Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: sNnePZmGucbaFizBQkY3nSYKQvHdTu54HEQmdTwF660=
Subject key identifier: 7B:A1:2B:2D:FC:63:1B:79:AB:BA:DE:22:B6:42:3F:3E:50:82:0D:DD
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 0194BBCE32B80EDAE8F8C4AC7BEAF9A4803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: HS8tsXgiseuX7TT2QqW5wXg9XQo8zHqeRwZi0QKQ7H8=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:b8:0e:da:e8:f8:c4:ac:7b:ea:f9:a4:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=7ba12b2dfc631b79abbade22b6423f3e50820ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:fc:8f:64:3c:64:2f:b9:87:55:5e:df:fb:
af:90:ed:da:33:73:00:d2:81:6e:71:e4:e4:22:ad:
a7:03:79:41:20:0d:63:1a:d6:03:98:36:d3:f8:c8:
6b:a7:63:b6:9c:8d:f8:03:ac:3c:d5:cb:f5:f0:43:
2d:bf:13:4a:b6:a4:fd:bf:69:0d:84:86:7e:64:8e:
de:81:53:15:60:1c:81:c6:a0:36:88:5d:0f:24:f1:
6f:b2:e4:31:ab:fb:0b:4d:84:52:ad:ac:03:4d:fe:
56:15:75:83:5c:79:6b:59:fd:be:c8:5f:07:4b:d7:
ae:d8:00:25:f0:da:60:86:99:cb:e8:0a:e4:72:fc:
67:aa:c8:6b:50:f2:50:53:95:91:09:23:1a:e4:53:
c2:00:29:df:c1:35:8a:37:72:13:c4:14:cb:4f:ee:
b0:8e:ce:81:26:8b:a5:e9:38:b1:75:19:de:05:a2:
1a:3b:76:d7:23:cc:e1:83:3f:6c:69:21:a8:ac:68:
ae:45:1f:e1:d1:ec:23:96:ee:22:79:ff:74:19:c0:
00:0c:06:6f:af:1f:d6:99:d0:3c:ac:06:83:9d:18:
ce:d5:48:a0:a1:b9:e3:e2:12:cd:b9:2b:38:c8:15:
27:b4:fe:6a:39:a1:6c:cb:07:e1:31:a1:b1:9e:18:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:2B:2D:FC:63:1B:79:AB:BA:DE:22:B6:42:3F:3E:50:82:0D:DD
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:97:09:76:1a:f5:46:fb:c3:c6:29:00:13:b0:ba:4d:a7:23:
96:34:d1:fd:0d:f6:78:3e:4b:61:75:f9:35:1b:e4:6b:99:f6:
58:80:f6:b8:16:b1:19:34:08:4d:9d:e5:e4:89:05:c0:df:a8:
ab:5f:44:b2:29:e4:c2:d0:36:31:b1:06:ee:a7:66:8b:f0:9d:
a7:16:dd:84:5a:e9:d9:e4:c6:86:aa:a1:71:67:18:7c:2b:98:
c2:b7:37:4e:be:d2:8e:4c:97:55:44:b9:74:6b:d7:2a:6d:24:
94:87:b9:ea:44:85:45:e4:68:7d:e9:7b:89:71:1e:56:5d:13:
a1:b6:e9:71:f1:9b:f5:7d:75:5b:02:1f:44:79:fc:b8:a5:00:
5c:72:d6:9d:6a:9d:8b:88:fa:c1:f1:11:50:8d:91:18:7d:96:
65:25:95:93:b3:34:9c:5c:40:46:34:6b:12:25:3e:7a:1b:77:
8a:41:fe:5d:9e:6d:d4:6c:f9:de:bb:f0:e9:15:83:5e:9d:75:
df:da:71:95:5d:80:89:3f:bf:89:e0:e8:48:6d:c1:c7:f6:18:
91:87:ea:75:44:8c:d9:98:56:c0:c7:da:2d:83:8e:c6:f8:06:
32:6d:f3:4b:b5:fd:7d:65:72:99:df:e5:52:84:cf:26:61:40:
a1:0e:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:54 2025 by rpki-client