Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: M0ElOy8pAZ2nJLra/+scUUyiaIEo3zYWbmNg2Ec2ONw=
Subject key identifier: 84:04:F2:AE:A7:E1:57:72:E2:E4:0D:50:D2:D6:BC:F0:12:4A:C2:FE
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 0194BD4E4B8844EBE8B552DBD71BDA02D60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: rI4BKa3E1MarnUXBDO6vQMqfndD8swKROmq+AOfJQ0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:88:44:eb:e8:b5:52:db:d7:1b:da:02:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=8404f2aea7e15772e2e40d50d2d6bcf0124ac2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:96:ab:34:b2:0f:b9:68:99:6b:57:97:9f:
8a:ff:22:b5:ca:4a:d0:ee:43:f0:de:5f:32:b2:18:
f8:7e:10:0f:04:9e:61:6c:0a:89:7c:ab:fd:a5:a6:
14:f4:b1:73:fa:19:a8:a4:53:45:54:cd:da:9c:7e:
dd:30:a7:ee:53:aa:07:a2:59:ee:d6:b0:5f:58:c0:
a0:1f:d6:65:71:3e:f6:d8:20:e4:01:19:80:72:49:
c9:52:4e:d5:08:95:75:0c:21:d0:92:a0:51:c1:c8:
7d:8c:90:3a:63:20:c4:a6:f4:1f:94:04:81:67:65:
03:68:bf:c3:4d:97:93:d2:b5:6d:51:c5:0e:ae:04:
5a:73:26:bb:aa:84:79:3f:43:23:fe:b8:ef:1e:44:
0a:6e:b0:c8:53:88:0d:b3:30:21:e0:ca:95:85:aa:
66:20:4e:cd:01:06:24:6e:89:4c:0b:0e:cd:7a:39:
3a:7b:ab:56:1f:f9:41:04:e5:45:31:ef:00:6d:24:
f0:d6:53:00:a3:38:74:35:9e:f4:54:05:b1:49:92:
6c:bb:10:6a:7e:13:fb:c0:7d:3e:4c:a5:d0:65:9e:
11:17:8a:f9:67:ef:08:3d:a1:29:30:35:c6:bd:00:
ec:ae:11:1d:36:ee:d9:06:06:97:ee:ef:e8:1f:0e:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:F2:AE:A7:E1:57:72:E2:E4:0D:50:D2:D6:BC:F0:12:4A:C2:FE
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ce:b9:2e:8d:72:0e:5c:82:7a:44:86:d1:dd:b1:65:56:07:
8d:f0:13:ce:a0:66:74:ca:2c:50:ac:6f:d0:97:73:4b:31:84:
f1:c2:f8:ae:01:57:b5:fd:13:cc:18:8b:d0:00:93:5b:e0:1a:
b1:1b:a4:53:c6:45:45:d6:60:74:6b:85:81:12:92:2b:27:99:
8f:93:2d:17:fa:d8:15:c1:9f:38:b5:cc:d7:83:86:37:fd:8d:
ab:29:b3:09:57:c9:e4:0f:50:8b:f3:57:86:ff:9b:84:33:4e:
d2:1a:3d:89:b4:7c:96:82:c2:8e:f5:b3:4f:d5:ea:9f:0c:20:
40:da:ae:91:48:96:f8:fe:69:8c:00:f0:5d:2c:4f:99:51:bb:
2c:9b:05:0f:b3:a4:49:12:4b:8a:e6:2c:de:1b:2e:3c:43:c2:
00:e7:d7:67:ab:23:e3:35:90:ac:9c:c1:46:49:b7:ce:92:89:
59:3f:d0:f4:de:58:d7:a6:d8:e2:69:13:35:dd:fd:f5:36:26:
b7:46:2b:fd:55:bd:7c:83:63:ef:05:59:3f:46:63:48:87:11:
80:fb:14:bd:f4:15:23:87:73:d1:58:f9:f5:90:bf:3f:48:f3:
a5:f2:49:4e:ee:79:01:8c:08:84:5c:ec:e9:9f:b6:ea:bb:31:
2d:ee:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:51 2025 by rpki-client