Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: 4YR+IdkVjmfxh3KpI0ZKjrePKBPBxZ7JXMpnPm4oWWM=
Subject key identifier: 80:BC:97:14:93:C1:21:8C:E0:26:97:CA:C4:F1:8E:CE:4B:2E:39:DA
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 0194BC04EB041CA1271EBAD4C87D6471EAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: Zz4XR3FFawiap0lyo4eg5P6mfvj2UD0wgJiBxK4KqLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:04:1c:a1:27:1e:ba:d4:c8:7d:64:71:ea:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=80bc971493c1218ce02697cac4f18ece4b2e39da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:0a:78:0e:1a:98:1c:98:ea:11:d6:57:94:
18:f6:d2:a9:e8:86:d8:e7:f4:32:a7:d5:f4:09:3a:
a2:ee:4a:00:4e:c0:d4:a2:34:74:26:8d:56:d0:28:
26:c3:b7:93:b4:9a:0e:53:b9:8b:7d:6c:fd:be:e2:
61:c0:e7:bb:4a:ef:fd:15:b8:0b:f1:21:0c:13:df:
bf:40:38:66:a9:63:da:d4:af:6a:08:ba:f4:c7:02:
77:77:b9:42:88:20:45:1d:c2:e1:72:93:5a:97:f2:
ba:25:18:f2:c0:fb:e2:f5:fa:c7:5a:f6:da:75:ab:
69:1c:85:48:0d:53:d1:49:e4:65:96:02:2a:5a:d7:
28:c3:38:7d:ed:de:42:c7:ce:a6:6e:c4:7c:95:f7:
b6:d7:3e:92:da:10:b3:91:a2:8c:91:1c:b1:d4:1f:
47:aa:63:53:4d:75:a4:3a:ae:fa:2a:de:34:5a:86:
0e:4e:3a:eb:ee:a5:22:72:d3:d5:88:8d:61:98:1d:
6e:8d:82:6a:60:5b:99:7f:f3:d4:3f:ba:47:6d:28:
af:13:f3:7d:16:3f:a8:94:1b:31:81:7d:44:a6:e6:
8f:ca:0d:6a:92:77:ec:fd:85:08:8a:84:da:e4:5b:
46:f5:ca:ef:8e:25:d3:1d:a6:25:8c:9b:a6:c6:d7:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:97:14:93:C1:21:8C:E0:26:97:CA:C4:F1:8E:CE:4B:2E:39:DA
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fc:22:62:ef:b6:e5:26:f4:93:0c:09:d1:8e:7d:ba:74:e0:
f3:6a:a5:d9:64:d3:01:9b:fa:45:be:3f:32:e9:df:16:dd:ed:
d8:b3:e6:ff:41:df:74:4b:99:3e:8e:ab:9e:52:c7:e6:24:d6:
5b:c4:61:c1:0b:37:4e:78:6e:fb:68:ec:66:74:83:2e:8f:b2:
2a:1b:90:fa:f5:10:08:7c:01:30:2b:5b:64:f7:d1:bb:95:35:
0b:9c:be:f8:28:fd:ef:c1:57:e2:0f:be:8f:e0:5c:a9:4e:f1:
79:d9:87:95:33:d0:fe:7c:43:50:53:30:0d:33:82:5b:99:13:
e4:dc:4a:ec:ba:d7:f6:4e:a8:16:26:ad:3d:f7:3b:42:d2:6b:
17:36:86:30:12:b2:1f:f7:b3:49:83:45:bf:4e:8e:6d:94:10:
3d:0b:a0:28:76:d5:a1:41:ec:f7:22:87:f6:fc:10:e8:57:33:
97:13:cc:25:48:f4:16:52:60:e8:f8:39:c6:55:4c:86:c8:5e:
30:bc:00:4a:13:6a:eb:ad:72:09:4c:b0:0a:8a:bd:d3:a8:ca:
a4:ce:c5:4e:5c:f7:57:32:1f:a2:37:ea:f8:83:1a:12:97:39:
71:c4:c3:5d:5c:cc:06:44:5c:e7:9c:03:68:9c:94:64:a6:01:
7e:c8:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:50 2025 by rpki-client