Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: wMRS2ETv3VHO2ZnoVQMLxq4z9EA8KzRxcMGvmqmRCbE=
Subject key identifier: 33:78:87:75:A5:6C:A8:BA:D1:E5:2B:53:D5:BB:53:97:57:7D:71:81
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 0194BC73107EB3667E7B246FB975C74C5BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: Ccod8RvWOi7aiOqpV6qnGDEnjRy/atl9HzvVi5opsoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:7e:b3:66:7e:7b:24:6f:b9:75:c7:4c:5b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=33788775a56ca8bad1e52b53d5bb5397577d7181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:af:80:ff:a3:39:31:7b:24:07:0d:74:de:
5e:a3:b0:4a:7b:c5:f8:66:2b:41:48:29:4a:6f:4a:
49:c5:21:5c:b0:84:32:39:e3:b5:32:ee:3a:eb:dd:
0b:ba:55:c8:bf:06:62:85:58:a7:2e:ca:2f:21:b7:
36:dc:df:0f:c8:39:f2:e0:4b:45:c9:06:f1:62:26:
f4:3f:33:df:8a:78:44:83:c5:5e:e1:a4:ea:98:c2:
c8:aa:15:f0:40:ca:b0:7c:cb:7e:27:ca:1f:9b:3f:
c8:b1:6f:ab:0b:df:6f:36:c8:e3:30:57:28:08:a0:
30:2b:49:1b:2f:d3:78:8c:c9:c8:f8:d3:53:a2:31:
77:f5:a6:9f:71:6e:ea:36:2e:7d:25:ef:27:20:55:
5c:a4:82:e7:71:ac:e2:09:04:f8:46:a5:d5:a6:91:
5b:02:9b:b1:02:bf:df:35:0b:27:b2:c6:40:21:c0:
e5:45:cd:0e:b9:08:a6:a3:1b:c0:bb:ba:4d:8f:92:
f6:af:95:69:cb:2b:da:43:72:87:bf:3d:a9:85:1a:
f5:dd:68:28:4f:01:1f:f6:18:af:29:c7:92:30:b1:
63:de:2f:ac:cc:63:5d:55:1c:37:1b:c1:50:b4:61:
04:68:d2:d3:40:f4:32:3c:73:5e:23:20:8c:7f:b3:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:87:75:A5:6C:A8:BA:D1:E5:2B:53:D5:BB:53:97:57:7D:71:81
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:95:cc:70:e4:09:44:27:e6:14:a1:4d:8e:2b:9b:c1:e9:54:
50:c5:d1:ad:b8:27:ec:00:06:69:9d:75:42:eb:ce:c6:73:e8:
a1:ce:0d:05:fc:df:c4:8c:41:1a:45:0c:8c:ac:05:c0:ed:07:
24:77:34:4d:ef:57:03:5c:65:18:0b:6a:b0:8f:b6:a6:5a:97:
4f:fb:a2:47:f4:04:00:0c:1a:68:68:15:7a:49:51:6f:ec:13:
68:8f:60:f1:af:e0:5a:6c:cc:84:8f:ee:b0:3d:f5:88:1c:ed:
84:e8:59:39:9d:3e:21:48:35:3e:67:fb:d3:61:49:20:af:f2:
d6:e3:33:3a:55:2c:c9:b6:e6:7d:c0:60:14:5e:88:7d:9e:1b:
ff:ab:7c:02:86:2f:30:07:81:e8:ed:71:12:dc:8c:79:79:4c:
75:01:ef:8d:04:92:b9:a4:41:51:3d:d2:56:ce:fd:33:da:cf:
53:52:9b:47:88:c4:16:7c:a9:d0:98:4b:f5:0d:27:e8:ea:62:
45:a8:75:63:51:4f:10:32:f2:27:e4:f3:68:2e:03:0b:55:9b:
02:2a:9f:3e:0f:8b:c7:a5:d6:67:43:9e:a5:65:85:1c:7e:7f:
f1:9d:3c:6a:7b:3c:51:b5:e7:5e:ec:2b:a7:bf:51:d4:bf:35:
78:76:0a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:13 2025 by rpki-client