Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: RaG6chHv/0Rj8m/ckzjPrlGnvk7Wb7w3UhX12/GxciY=
Subject key identifier: 48:15:F7:20:13:AB:16:C6:47:14:F7:AE:BA:C9:8D:D4:0A:4A:1F:7C
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 0194BC3C818592D3D387CD90F6A7B7DA6614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: W705u+t/XEREkY94VBP9wfzWBGG9x27I2QWFb0iBzuY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:85:92:d3:d3:87:cd:90:f6:a7:b7:da:66:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=4815f72013ab16c64714f7aebac98dd40a4a1f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:15:c6:dd:90:d5:c1:98:cf:8c:f7:29:d9:
32:31:70:f1:69:ce:b0:ef:dc:2b:84:d8:21:a0:65:
a8:44:f0:a4:f0:38:6a:6e:cb:42:fa:95:7c:5c:1f:
4d:72:cd:d0:7d:32:5f:6d:c6:a2:c9:db:d3:34:b6:
72:a9:3b:87:73:8c:58:b4:7d:2f:0c:0b:06:7c:18:
aa:47:8e:39:5f:86:26:a6:b6:2e:45:d2:fe:53:f4:
1d:86:af:5f:71:5f:36:6a:84:1e:12:ff:d0:c8:ea:
3b:a9:84:1f:db:65:47:ba:ea:c8:d8:4d:ee:c6:d8:
49:c1:9a:c2:99:61:07:da:d5:18:e9:09:24:70:e0:
93:4a:e1:d5:61:a8:7a:39:d1:e9:84:18:9e:11:3d:
55:ba:8a:fa:57:ba:8b:a3:7a:29:ed:19:17:f4:25:
e3:8c:a4:b7:cf:64:21:b7:e7:28:ca:d0:25:43:f7:
af:26:10:09:42:ba:d1:32:06:96:72:46:95:ca:26:
93:38:cd:72:62:22:90:fc:57:5e:32:bf:47:d7:6f:
d2:76:e5:2d:43:da:c3:e8:06:eb:6d:fa:83:1c:8a:
42:f7:11:73:23:fb:7c:6f:b6:e4:67:89:ce:7d:c8:
7c:36:b7:b4:e9:a9:c7:01:06:67:24:3d:fa:9c:d7:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:F7:20:13:AB:16:C6:47:14:F7:AE:BA:C9:8D:D4:0A:4A:1F:7C
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:22:79:9b:9d:6e:3a:bd:05:cb:98:fb:3b:04:fa:63:d5:
39:29:30:74:54:9e:ce:0e:2d:aa:cd:76:72:c0:c8:9f:71:ed:
22:21:e1:be:ce:a3:74:1f:21:93:89:5d:22:6b:c1:cc:6a:1a:
6a:6f:11:da:6c:7a:0a:4b:ea:c2:4a:cd:47:b3:2a:5d:6f:8a:
54:e5:1a:a8:af:53:df:15:1f:c0:47:d1:98:ce:45:2d:13:24:
81:a4:6d:fd:41:57:ef:58:ce:a5:48:46:b3:4b:7e:bc:07:d0:
e9:d0:a0:2d:bc:69:be:c5:a4:18:24:b3:bb:29:32:33:e1:c1:
2b:31:64:bf:fd:1d:3a:d0:c3:0a:5c:c1:8f:9d:6e:3f:1b:a0:
a9:72:a7:4f:cf:3d:be:27:f5:f6:6c:29:ee:df:a7:26:a9:09:
ee:ff:2a:4b:fc:33:02:d5:12:54:85:c9:a0:f1:1f:a9:ff:43:
8e:4d:c6:3b:f8:0c:00:8f:90:eb:e0:3e:84:4d:b1:69:b1:12:
0a:5c:6f:3b:0d:61:01:07:ea:d9:81:98:ec:dd:23:4f:fd:62:
42:b6:be:04:89:33:a4:0d:ac:8d:4a:e6:7a:d7:95:c9:cd:c1:
8e:5a:47:04:c8:99:35:c7:1c:2b:22:1b:23:e1:7f:31:28:2c:
91:d1:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:50:59 2025 by rpki-client