Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: 8mcsLoRudaX5b7k7SWAL7NsyS9DE2Z68hPRte6x5atE=
Subject key identifier: 54:12:C7:C3:5D:D2:5A:ED:EE:6C:CC:96:0E:31:E7:F4:EF:60:71:73
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 0194BBCDDBA8747FD93ABCB8104838E386DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: SiqVjDxyVDLNzRkPzYZ0zi3Vu0M.roa (hash: rLfdhWw7JobaBwa4dXxExClwDfQkRczwGTNcURoH/PA=)
2: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: r8xjrWxT781DxQ+Yq3PBra3whspmiWQzHBn+jnTvcoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:a8:74:7f:d9:3a:bc:b8:10:48:38:e3:86:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=5412c7c35dd25aedee6ccc960e31e7f4ef607173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:b4:e0:9e:b0:0a:fc:84:76:45:0c:72:4c:
ef:2a:07:bc:da:48:ac:a3:e0:41:f1:1e:70:60:6e:
45:6a:cc:b4:5f:ea:40:ad:6d:34:ed:ef:75:37:90:
72:d1:df:5f:be:8c:9c:88:1e:f4:71:82:a6:bf:ef:
49:09:00:a8:1f:3e:07:fa:e7:03:ad:21:ab:ae:ea:
df:d2:8e:4d:d4:36:61:a4:aa:df:37:2c:c1:0a:a3:
8d:39:ba:68:69:73:cf:83:88:f0:2f:fa:f3:cc:d9:
fe:f5:ce:6e:15:e1:b3:c7:28:0a:4f:b2:80:57:7a:
c8:68:11:10:a8:23:92:53:b9:27:a4:50:1e:23:cb:
8b:3d:83:87:68:34:cc:be:5f:06:0b:f9:79:81:ad:
f1:d8:de:ae:e6:1a:41:35:d6:0c:95:7b:f1:d1:00:
97:73:57:ed:95:38:e6:01:6c:5d:d0:a7:68:cf:b0:
b4:df:6f:76:3d:04:9f:97:31:19:f3:e4:61:db:d7:
30:bd:56:bc:c9:73:ef:bc:1e:58:c2:94:e8:38:bc:
2f:92:38:01:d7:30:ff:84:8f:a8:13:bf:92:3f:ac:
4c:d3:43:f7:59:07:5e:9c:0b:54:20:73:8b:b4:5d:
72:86:f9:fa:c7:87:04:7b:5c:e0:a9:45:26:f9:22:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:C7:C3:5D:D2:5A:ED:EE:6C:CC:96:0E:31:E7:F4:EF:60:71:73
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:14:ea:93:78:2d:d6:c0:ab:07:58:6e:63:b5:29:cf:12:04:
2b:85:6c:e1:ac:cd:1a:e0:50:dd:4d:31:53:0f:94:98:06:c9:
5d:53:1f:21:64:d5:df:f3:ee:79:81:d0:12:71:a7:d7:65:a9:
98:cc:45:26:6f:3d:8f:bd:08:8d:4c:95:18:bb:e9:0b:f0:07:
ea:0f:53:c1:d0:14:88:a8:2b:25:67:16:87:a4:8d:b4:2e:76:
6a:06:86:c1:4d:f9:0f:e1:a9:ba:3b:cb:bb:e0:25:c2:e4:4e:
b5:bc:ae:12:13:27:46:e6:ea:e0:66:78:b2:f8:9d:31:80:82:
36:89:df:1c:d4:63:ad:d0:dc:8d:2f:58:88:ff:37:7b:02:8b:
bc:a0:7c:af:10:45:c7:1a:41:ba:17:92:60:12:80:81:50:77:
ef:5b:04:c4:33:67:75:2b:44:8b:0c:83:8b:dc:8e:70:d1:76:
96:dd:7c:84:7f:f3:27:53:f2:49:5e:3d:4e:1e:5f:7c:06:68:
7d:db:d2:37:b7:45:0d:c2:c8:27:c5:43:77:8d:f1:84:3e:32:
ff:c8:0b:82:da:cd:b8:95:df:27:8e:d2:ed:4a:96:e0:ee:d5:
57:52:0e:87:21:2f:0c:c1:ea:e2:c5:8b:fb:d3:fd:38:8a:16:
07:51:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:44 2025 by rpki-client