Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: XLEj6iHruQm6uKF+a/ssReACsn+hQ2CXv1oF1z0a+CY=
Subject key identifier: 51:AC:00:A9:7C:E3:5C:46:21:4C:01:0E:06:92:B3:27:17:2E:9A:9F
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 0194BC3BDEA1210FCE8A904892425BB3BD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 141F
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: hj7WxSfzDaoIpNKw6B1/vap9Ny2z62Cje8kTGKoz/WM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:a1:21:0f:ce:8a:90:48:92:42:5b:b3:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=51ac00a97ce35c46214c010e0692b327172e9a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:1c:40:c2:79:ed:5b:31:d3:47:6a:3a:09:
ae:4a:1e:8e:f4:94:1f:0c:33:7b:da:ea:b4:dc:0e:
36:28:9e:d6:cc:b3:56:5f:3b:f2:73:d1:97:7f:02:
0e:ca:61:67:5e:a7:11:66:c1:90:19:94:24:c6:a5:
9a:32:fc:9d:0c:22:24:eb:71:d2:f8:6a:b5:61:7c:
98:eb:82:75:f4:7b:8d:d6:a5:b3:0d:eb:41:8f:13:
42:24:8c:4d:ce:b7:d9:ee:63:0a:5d:c2:f5:e6:19:
97:d2:fe:1c:5d:5d:e6:25:bd:3f:b5:38:19:6a:67:
54:15:e2:4f:99:c0:50:e3:94:cb:d9:04:81:d9:7d:
a3:16:9b:aa:af:38:cb:71:96:56:dd:d4:83:ef:fb:
ca:8f:7f:8e:7b:2b:11:90:36:de:b2:12:71:0e:46:
f4:c0:56:39:8b:68:0e:95:f5:d1:2e:65:00:5f:4c:
20:86:9e:7f:a1:86:dd:35:e5:74:4b:0b:b2:35:8a:
74:37:ea:d4:53:b4:1c:cd:54:2e:4a:17:bd:91:bf:
a2:24:37:16:b4:c7:72:95:f7:2f:28:ad:dd:63:ae:
2e:59:6f:36:c3:1e:45:ab:ef:f2:fe:cb:35:e4:b1:
69:89:e5:aa:09:fd:0b:cc:fe:74:0c:4c:f6:75:f9:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:00:A9:7C:E3:5C:46:21:4C:01:0E:06:92:B3:27:17:2E:9A:9F
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:aa:dd:96:7f:08:5c:92:8e:5b:60:1d:6e:14:b5:ed:00:36:
bc:1c:af:a2:35:48:0c:74:e4:7e:87:7f:71:b2:76:dd:b4:8b:
fc:f6:8d:65:81:16:ca:ca:5b:d1:56:3a:39:40:c3:4f:6e:f4:
4a:30:77:74:cd:b8:1f:f5:4c:28:86:7a:e3:dd:76:02:96:73:
7a:5d:91:70:25:c8:39:f2:af:28:0d:73:2a:31:0f:52:33:47:
c2:65:ab:03:14:ef:d1:e5:3d:cf:d8:cc:9d:d6:df:cc:65:50:
ff:95:b7:d0:ea:57:26:6e:81:6b:55:0c:39:09:c7:0f:ab:f9:
08:15:f1:ac:cf:25:6d:b3:6f:1c:63:40:cc:13:91:95:eb:80:
4f:fa:1f:ae:ac:ef:8b:fd:a2:cb:a2:33:81:6b:7a:00:c3:2d:
3b:7b:75:8e:a1:f9:2e:8d:98:9e:e2:9d:2d:d5:8a:cd:52:1b:
39:4e:48:7d:c0:3f:81:3b:35:84:86:30:37:66:8c:87:96:c3:
67:6b:1d:09:85:0e:63:85:de:8d:2e:6a:d4:69:99:34:c3:fa:
32:73:d0:96:33:10:d9:12:fd:dd:66:c3:e8:04:1d:c5:47:e9:
d1:c0:ff:ea:9f:f9:a3:24:98:46:85:c9:6a:99:93:f8:25:df:
55:f9:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:06 2025 by rpki-client