Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: wDJYqtkD0UwlfKD5XJbGF87bF8T3Gygsv4qkS8ySrj0=
Subject key identifier: 88:10:12:DF:8E:21:3E:75:AB:30:90:70:29:CD:6F:01:1A:B8:1E:E2
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0194BC72E3B4FB34ADD69BDC3EE90F09CB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1265
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: ChY1pYRmqo4gHf3bQwXo87kO4Nw.roa (hash: b4fVB4MFOUGQYpV3kbDWZEsf3wE2N+b11phHSCf2ye8=)
2: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: su/XuBS7SHOmR7MAA7+fgOfgA4CWe63eQtKVMJEbZu8=)
3: vETpBfzGZ2A9qggp19pQR6v65AI.roa (hash: MWAmQZD6Z+hwOEFYk1T/5hrtJgb9nFtjSEii5qrMkTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:b4:fb:34:ad:d6:9b:dc:3e:e9:0f:09:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=881012df8e213e75ab30907029cd6f011ab81ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:8a:bf:40:3f:e7:51:09:74:ab:fb:dc:c8:
08:8b:b7:82:5b:c4:ce:e2:f0:00:49:9c:73:7e:04:
df:74:e8:24:38:fb:3c:00:11:31:e6:d8:58:92:e8:
cb:cb:9d:23:dd:2e:75:df:53:67:77:96:0b:68:0e:
04:68:96:18:09:6f:7f:84:88:6b:0b:4f:40:43:5c:
55:2c:50:ea:b4:60:e2:75:bb:20:62:80:be:15:1d:
d3:27:40:f7:c9:46:10:0a:5d:7e:60:58:20:a5:c7:
84:06:24:fa:03:51:16:c1:e2:7d:93:d5:f1:88:d1:
47:f6:54:88:20:d4:7c:af:e3:f1:d7:93:4a:db:71:
bd:b5:ca:06:d2:49:f9:71:1c:09:b9:49:5e:a1:0d:
0e:52:70:99:df:21:e2:27:09:9e:63:af:5f:6f:8b:
53:72:03:73:50:f6:46:fa:dd:b2:af:24:9f:b9:a7:
8c:b5:9d:b5:fc:8c:33:d5:1d:df:7d:02:5c:59:0a:
91:8e:e0:c4:ad:9a:b1:98:10:6a:ec:81:f7:f8:d9:
67:d0:2c:78:af:97:4f:fc:c1:a1:93:76:b0:a4:e1:
c8:29:a2:66:e3:32:28:72:9d:eb:d0:38:fc:40:1b:
20:b4:2e:a6:1b:e4:cf:6c:da:90:10:3d:a3:72:93:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:12:DF:8E:21:3E:75:AB:30:90:70:29:CD:6F:01:1A:B8:1E:E2
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:13:7e:14:69:15:1e:12:8f:c4:e2:22:9b:ca:43:99:c5:
2f:e7:59:56:9b:c9:29:c3:78:94:71:53:86:2f:0c:04:c3:ca:
cd:55:e7:76:c8:c1:cb:70:8b:28:c4:8c:fe:05:4e:d5:6a:73:
9f:5d:fa:7c:87:f0:26:c5:27:07:7d:7c:33:7b:19:0c:9a:dc:
da:bc:02:dd:d3:ea:a1:4b:fe:2e:c9:ee:a4:2b:aa:b1:58:15:
8a:01:c3:5c:d6:d3:2a:48:80:ef:fc:39:99:dc:7b:48:41:03:
eb:95:98:f8:44:ef:a9:1b:e7:bc:87:bf:56:c9:90:6f:67:b9:
18:89:ce:03:10:73:77:e3:7c:a9:b7:72:d0:a3:56:2d:ec:67:
57:b6:76:40:86:03:d5:49:88:02:79:eb:9c:4c:f5:f4:fd:ab:
de:0d:51:0f:56:d8:3b:ad:13:f2:d5:14:ac:1f:d1:d4:bd:ad:
17:8e:6b:b4:d2:c3:57:d8:10:e9:0b:fb:aa:db:ef:07:10:b5:
b0:5c:34:84:b1:06:c9:82:f1:1b:af:2e:d7:45:9b:8d:00:c8:
3f:78:51:db:0d:80:26:d0:19:8b:a1:59:f8:e7:d4:08:e5:7b:
4a:3e:82:ed:da:ae:36:0a:12:2f:8b:d7:66:b5:2a:b6:3c:cd:
c1:b6:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:39 2025 by rpki-client