Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: xFku1jTjF3Fe7JyfPqv+CLJNjWzpdUSgz+AD8Vi5JCc=
Subject key identifier: 7A:F1:AE:18:68:02:36:E4:8A:9E:BA:E5:4B:56:EA:11:C4:1C:2D:54
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 0194BC3BC402F6C446B483EEF026A7B1EF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0C8A
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: qsPm9ki3aWyblJx+wrW+Hk2xpVau46XZDH0lGp1nmg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:02:f6:c4:46:b4:83:ee:f0:26:a7:b1:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=7af1ae18680236e48a9ebae54b56ea11c41c2d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:11:7b:2c:0f:2e:74:28:ff:2a:45:3f:bb:
c3:44:f8:8f:ed:24:ca:5e:97:e6:8b:6e:10:32:1a:
dc:13:d6:10:e4:91:49:02:cd:61:63:c2:b0:1a:09:
94:c4:ee:c1:8c:47:ff:fc:ed:55:1d:48:a9:43:9b:
6c:ba:c1:69:04:9f:08:7a:3f:fd:6b:67:f6:9a:89:
aa:3d:2d:9b:34:30:c0:51:12:64:5a:92:b6:b2:b9:
cd:50:39:a1:4c:97:45:6b:ae:6f:a6:a4:54:81:54:
fd:0b:ec:62:eb:58:0c:75:1f:da:d4:41:26:85:ba:
f7:f7:b8:b5:51:be:1f:5e:99:7a:f0:62:d1:3e:b0:
95:4d:58:ad:d9:2c:6e:39:95:e1:10:26:37:c0:cd:
df:5b:b4:95:19:d4:d5:c3:e8:69:f0:48:dc:b4:ee:
18:5c:17:1e:92:08:3b:4a:65:50:a9:fb:64:45:5f:
41:6d:20:5b:72:1c:34:a2:06:6f:54:65:8e:27:55:
68:15:ad:5d:c6:fa:f7:e1:a0:75:b7:c4:46:aa:83:
05:31:0e:33:c3:fa:4f:a1:73:74:20:22:18:80:9e:
f8:fe:72:52:64:db:52:8d:05:1b:38:37:11:8d:0a:
d4:9d:d6:b9:61:12:98:9b:f6:d4:70:b8:73:dd:a2:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F1:AE:18:68:02:36:E4:8A:9E:BA:E5:4B:56:EA:11:C4:1C:2D:54
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:01:7b:c3:ea:4a:1f:69:62:cc:a7:06:3b:2e:9d:99:61:39:
fa:1f:97:05:6b:6a:78:d6:8c:f4:15:be:43:5f:2f:61:2d:b4:
95:40:b2:ae:e2:d6:94:6d:78:92:0e:c3:86:5c:e6:c8:ec:f2:
ad:4c:2a:4e:77:4b:25:35:67:51:ce:3c:cc:0f:ae:c4:26:fb:
45:44:81:bd:cd:f7:57:43:bc:95:d8:bf:14:74:38:2a:a5:e2:
59:24:cb:46:aa:a7:ee:05:d1:73:37:8a:68:b2:1b:eb:aa:27:
c1:4c:49:a1:d5:d1:25:e4:ee:d3:a0:a1:e0:15:48:cf:09:19:
3a:e0:d7:7d:58:13:d7:ae:04:eb:78:bc:8a:f9:ef:bb:d4:d8:
b7:99:7f:bf:4e:97:a8:14:9d:80:ca:4b:6d:28:28:da:30:04:
6f:fc:7c:91:ee:3e:de:a9:a2:fc:83:cb:93:1b:e9:f8:82:8e:
03:55:e1:8c:4e:f6:94:b8:95:29:f3:b6:5b:46:1b:19:ff:33:
26:81:ae:46:6a:21:27:1d:ba:ae:6c:55:0d:72:5f:ac:af:cf:
98:d7:6b:3f:fe:80:b4:3b:51:08:b6:c3:04:ae:47:cd:26:fe:
e3:92:8d:12:29:a4:10:4f:db:3e:33:9e:0d:1b:1f:d9:8e:75:
c2:7f:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:48 2025 by rpki-client