Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: tUPRuJvtX43SF0l0Kt6Hv+gdeu/kBc0ipvPPITKSBRA=
Subject key identifier: 16:26:7A:C1:D2:C1:01:6D:39:6E:EE:39:13:4C:E2:49:E0:31:C4:52
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 0194BD17536DE12F2921EC350A7CA8748AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0BB9
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: Il6sw8RhfCXvm6Cob9piJ6Tof38.roa (hash: uQUNJgau18FI9kUMvqpvmB8TvJ5qi/9GPc9O1whwtNs=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: 96gEwn2yyRsZxHNE1BPY0Mu0bcJMOZes7B+PpwiOPwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:53:6d:e1:2f:29:21:ec:35:0a:7c:a8:74:8a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=16267ac1d2c1016d396eee39134ce249e031c452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:fa:96:1b:2b:fd:70:33:6f:4a:57:dd:78:
59:9a:8f:a4:33:ed:a4:a8:7b:c3:df:44:ae:1b:78:
4a:fe:ee:02:9d:47:20:cc:5a:22:ae:d2:ef:57:60:
5f:e6:10:b1:f8:2e:c6:fb:ba:f8:f6:62:b0:fb:48:
d3:40:dc:9f:9b:f5:ee:dd:4d:c5:bc:14:b5:0e:b1:
91:c1:dd:76:c5:bc:44:cf:11:71:14:c9:35:bf:71:
1d:b9:5f:aa:37:a9:e5:98:b3:c8:b1:92:19:6f:be:
d0:34:23:58:b9:7b:3a:be:d5:32:de:80:fb:02:7a:
1b:43:14:66:65:aa:ec:cb:e2:fb:ae:1e:e4:c0:a9:
b7:b2:ea:0f:61:b0:85:80:a1:99:f9:d4:53:a5:3a:
d2:c1:2f:77:56:52:e3:d5:53:67:93:51:e2:39:f5:
cc:a1:69:36:d1:cf:73:87:fc:5f:0b:f0:62:4f:f8:
6a:44:4d:e7:93:b9:77:2f:c2:cf:d8:54:5f:44:a2:
a4:c3:6c:4b:a7:dc:d0:51:a7:bf:00:57:e5:7c:23:
44:77:58:53:67:89:52:4f:36:46:6c:8e:26:25:10:
11:2b:49:cd:e1:59:73:d9:60:91:bf:40:a9:a2:a9:
8d:2b:51:4f:27:58:b6:40:dc:4a:e1:5f:1e:b0:6a:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:7A:C1:D2:C1:01:6D:39:6E:EE:39:13:4C:E2:49:E0:31:C4:52
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c4:d9:90:7d:1e:eb:6f:45:b9:8e:43:32:81:7a:f1:77:29:
75:95:dc:45:e5:59:d5:8d:7d:a9:80:32:f7:75:c8:7d:cb:47:
7a:8e:86:bb:7f:19:7f:47:79:6c:83:2a:81:8d:5d:d5:d3:12:
a4:24:ba:8c:5f:6e:3c:80:19:b8:03:9c:6b:0f:c5:15:c7:ba:
58:a7:1f:73:6b:50:65:07:e8:4a:0c:03:92:9d:e3:22:e5:3d:
5f:ec:06:97:4b:ab:ce:02:a2:5c:76:d7:e5:83:d0:12:6c:20:
9c:55:bb:30:17:09:ae:3b:9e:38:e5:19:56:4b:7b:4c:ee:5d:
b6:35:1f:57:8b:44:13:9c:e8:ce:b3:33:99:ef:8e:5f:3e:4a:
33:ad:73:87:7b:48:57:5b:9e:06:9b:87:cb:84:f1:a1:36:09:
37:9c:96:84:52:1f:76:e5:aa:e2:a4:59:b1:d3:c4:9f:1e:fe:
ab:f4:12:34:f9:a2:88:86:aa:41:34:d5:2c:93:30:c3:31:d2:
6f:ca:07:ad:a9:ee:a5:a2:e4:21:28:fc:3a:36:3b:65:56:8f:
2b:92:a4:c5:9b:ad:b0:6b:49:be:82:9b:1f:0b:6a:71:e1:13:
24:4d:2b:4f:3b:e7:2b:c1:27:e7:aa:45:94:bf:b5:6b:92:39:
11:29:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:40 2025 by rpki-client