqzR+s/2URe9dobs4/ftASEMnlE++pw=
Subject key identifier: B1:3E:D0:31:9D:CB:A6:C3:53:9F:12:3D:39:38:1B:4C:9D:12:12:2B
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 0194BC3BE3DB56DEF9312ADEBA4D97311F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: +xRcSjUD/FhDlPdxVtt+lWKVV1efUcRgcow63xbD4/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:db:56:de:f9:31:2a:de:ba:4d:97:31:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=b13ed0319dcba6c3539f123d39381b4c9d12122b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:31:85:f5:31:87:e8:52:5d:77:a5:c2:1a:
7e:a2:2d:cb:6b:03:6a:61:f1:ed:92:03:0f:74:47:
ab:49:7c:52:ee:79:b4:a7:31:6f:46:c4:69:62:20:
79:e4:82:86:2c:20:17:d6:fc:98:b3:6d:cb:6d:02:
90:1d:26:a1:a0:d0:aa:17:dc:79:a6:ea:5e:b4:ea:
f9:8a:a3:32:4b:f7:0e:f1:66:ff:5f:34:9c:d2:0b:
71:0a:e4:26:56:3e:56:03:07:45:65:37:7b:32:79:
f5:95:84:f9:83:b3:ba:44:af:47:fb:6c:a0:a1:79:
16:74:73:cc:70:e3:e1:b9:9f:0a:5c:cb:37:15:ab:
31:7b:2e:98:a2:29:4b:a0:a1:45:17:80:99:36:93:
a7:a2:5a:52:e9:9a:26:d0:28:71:ed:23:72:17:76:
d6:26:1b:6f:f5:e3:c1:b9:cd:e0:aa:3f:d6:1b:eb:
67:95:f6:8b:c5:4d:4a:70:16:20:56:da:28:77:b2:
09:74:73:a1:b9:60:16:30:ef:3b:30:49:c7:8b:79:
20:76:30:21:4f:bc:83:af:35:ab:64:46:b2:c6:31:
70:b0:b1:fc:fa:3d:9a:b7:28:3c:83:29:61:15:53:
3a:c0:ee:b0:29:48:34:df:f6:4a:9b:80:a8:50:e9:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3E:D0:31:9D:CB:A6:C3:53:9F:12:3D:39:38:1B:4C:9D:12:12:2B
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:59:0a:de:5c:fa:8d:09:60:59:e2:1f:dc:88:a8:75:ff:bf:
6c:b2:b7:69:d4:ab:69:a8:1b:d0:4f:63:8e:70:70:4b:56:44:
0d:80:9e:11:81:72:99:8b:f7:05:db:15:63:1f:97:db:fb:bb:
2e:7b:c3:58:38:d7:b4:7d:f2:33:64:ea:4c:de:aa:fc:02:d9:
26:8d:25:e1:27:9d:94:3e:4b:72:ab:02:cf:48:fd:d5:78:8b:
e9:ce:e2:3b:7e:ce:9e:97:3f:4b:4c:cd:e7:4a:d1:26:5e:b9:
f5:ae:53:c6:95:ef:aa:9c:6b:91:fd:b3:54:98:f8:c2:8e:7a:
7b:6e:37:2c:56:12:dc:ad:4c:de:5f:3d:5d:17:96:cf:e9:0c:
4e:cf:10:c0:5b:38:71:5e:5f:9a:5c:ac:fc:1a:dc:00:e0:2a:
f9:e6:0a:fe:b7:34:fd:59:4a:e8:50:cd:e3:f2:3f:32:e1:40:
56:32:bc:72:18:b2:a1:70:be:d4:3e:21:92:e0:28:ba:07:12:
1a:fe:83:75:fe:2a:ea:b8:ce:66:9c:6b:fa:b2:3f:fb:f0:f5:
da:60:c5:f9:ce:20:33:44:29:c9:25:d8:a2:7c:2b:6f:04:fd:
cf:78:6b:e6:e5:ef:dd:79:7c:ca:4b:6e:fd:e1:1b:1a:bd:35:
f4:53:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:15 2025 by rpki-client