Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier: wdXNRR4TPdvAqRaa0oWOfLc6T4a0XtwppMaFsjVW0ZA=
Subject key identifier: 70:EA:FF:37:FD:EC:62:8C:CA:E8:8E:AC:1A:79:7C:47:3A:EA:1D:52
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 0194BC72DCD4BD711BE2B8C657AA9A916608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: od/9x0F+b6Y/u3N4syxyezkRnxCYlNfuwsL2QRk8qck=)
2: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (hash: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:d4:bd:71:1b:e2:b8:c6:57:aa:9a:91:66:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=70eaff37fdec628ccae88eac1a797c473aea1d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:df:3f:ad:1a:9c:99:f4:29:18:3d:d6:dc:
d4:9b:b5:92:a0:13:8b:c7:21:e1:8d:a9:71:19:93:
11:66:98:1c:2e:cb:ae:d6:b3:87:ff:79:12:40:e4:
5f:1f:45:eb:2e:60:e6:21:bc:dd:7d:40:39:6f:b3:
12:44:f0:e1:46:12:81:f8:de:50:04:ae:56:61:65:
af:88:c4:75:40:3b:1e:df:44:17:d6:a1:f2:dd:f2:
3e:f7:d8:10:f4:ea:99:0c:e7:bd:ae:0f:18:72:8d:
79:9b:06:82:05:62:ab:48:dd:e8:43:e8:71:a7:b6:
74:bf:03:84:6e:7c:76:15:4a:1f:77:62:5d:50:f5:
40:05:4a:ec:d6:82:e3:29:2d:33:0b:24:db:9e:f8:
33:8a:f6:eb:49:91:da:8e:50:00:f0:0e:e5:f4:aa:
75:b8:a5:62:c5:11:db:d7:8a:d5:02:e6:e8:7f:16:
b6:dc:ef:2b:69:84:94:4c:a7:51:5f:10:6f:af:3a:
5a:30:11:4c:d1:3b:cf:2f:6b:f7:df:e2:03:15:b6:
e7:07:d9:b5:2f:30:7c:4a:88:25:bf:e6:7a:2e:ba:
e4:4b:6f:12:cb:3f:18:e2:64:ef:73:8d:f4:b9:5d:
72:69:5a:2f:de:d0:8c:8e:b9:87:27:c1:bb:0f:77:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:FF:37:FD:EC:62:8C:CA:E8:8E:AC:1A:79:7C:47:3A:EA:1D:52
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:40:9d:85:d6:dc:94:30:7c:67:0c:0e:15:43:7b:22:0e:
6f:69:5d:e6:4a:b7:11:9c:e8:54:17:f1:3f:1d:71:8d:ff:f3:
9c:06:ea:16:0f:06:19:b6:33:40:57:dc:68:87:23:11:4e:f6:
97:0d:21:78:ec:d5:6f:f0:31:ab:19:0c:cd:0d:f0:d2:d6:3d:
01:5f:db:85:ff:f5:9e:57:de:45:66:07:c6:02:59:8c:82:a2:
f5:ae:0a:da:af:49:d6:e4:9d:84:be:5d:5e:d7:7d:5a:8d:10:
49:67:c1:75:87:1a:23:4e:b8:12:37:b8:6a:94:7b:b4:49:c6:
f3:d1:f1:34:f8:39:a8:23:de:75:5b:de:bd:04:e8:f7:74:29:
f2:64:de:57:32:18:74:b3:93:be:d4:0b:e9:a3:73:ca:d6:d4:
e6:1b:c3:ef:ac:85:31:d0:ef:ef:46:ce:15:ad:9d:76:6c:f6:
c9:c2:cf:f8:b1:dd:09:05:d2:23:91:2f:8c:74:88:63:16:60:
88:db:0f:59:2c:bf:55:8e:2f:73:b6:26:00:ab:b5:1f:03:5e:
7b:5b:3d:2a:08:ea:9d:0c:38:78:d3:e0:d9:3b:20:d5:c3:7d:
67:86:1e:f1:4e:53:fa:13:b4:ef:18:32:d9:48:7b:e7:6e:b2:
4d:84:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:35 2025 by rpki-client