Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: +rE4ql+h/RLIRJfI+gTirF3UA6U76Nk5uNXHZnI4Uco=
Subject key identifier: B2:E9:B4:28:B8:AA:80:5D:29:81:79:40:BC:99:42:6D:4D:EF:A0:F3
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0194BC0507D1E3C4F95569BAEF7119B497E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 07F3
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: XFTH_rFNMHU3CpipgsXgF-ZxpPg.roa (hash: ZEolc+/oqCztR0e2rcSj5ENoA2IsjsICsvyQsk3WLQY=)
2: otFjzUtO2idku-08pKbvtE3ReQg.roa (hash: X6MV5H5bxEA3+1HuCzpxtYoTJ9fRNR15SYXk1hnT3AY=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: dwfZ/yn6J6J7sx/o5DhaV9OeBaMr4F3mqFTYGKz2fjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:d1:e3:c4:f9:55:69:ba:ef:71:19:b4:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=b2e9b428b8aa805d29817940bc99426d4defa0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:7f:26:5c:74:c2:e7:f3:f3:02:41:ed:cd:
66:94:1f:2b:a4:f4:e4:f8:99:3f:69:85:52:d2:da:
03:c3:1f:76:c4:7b:f3:23:9f:42:f7:50:7d:6b:7e:
98:b3:2c:e8:aa:1f:c8:7b:85:f1:2a:3f:a6:5c:40:
2c:63:ab:23:94:dd:63:fb:f9:14:63:bf:f2:d0:37:
64:c6:15:29:fe:7c:39:9f:db:23:55:e4:f4:15:80:
35:a3:76:38:8f:43:7c:65:7c:c2:67:17:1a:b2:23:
61:e7:01:01:58:38:dc:93:e0:6b:eb:20:24:7f:f2:
f8:ef:2f:7b:38:ed:8a:e4:4e:13:5a:5f:84:9c:dd:
80:5b:0c:fc:79:f9:2f:c0:81:cc:df:46:d5:6f:15:
99:b2:eb:a7:db:1a:a0:19:82:f3:6b:80:e2:34:7a:
27:78:b5:3e:57:bd:17:90:cf:ba:9c:6c:b4:9e:0b:
d9:f9:43:e4:88:45:08:5f:50:7a:b3:67:81:e0:e7:
88:82:8e:66:21:4b:06:89:45:57:d3:37:56:56:37:
d7:d0:88:cf:26:27:f5:ae:c0:0d:c9:2f:f1:4c:9d:
05:1c:74:94:19:74:6f:fb:28:16:71:13:50:e1:ae:
10:34:42:f6:a6:d7:7d:0d:01:fd:68:69:2e:e7:6d:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E9:B4:28:B8:AA:80:5D:29:81:79:40:BC:99:42:6D:4D:EF:A0:F3
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:31:c1:98:2a:59:5d:81:2e:db:65:c4:e8:39:5d:b4:d9:
e9:5c:f4:bf:f2:42:e5:2a:0c:8b:3c:58:66:84:bb:ca:33:dc:
79:ac:52:b9:46:a2:ab:7d:76:00:4e:f9:7b:ce:12:37:d3:e1:
98:ce:9e:26:60:b9:b7:b9:5c:b8:66:94:cb:4e:62:5c:81:7f:
f0:77:2b:48:6f:9b:60:76:58:4b:15:19:c4:42:db:8b:02:13:
6b:31:e9:33:86:68:e3:2e:d0:3b:eb:3c:0b:65:5c:64:c1:a8:
c3:15:1a:7c:46:ec:89:8f:6c:3c:dd:bf:a6:a7:7d:02:ef:c2:
63:07:52:a5:25:09:0f:3a:f1:ba:8e:e2:23:d1:22:57:8d:28:
72:af:36:9d:e8:c7:34:92:16:9e:c3:53:55:9f:4f:a1:1f:8c:
32:a4:7c:64:0f:af:94:8c:da:25:7e:85:c4:41:dd:6d:43:a2:
d8:13:33:75:1a:39:2f:fa:20:ba:5f:ee:72:6d:ac:43:f8:8a:
96:43:20:ac:ff:d6:84:92:f9:b4:13:52:38:e5:59:93:27:b3:
07:cf:7e:55:01:7e:4d:c5:9f:e1:bf:e3:33:45:77:ac:23:04:
93:ed:89:04:11:87:5f:69:47:57:76:91:69:57:d9:66:3d:fe:
21:7b:01:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:46 2025 by rpki-client