Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
File: uW6LbXPy84VImW9mYhMwqNcQhSk.mft (raw, json)
Hash identifier: 5J/dSPz/3pNHoEGq+XzFuySyZqYmUci6yc4tosKt/cQ=
Subject key identifier: 49:6E:B0:2E:4E:2D:07:9E:79:D9:F7:90:0B:ED:86:F7:B0:15:7B:C0
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial: 0194BBCDEC9F7D90D306CF487FEFDEF90D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: Ax6Gu0A1WVAMHnMyLh3B32000sA.roa (hash: iBKFcxVigEAfe9uJMe9wdFyXZBq4/nsbINBCDNHDxXI=)
2: fiUjLhELITdpDid32o55NdTSDUs.roa (hash: 94ZZevlA/NkXuzZUHS2Qq6u93TDFYKoJju0eXiF70b0=)
3: uW6LbXPy84VImW9mYhMwqNcQhSk.crl (hash: HOQ23cAJlaVDR2vtoof78MzNKcUoqR3Nkg1DAmOk9cs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:9f:7d:90:d3:06:cf:48:7f:ef:de:f9:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=496eb02e4e2d079e79d9f7900bed86f7b0157bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:fd:a0:0c:cb:d0:96:25:1e:8a:5e:55:ac:
9d:12:a9:af:46:0a:3f:80:c6:35:5d:55:e5:3f:32:
46:87:c3:14:82:a5:41:69:22:33:b4:5e:29:94:a6:
d2:4b:97:7d:d4:74:39:86:4b:59:4b:bf:69:ce:1f:
1c:4a:f5:d3:7f:17:7e:ca:77:00:4b:f3:79:43:6b:
da:a9:98:01:69:07:5d:86:40:1e:2c:5f:f0:40:b3:
e1:a3:36:79:69:b4:01:35:19:e0:63:ef:36:36:5d:
0b:19:b3:79:ed:c4:a2:8d:78:05:2d:6c:8c:eb:14:
74:e5:26:e9:59:da:0a:58:17:a1:68:9b:47:9d:01:
1f:f6:9c:0c:b1:5c:81:7e:fd:54:15:b5:43:14:4f:
67:60:64:7d:12:48:c0:48:5d:99:6a:3e:ba:2b:2b:
6e:5f:5a:cb:27:43:d9:ff:2d:67:84:19:b9:c5:f5:
39:99:84:c7:ec:60:8b:5c:c7:25:70:fe:6d:6b:b3:
70:2a:46:20:7d:fd:20:49:f0:42:17:60:8b:24:72:
4c:6b:74:19:1f:c6:6a:ca:5c:39:06:4f:f5:86:7a:
cc:89:6e:55:3d:fc:7c:84:ce:55:7f:b7:5f:15:c4:
be:01:af:57:f3:8f:47:43:74:d4:43:c5:12:36:bb:
9d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:B0:2E:4E:2D:07:9E:79:D9:F7:90:0B:ED:86:F7:B0:15:7B:C0
X509v3 Authority Key Identifier:
keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2b:76:40:c6:2e:ff:61:11:51:3f:9f:57:e7:fb:2a:ac:ed:
49:31:21:6d:80:3e:75:bd:4b:15:71:6c:31:a3:79:65:5f:2f:
4a:0e:b8:b0:55:b5:08:22:1d:51:9b:4e:6f:14:b9:72:88:41:
ae:6d:5a:5e:3b:45:98:0f:98:61:dc:a1:51:37:ab:d9:b3:49:
75:34:a6:c5:d8:14:39:4c:92:a2:dd:14:ae:c7:fc:f4:ff:20:
e8:67:0c:4a:cb:5d:27:0e:bf:52:99:ca:9d:d3:35:19:60:17:
9f:68:e3:69:54:44:37:3a:e1:d2:82:8a:0d:7e:d9:60:76:2c:
d8:95:f6:b4:7e:f8:bf:fd:a8:2d:b4:c0:dd:b4:25:ac:29:a3:
c1:8e:c8:59:9d:83:30:43:90:c4:79:8c:a0:01:34:33:0f:75:
7f:85:a7:5b:cb:d8:c8:df:6c:e6:36:78:fd:d2:65:d5:40:0b:
1f:15:2b:d9:ea:4f:5f:d3:10:7c:62:ea:c9:4e:f7:cb:c1:e4:
81:46:ec:63:bc:2c:30:8b:f0:8e:ed:2e:29:13:4a:c1:0e:1c:
87:4e:be:14:f3:fb:e3:5f:2f:44:b8:cd:f2:df:c3:d1:f0:b3:
53:e8:d2:6d:ad:72:2e:47:08:cb:ed:6c:91:c4:dd:a7:1c:7a:
7e:56:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:44 2025 by rpki-client