Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: Gr7/NtCEbIxeOf3ca6S2FL3VJV2hXOjFHRDGR6lsbpA=
Subject key identifier: 2C:AE:A5:29:03:2F:F5:81:B8:D2:AD:FD:B0:5F:2E:54:12:17:C1:98
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 0194BD85794488FEE65B41765A326DE1AC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=)
2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=)
3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: fCPGKD6xcOZKI21fPJebRCuf6c+aMmuzMVrntfBqUYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:44:88:fe:e6:5b:41:76:5a:32:6d:e1:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=2caea529032ff581b8d2adfdb05f2e541217c198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:46:97:e8:ec:ab:e0:60:b7:44:07:69:f3:
1a:5d:ac:2a:1f:14:e6:e1:25:7b:f8:c9:21:35:c6:
ef:e1:d2:bd:5d:08:66:5b:57:11:76:69:3d:78:45:
e1:62:83:89:9d:e7:47:22:69:5c:e8:ed:5c:bf:03:
a1:61:12:b3:db:32:e9:73:f2:20:aa:27:4b:d5:3c:
67:2d:b1:f9:69:a3:0e:d4:6b:b9:62:e0:e5:7b:55:
c5:16:ab:4c:d0:22:40:4e:a5:82:06:0c:40:d2:5a:
d2:f5:e4:5e:d9:81:45:d1:1d:72:1d:5a:17:13:2b:
3e:04:81:c4:6b:85:34:1c:b3:a3:92:92:b7:f5:67:
97:5c:99:e6:39:02:cb:9c:0d:6b:86:e6:e7:c5:16:
d9:5d:e4:70:7d:d2:31:be:5f:16:42:68:64:1c:1e:
d7:3d:44:e8:85:4f:a3:70:72:ec:ac:6e:53:1c:5b:
6a:35:3b:4a:81:0c:d2:6e:13:03:86:96:ca:17:2c:
48:3b:de:d7:30:31:40:f1:09:99:32:39:4f:c9:15:
c4:8d:e4:5d:0e:4a:a8:72:cf:99:aa:4b:cb:25:de:
6c:8d:a7:14:ab:e9:74:90:61:5e:8e:aa:eb:6a:bc:
a3:1b:f9:1a:dc:5b:2f:f1:ed:56:10:e9:b9:09:af:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:A5:29:03:2F:F5:81:B8:D2:AD:FD:B0:5F:2E:54:12:17:C1:98
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9e:91:f3:f8:31:58:66:2b:e6:08:7f:5c:7b:f9:49:d0:9c:
47:78:05:99:d4:3b:81:9d:5b:25:18:0f:fe:3a:9d:ba:69:32:
7c:a6:7f:a2:f1:92:7c:72:6b:a2:a8:93:ce:17:b0:3c:d1:6c:
c9:19:1e:f5:ce:2e:f5:54:5d:df:73:e8:8b:ea:bf:82:1b:0a:
a7:22:d0:6e:4e:8f:6d:18:2d:95:b7:01:b7:56:2d:4e:95:c9:
4c:78:71:a2:e9:86:c8:0a:98:dd:fd:3b:03:50:55:de:7f:13:
e6:8e:60:13:a0:7f:78:52:f0:ac:f9:78:5b:6c:61:4d:2a:f1:
b0:96:38:0f:8f:d2:a4:f0:76:5b:f3:6b:b8:88:d7:5d:c5:29:
e3:12:59:60:f3:52:7d:09:c6:a8:7f:fb:30:cc:9a:7b:da:ee:
0d:b9:65:98:3a:7c:37:cd:42:73:d6:ef:5a:8f:f3:60:c8:1c:
fb:ed:99:42:8e:a4:01:93:e3:b8:b1:d9:1f:b2:dc:93:58:25:
3e:76:2b:43:b4:c1:cd:82:89:07:37:10:6f:99:27:53:91:29:
b9:38:1f:37:3c:5f:de:12:bb:be:ee:43:fe:aa:7f:46:7a:c5:
5b:e9:d5:a5:df:36:b2:d4:49:85:fb:2f:68:76:ab:28:2e:b6:
a3:17:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:52 2025 by rpki-client