Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: ITzm2/p+wDAqYyii6vhD30oiUzPqUh4HasB5A8yT3mo=
Subject key identifier: 04:BD:2D:F6:96:89:E6:E2:C1:C9:0E:DB:E7:05:C0:30:C4:E8:9A:04
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 0194BD1796A0D860EA46C350D117BF65DB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 06DF
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: quPo7XCo9Vfzvmqn9xr_avi8-tY.roa (hash: HQMmbd9lhqZh9SKkFkTx4LcJ68UuN+T5QYA7MHoKGSY=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: 8UfhlYHH6MzzNzdRSSzC5slFy0i7d5ZmbkAg3kcgl8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:a0:d8:60:ea:46:c3:50:d1:17:bf:65:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=04bd2df69689e6e2c1c90edbe705c030c4e89a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:62:96:33:51:1e:26:23:7c:46:a0:2e:7b:
4a:c8:e1:53:a2:e5:5f:d6:b5:17:d6:8c:0d:bf:53:
55:3e:78:fe:db:2e:7e:81:11:c0:a7:6a:48:60:c6:
dc:a3:7e:33:ed:28:91:f5:46:1a:8a:c3:3f:fb:c0:
10:f8:7d:9d:21:f1:73:2b:14:99:48:51:77:65:2a:
b6:7a:01:c1:30:8a:4a:19:06:88:13:23:c8:63:a6:
3e:9d:22:bf:48:72:89:b8:e1:6b:4b:b9:27:69:fe:
da:ea:72:e9:ec:20:0a:f4:df:de:72:90:b5:ec:c1:
f3:49:c4:dc:81:f0:33:e6:62:70:92:74:1c:dd:99:
b3:7d:fc:b8:e5:36:5d:d4:25:03:27:0e:ba:05:5b:
ed:28:a0:3b:8a:d8:f9:1f:b1:09:e3:0c:04:11:75:
80:be:62:f8:1e:99:19:cf:44:7f:47:f1:07:78:03:
b1:6a:ff:69:28:8e:21:29:f9:f7:e7:b0:da:31:54:
d9:90:a9:77:e6:a4:c9:76:c2:bb:8d:7b:0c:5e:bf:
32:2e:9a:ec:b2:03:d1:9a:cb:60:fc:39:c4:71:55:
09:ed:bd:4e:42:eb:48:72:dc:71:8d:e2:a5:fe:90:
b4:e5:ed:b5:64:c8:69:a0:85:54:6b:bd:54:5c:9b:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:2D:F6:96:89:E6:E2:C1:C9:0E:DB:E7:05:C0:30:C4:E8:9A:04
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f2:0f:a0:3a:32:94:03:f9:53:8f:f0:d7:73:d9:c7:28:d8:
ab:c9:88:72:64:da:1a:c6:66:f6:f7:e3:18:f3:95:09:14:67:
10:97:41:b9:55:25:30:15:12:ee:fc:ab:ca:c1:d8:dd:84:27:
ee:04:44:38:06:bb:22:5d:2b:fb:92:0d:47:69:05:ef:3d:ab:
17:ed:31:4d:b4:7a:ab:ba:33:c0:a6:cc:2d:77:cd:be:9b:86:
28:5a:b1:e6:3a:3f:dd:3f:32:4e:14:cb:3d:fb:b6:6d:b0:91:
b7:4e:60:23:d4:9b:04:1a:a0:c4:22:94:b4:e4:52:3b:a4:85:
c5:3f:bd:8e:95:f0:f6:e2:9f:81:bf:f7:bb:c3:c7:a2:60:07:
20:be:76:b6:29:63:3c:36:cf:c0:72:3a:6c:22:e4:23:01:de:
fe:f4:d5:9f:dc:04:69:57:a3:2b:6e:e5:ba:33:2b:79:f0:b6:
ec:89:6d:a4:2a:d7:a4:87:a3:48:9e:11:bf:3a:e5:d2:0d:a1:
f4:22:e8:98:d4:d5:04:e1:0c:30:55:58:f7:5d:dd:ff:3a:e6:
a0:06:08:f6:62:99:7a:e6:e3:d6:6f:54:b5:7d:0e:b9:af:f9:
3e:cd:be:e5:5a:61:47:22:89:4a:4c:c8:1e:89:38:cf:7b:df:
dd:6a:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:34 2025 by rpki-client