Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: BWRLrgmmGRQHvH2p3cADXmlLYBRigyjNetQJ3GaGMwU=
Subject key identifier: DB:A7:79:E3:76:08:AA:54:C0:36:38:10:92:31:15:F3:3E:1F:ED:95
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 0194BBCDFFD3EC5E7CDF62C41FDBA821BE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: 07X5YcKR5FZwUmhQ5pYisu/+K5mKcnRc1uDt7V3RYMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:d3:ec:5e:7c:df:62:c4:1f:db:a8:21:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=dba779e37608aa54c0363810923115f33e1fed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:4b:6f:87:a3:63:d7:00:95:8d:08:4f:a5:
3f:8d:7f:a8:c6:40:d5:03:ea:91:da:1f:17:1a:6d:
29:85:82:38:92:83:68:c6:f4:be:bf:97:cc:03:67:
65:3a:63:88:a3:b6:99:be:f7:49:88:3e:d6:da:ad:
db:a4:54:2d:1d:e3:2e:63:77:84:ca:07:2b:cb:b2:
57:2f:c8:01:0b:12:09:75:27:b2:5b:8b:a2:4c:9f:
2b:cf:de:ba:ba:52:4d:5f:91:8f:92:4f:c4:0a:59:
d6:25:57:77:8b:96:a3:1b:af:fc:c8:e7:f4:04:bd:
83:2c:59:95:1a:8e:0a:0d:36:f9:2a:c3:b1:e7:5e:
59:c1:f0:9e:59:42:96:f9:83:17:45:ee:d4:6e:7c:
38:d8:30:df:5f:06:47:a2:43:96:97:c4:42:0c:03:
b2:70:75:f6:4a:f2:bb:53:16:64:4b:b6:c3:4b:37:
d1:45:62:d6:5c:8a:d8:34:b1:cc:dc:e2:bb:5b:2c:
d1:23:12:08:1d:97:da:e4:b3:f1:76:57:f7:a6:a5:
ba:3e:1e:14:fd:97:7a:6c:05:87:bc:da:17:f9:cb:
f4:21:cf:d7:1c:3b:c0:69:29:5e:72:c1:06:39:4d:
ee:8f:ab:ed:dd:48:dd:c0:67:fa:b3:3d:0e:4a:28:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:79:E3:76:08:AA:54:C0:36:38:10:92:31:15:F3:3E:1F:ED:95
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6c:e3:56:37:67:7e:be:e6:91:67:3e:31:03:7b:d4:6c:af:
e2:18:86:4d:a6:d0:d2:fa:24:42:6c:9d:0c:eb:00:3b:3d:8e:
da:ac:6e:04:11:3c:bf:07:e6:19:83:ea:64:fc:0b:5c:67:9b:
b8:e6:24:5c:a2:3d:d7:a9:ac:70:ab:f2:e0:71:d0:c7:2a:00:
d9:9a:bd:02:84:47:2c:02:79:0d:4d:98:3c:f6:67:50:69:1a:
e9:c2:ed:d7:ff:5c:75:91:63:c8:57:19:74:f6:52:c7:a1:1c:
a5:60:38:e9:f6:81:d1:94:9d:2c:af:14:a8:3a:d2:41:ad:a9:
c0:07:9c:06:5f:b5:88:c7:54:67:bd:2e:3c:57:5b:6f:29:46:
6b:b2:65:1f:c7:ce:81:fc:54:9d:ae:1b:ee:82:19:80:53:ca:
53:8a:9b:e6:f4:9e:66:71:bf:4d:55:12:34:db:ca:3a:b5:50:
29:49:4c:97:68:4d:ad:7b:6d:94:d8:81:66:38:f4:e1:92:c3:
fe:53:11:c0:1d:cd:2f:fc:7e:7e:48:e6:1a:60:33:05:a2:ee:
bd:d2:0b:c7:7b:ee:03:42:65:a3:93:37:f6:a5:64:a0:44:a4:
1d:f4:2a:df:bf:d5:79:47:b3:3e:2a:e7:3a:dd:27:61:53:52:
c9:08:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:06 2025 by rpki-client