Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: bj1QvZP6MUnyWPoG178UC+GKeWXezVTA83Pz3awuoPs=
Subject key identifier: 92:C5:8D:A8:BB:37:06:55:FF:04:41:9D:43:B4:99:F0:E7:45:C7:44
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 0194BD178C0E266D757A7E2F34C9376D4CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 06E7
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: qLCoHGVLiRCyimR2LnS+77jP3l3ind0LtGz/+bBC7/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8c:0e:26:6d:75:7a:7e:2f:34:c9:37:6d:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=92c58da8bb370655ff04419d43b499f0e745c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:21:21:a6:63:04:c1:ff:4d:cf:81:9b:c2:
d2:19:02:c9:0b:45:db:df:bc:ff:55:81:26:02:98:
18:58:1c:09:82:13:3c:7a:15:27:fa:39:77:73:c9:
0d:bc:96:77:bc:09:5e:17:d3:bb:74:ea:20:e9:c2:
f4:72:04:b9:6b:76:f1:6b:87:23:3e:86:80:95:e8:
41:44:f9:a0:9a:98:66:a3:23:ab:7f:0e:a3:68:ba:
ea:76:f7:f0:8a:85:bb:22:35:55:71:49:0a:0b:51:
e9:36:af:40:95:54:51:67:54:6b:95:3e:78:52:20:
83:04:8c:32:71:75:b3:45:84:91:af:c5:2d:ef:8e:
4e:69:e5:e9:8d:d4:39:47:e2:b0:e7:eb:31:5a:e0:
d4:61:90:4e:c9:20:80:08:8d:3a:95:e4:d7:48:68:
82:af:83:ef:5d:83:22:16:b2:29:3d:3d:13:92:7a:
ae:61:99:ed:c9:28:f8:30:1f:2e:8c:0e:ad:6f:dd:
e7:cf:cd:7e:c3:0f:42:4b:86:07:e6:dc:7e:5d:af:
fe:a3:4b:35:d6:ec:80:6b:ba:ec:c6:97:3f:c0:1c:
9e:1b:c9:13:3f:14:26:59:7e:c8:94:13:10:c1:27:
c8:24:f4:f1:62:9d:e2:d1:fb:51:9e:81:c3:8e:1e:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:8D:A8:BB:37:06:55:FF:04:41:9D:43:B4:99:F0:E7:45:C7:44
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:f6:7b:2b:84:0b:bb:46:7c:37:a4:18:5f:fc:b2:cc:2e:
17:11:9e:79:74:4d:78:70:46:5e:40:14:12:54:3a:69:b1:ed:
08:66:bb:6f:de:54:34:9b:3b:b1:f3:a7:f1:2f:d1:66:1a:77:
60:d6:66:12:0a:ae:91:ae:dc:96:eb:8f:b0:24:51:2d:dd:a7:
e4:3a:79:a0:15:6b:36:b4:46:48:80:81:de:1d:ac:0d:4e:ca:
d5:f3:9c:aa:d3:10:63:3e:55:3b:85:5a:5d:98:ec:7e:8b:37:
5a:e4:7e:df:3b:d3:4a:ee:3c:0b:b2:fd:5c:b6:20:b8:98:e4:
5f:de:d1:ad:53:f6:e0:aa:84:97:1c:76:54:96:c6:ae:49:1c:
4e:91:87:66:ba:f5:9e:99:39:b7:4c:41:06:70:4e:02:94:7c:
b0:81:80:41:f9:23:1d:6d:9c:50:20:f6:ea:52:56:a7:cc:4a:
75:c8:57:c7:ee:43:bc:56:a5:05:c4:c7:1b:39:e1:44:8f:3c:
08:5f:c1:db:29:dc:25:dd:aa:9f:29:1d:4d:60:06:0d:79:c6:
ad:15:de:da:4c:40:f3:9f:31:f1:c1:be:64:5d:6f:e4:0e:90:
62:e3:ff:4c:7f:11:bd:77:b2:b3:ef:a6:e2:73:c4:8d:82:b7:
48:ce:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:15 2025 by rpki-client