Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: tcKoa1yJ/u3EqNro1qIuY2UYepSdwRwaHPyE/ovWsL4=
Subject key identifier: B0:BB:5D:BE:EC:1A:95:0B:A6:ED:37:DF:7F:E1:B5:98:67:98:F4:30
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 0194BCA9D2FB1806A4061F7B75D49A43E273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 079F
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: eHFS1aprEizQxvvhnpHAYvgUuk4qvNzW2nRu7fwXmMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:fb:18:06:a4:06:1f:7b:75:d4:9a:43:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=b0bb5dbeec1a950ba6ed37df7fe1b5986798f430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:ae:0d:ff:c7:b1:07:93:8f:0c:c2:84:9d:
2e:08:3c:40:bf:7b:96:59:05:2d:ce:17:1c:5e:72:
8b:5a:c3:c5:f0:36:af:01:28:08:60:4a:d0:73:bd:
36:42:2b:f0:f8:b3:61:98:b4:17:8e:12:92:8b:18:
bd:26:bc:d5:72:ee:21:af:61:2b:ea:7b:d3:7b:53:
71:01:76:c1:13:75:77:f5:97:3c:b0:f9:82:7b:ef:
5f:e4:98:ee:b8:16:2c:3d:af:0e:cb:f4:b6:fe:5e:
71:68:5a:4f:6a:d0:1d:7e:32:95:8d:7d:26:75:ca:
c4:b2:64:09:de:8d:ec:8a:76:8c:62:04:d6:79:df:
f8:fd:34:82:86:34:e3:a8:63:d6:16:91:fb:9f:99:
5c:12:7c:83:7d:fb:aa:24:99:27:97:12:8e:c0:d9:
cd:aa:93:9f:37:10:55:e4:1e:1f:c8:28:66:6d:54:
70:49:01:11:4d:f5:ea:4a:4b:7b:0c:fd:2b:66:fb:
2d:2f:25:32:33:55:e3:c2:ed:99:23:a2:72:a8:0b:
00:80:f1:1b:93:18:a7:85:a8:f3:f4:bb:06:92:a3:
0d:9b:cc:e2:3e:e5:bf:7a:22:1d:68:96:58:5a:97:
da:76:b6:0c:e4:03:dd:f6:e0:77:e0:6d:ea:98:2c:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BB:5D:BE:EC:1A:95:0B:A6:ED:37:DF:7F:E1:B5:98:67:98:F4:30
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:10:4b:82:32:7e:9f:33:96:5d:ba:3e:c0:f7:a3:ec:1e:
2e:03:b2:5b:f3:30:fb:4d:40:79:b5:ca:39:4e:41:6a:15:c5:
32:7b:ca:74:19:eb:59:e3:54:ea:38:50:ce:45:9b:5d:0a:c3:
1c:3e:a3:75:71:92:83:4f:2e:7b:2c:43:06:d6:2f:78:29:f7:
d3:9f:3d:9b:19:31:11:81:d6:1a:65:95:4d:3d:57:50:3b:bc:
0b:20:cd:09:0a:09:b7:dd:ff:51:83:e6:5b:e8:5c:f2:52:42:
f7:85:ef:ed:3f:68:7c:82:0e:49:92:9b:5c:68:7e:fc:ae:4a:
0c:a9:9b:65:59:46:85:e4:52:65:92:a5:ee:27:05:37:47:a6:
06:5d:4a:4d:61:a2:e6:55:85:47:44:e6:5c:e8:c9:b7:be:3c:
61:0e:63:f8:fb:3e:3d:ab:20:b9:10:be:48:00:56:13:7f:a9:
35:9b:98:93:8d:e0:69:05:01:0c:ab:46:93:f9:47:fd:a1:22:
af:9b:f6:86:b7:bd:b7:bb:b7:df:c0:fc:fb:e5:8c:ef:7d:79:
d3:0e:5a:e0:2b:b5:ea:2d:30:fe:8b:7d:2e:e3:59:b5:e7:13:
7f:2a:4c:e3:81:5e:e9:02:bd:1c:e3:d0:f9:a2:7d:a3:f0:c7:
17:ac:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:08 2025 by rpki-client