Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: bLqGCihkrY0TSODuAlw3uVLhTU3Vt1Y6o4KPvRAr2v8=
Subject key identifier: B2:D1:19:E2:8F:5F:F1:1B:46:8B:04:8C:2D:E1:29:8B:2F:3B:FA:76
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 0194BBCE0C6E9411F6CAFE4D238F69F0CE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=)
2: fEaK7ErCTm7Fivri0S-qqcMkyMU.roa (hash: IfCVzZn66SOIRBGzYSq04PtQc+Pau+GA8F1M7N7TehY=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: 5ITxZqEqEhkdFTUh40zGHsEuFRYcDEEmcJwp3HbJCG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:6e:94:11:f6:ca:fe:4d:23:8f:69:f0:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=b2d119e28f5ff11b468b048c2de1298b2f3bfa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:72:db:1d:6c:82:2a:61:39:25:5a:35:fe:
8e:c3:ec:bd:fe:12:7f:91:6b:15:8e:2f:2f:d4:87:
a2:29:50:28:2b:19:23:d2:02:b8:86:78:3d:0a:ac:
59:49:d5:ea:d7:66:46:bd:9b:2d:3a:ce:39:24:03:
5d:4a:53:de:a0:d8:1e:97:fd:a9:83:d1:ed:2c:c2:
0d:7f:4a:3d:9e:7b:4e:aa:66:fe:7f:62:52:e8:c0:
bd:ba:16:0d:93:2f:c6:01:7b:58:c3:e1:c4:88:a6:
90:6e:63:4f:52:d7:d8:3d:81:91:2f:19:83:e2:11:
59:da:a9:5d:10:4c:7b:94:96:75:f4:21:81:47:8d:
5c:d0:61:39:86:0b:1a:e9:e9:eb:a0:28:a4:91:eb:
f6:40:9c:8d:79:56:4b:6b:61:76:8e:b7:2f:63:d6:
5c:d8:1e:0a:8b:11:9a:93:86:bf:c4:87:fd:23:36:
d1:91:df:6a:ec:da:22:fb:fd:51:2a:e1:87:e6:d6:
eb:57:35:9c:7d:7b:88:91:f2:9f:d5:b1:2d:d1:fe:
bd:b9:c4:95:20:88:27:df:77:65:f4:08:df:86:7f:
f6:da:11:98:68:4c:8a:34:11:8c:1a:9d:29:9d:18:
0b:d5:3b:6a:d2:30:83:88:01:30:f8:e0:91:90:88:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D1:19:E2:8F:5F:F1:1B:46:8B:04:8C:2D:E1:29:8B:2F:3B:FA:76
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:c5:4f:b0:48:04:9f:3e:97:58:76:fd:0e:8f:d8:ca:18:
f4:8a:a8:17:ba:05:4a:c7:7b:78:87:fa:91:21:cc:7b:4d:b1:
41:a7:48:ef:b8:ae:21:b6:d3:b4:37:c2:3b:15:04:09:61:af:
67:c3:d4:af:5f:77:a6:13:b2:fe:a6:c6:90:5c:ba:83:8d:a2:
dd:e7:6e:8f:2a:84:a2:ed:a1:71:98:f5:97:78:c9:bb:32:da:
b6:dd:ae:35:21:2c:d0:6a:6c:0d:a8:59:4e:3d:30:ae:4d:35:
7d:d4:22:23:4b:0d:88:5e:7f:06:64:f8:c7:be:73:06:fa:07:
03:41:63:2a:f4:fd:40:03:b2:ae:7a:62:b5:85:24:13:1b:ad:
99:28:2f:ae:ca:8b:bd:b7:41:57:78:47:9a:f6:fb:92:df:2d:
f1:b5:db:19:43:6f:49:e0:20:02:44:26:9d:4d:65:6a:5a:b0:
bb:70:a6:14:02:2b:4f:3a:d3:ce:a9:e4:d1:06:3a:75:e2:9d:
cc:a4:b3:f7:6e:7d:39:41:71:eb:12:77:9d:45:34:1f:87:3f:
23:a4:6a:43:14:79:70:75:59:11:a9:a9:6c:03:e6:12:2d:0b:
71:5b:92:8f:1d:56:e7:34:50:bd:78:ff:c1:5a:f3:7b:da:88:
85:59:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:59 2025 by rpki-client