Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: +Q5r4qxVND8i9HXo7zKGb5H+WC8nYLXpBKhSORr+OjQ=
Subject key identifier: D7:00:38:84:05:C4:AE:32:F6:9E:45:A8:C5:A3:71:A2:1F:C4:03:08
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 0194BBCE6B675BCDEBDE6EB35791BDE97A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 1046
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: dKpw_-0HjSGrVaWJaUDvP77eqyY.roa (hash: QqA/x8rzftDJLWW2k4Vuop1woZfiPckz4TMZl5sc2Xs=)
2: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: Wbs6vJFFZAJOrcCNdVcwQsRbNKafPT7JvzRS2CWDoDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6b:67:5b:cd:eb:de:6e:b3:57:91:bd:e9:7a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=d700388405c4ae32f69e45a8c5a371a21fc40308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:96:61:c3:10:c5:e6:f1:73:fc:f8:99:36:
9e:fe:59:6e:74:fe:bb:a5:4c:b6:c7:ea:46:6b:b7:
72:db:7f:84:4d:e4:05:b2:d2:8b:10:d9:56:af:17:
c4:23:6a:43:6a:28:ba:6c:1c:64:ca:f2:f6:8a:d6:
38:51:66:af:77:93:3e:72:96:e2:a4:f0:91:e3:da:
dd:24:e8:6f:f3:f2:b5:89:26:6b:88:1e:23:53:9b:
cb:0e:71:df:24:f1:cd:72:30:a1:26:8e:ed:5c:9b:
72:7e:b3:39:e9:fa:11:0d:81:ed:3c:43:fa:85:9c:
92:ab:34:77:5f:c5:d7:f9:de:cb:f9:57:d4:87:66:
2f:ba:4b:04:33:00:e0:81:17:fd:fa:60:33:d4:2e:
2c:a2:4b:70:bb:38:d4:a1:ae:9a:56:cc:22:a7:64:
c0:f8:4f:69:3a:db:c5:dc:a4:1e:e6:a6:4c:c6:42:
3b:01:ec:e2:74:8e:a7:e9:0b:6a:2b:5f:78:cf:e4:
be:26:09:55:f6:fa:a7:35:9d:28:b9:f1:0a:b5:55:
99:16:47:cf:33:cc:fe:d2:61:72:e5:86:a0:43:36:
79:97:d2:ab:a2:8f:34:5e:37:70:3e:59:e6:d5:63:
71:30:4f:d8:9d:84:5f:41:b2:0c:b7:46:ff:3f:f0:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:38:84:05:C4:AE:32:F6:9E:45:A8:C5:A3:71:A2:1F:C4:03:08
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:da:64:95:84:b6:f4:8a:e1:ae:61:97:07:50:f4:fe:33:4b:
8a:56:31:95:5c:38:47:1f:cc:33:39:f4:f1:2b:5c:ca:f8:00:
2d:f3:b8:87:f0:f6:18:a6:0b:3b:0a:6f:63:6c:1f:61:a9:5a:
93:ad:67:1c:e9:69:dc:ba:df:fa:53:54:cf:b0:e4:d8:fd:bf:
79:44:65:70:f6:11:49:d8:5b:f7:79:7f:f7:1f:08:5a:44:32:
3c:a0:36:d8:f3:48:ab:df:77:73:28:da:e5:4b:c2:ba:f6:b8:
59:1f:9b:a4:a4:ec:62:d2:c0:45:87:5e:ab:52:3c:85:8d:a2:
a4:a5:d9:62:75:7c:71:3f:c2:77:06:63:c7:43:58:19:37:bc:
d7:ef:f0:87:94:28:22:e3:88:3f:02:28:bd:8f:79:f0:17:6c:
b5:d0:12:15:14:35:77:52:50:56:39:a0:a4:b1:3b:bc:e4:bc:
46:6f:cf:5e:40:42:da:4e:5d:10:f6:10:40:97:cc:d1:f9:32:
48:3e:15:9d:14:db:1c:f5:d1:4f:53:fd:19:d5:76:47:23:01:
f4:72:88:d9:98:e4:8c:3c:c4:a7:40:b4:30:68:ee:e5:44:02:
4e:33:7a:5e:d9:2e:29:d7:f5:98:58:f2:c0:ff:d0:0d:81:49:
89:65:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:11 2025 by rpki-client