Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: RFgu3d46XK7oiagPb8iRkKKxkP3eB/YIAaJtbasshQ8=
Subject key identifier: E8:CA:00:6E:84:D4:B6:F3:C0:54:35:1B:F3:93:45:53:E5:D3:D8:56
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 0194BD4E87B6B37DE8A24AE776CE00500AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 03C3
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: UCJGhnacdzpMARKAhjQe59DbHKHs1uu5DeLskpPXC2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:b6:b3:7d:e8:a2:4a:e7:76:ce:00:50:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=e8ca006e84d4b6f3c054351bf3934553e5d3d856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:23:be:36:7c:ca:14:42:02:1f:3d:5c:09:
d7:78:d6:dd:53:14:c2:5e:88:26:ba:7d:b6:3c:7f:
fe:7b:4a:ed:09:c6:08:bc:6c:40:79:6d:3a:00:ce:
af:96:a7:44:15:d9:cc:15:dd:50:d1:a0:cb:66:94:
8b:9c:a1:eb:43:a1:52:80:90:6c:c3:78:62:a3:98:
a7:14:01:21:e4:c8:e6:b2:b6:34:f5:74:11:20:1c:
55:9c:43:66:c4:4f:9d:53:cf:b9:02:4f:01:d1:7e:
0b:18:3d:fe:1a:b5:88:41:82:2b:48:fb:88:a6:80:
88:72:d4:c7:ae:2b:ff:29:de:3e:cf:46:1a:6f:f1:
13:32:67:82:1a:e8:5a:e9:3a:90:e9:9a:dc:d1:6f:
b9:e8:0a:c3:53:9f:83:58:e4:13:5f:18:15:e0:80:
b3:c2:7c:01:0b:7a:48:68:70:c4:2b:4a:3c:d6:8a:
ae:f3:f4:fb:cf:94:00:f5:cf:ab:9c:1a:a4:3e:30:
35:c4:53:df:f8:4d:14:7f:14:fc:da:ca:3e:12:8e:
26:59:c3:18:d4:ec:20:52:7a:f1:22:18:43:92:e4:
c2:92:15:5e:c7:46:dc:4d:74:d8:05:9a:72:fe:ec:
14:db:85:b1:37:de:cc:89:26:d8:cf:78:72:09:c7:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:00:6E:84:D4:B6:F3:C0:54:35:1B:F3:93:45:53:E5:D3:D8:56
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:c9:5b:01:e4:6e:84:cc:0c:77:74:1a:25:04:e8:fe:c6:
2b:80:5b:43:6e:45:ec:96:37:a7:b5:43:53:b8:ed:5c:5d:64:
0f:ed:a5:00:7c:f8:05:53:33:70:1b:a6:95:2a:71:69:17:a4:
bb:10:f7:c3:2d:4c:de:59:06:d8:ab:fc:d7:3a:38:04:a9:54:
bb:f0:8e:fb:57:ea:3b:f9:f5:a1:0d:61:88:51:ca:d1:24:a7:
a0:e7:95:f6:df:bc:cf:8e:95:a6:81:0b:c6:61:00:8e:8c:6f:
33:76:3c:9b:af:b2:49:c7:e8:fd:ff:29:43:35:81:2b:06:5a:
ad:a6:63:cd:be:5a:0b:99:f4:d3:dd:c0:a7:65:9e:04:90:c3:
f5:49:22:1a:91:5d:36:87:08:76:6f:bf:83:37:e5:44:41:03:
6b:e6:03:6c:b0:41:9a:81:02:8e:c7:fa:8e:34:5b:09:05:d7:
1e:81:8e:fb:ac:b8:dd:cd:32:fd:4f:97:65:99:ad:50:9d:76:
d0:2e:f5:82:f6:37:85:00:59:fa:e5:b8:a5:19:d5:25:ac:54:
93:91:12:fd:30:e4:98:30:14:a3:88:7d:1c:5c:ea:d1:49:d8:
16:e2:e2:3f:e6:84:c5:af:83:5d:ae:79:7b:21:6a:a2:43:fb:
6a:70:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:55 2025 by rpki-client