Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: VeGOruXLgYd614+Mh3e5R1P36mWR0AVE7GfWWKirIic=
Subject key identifier: 89:9D:50:16:A3:82:B9:64:CA:F0:42:F4:22:4B:72:6B:AA:58:77:6A
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 0194BCA9B330DE046BE625AA5F14D3652BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0376
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: vb57V9QF5MwvUmjZSgun7Ts/jdlXIRVC1TyvigZDx1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b3:30:de:04:6b:e6:25:aa:5f:14:d3:65:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=899d5016a382b964caf042f4224b726baa58776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:3e:4d:f4:a8:6c:a7:fb:40:b3:f7:d0:3a:
95:c5:48:64:99:3a:6b:7d:8b:a0:8a:65:57:05:95:
f0:3a:9d:c8:58:ce:91:94:fc:2c:62:84:b7:3d:74:
3f:c3:46:d2:4c:15:b1:7d:cd:79:63:2b:7f:ae:d3:
38:42:90:55:65:d0:96:cf:30:03:d9:ca:47:cc:91:
92:a1:90:78:5a:fb:d6:22:d6:6a:61:59:77:b9:af:
c7:e7:59:21:d0:7b:1e:e7:57:3d:ee:d7:aa:de:e7:
39:d6:87:55:a4:89:1c:d2:7f:5b:46:6c:8d:c2:3c:
d7:f0:5c:92:5e:37:26:9b:ba:83:f2:6e:24:01:b0:
19:4e:66:73:17:2c:e8:30:bc:42:41:c3:9a:c3:29:
03:20:e3:cc:27:f7:c8:19:fd:35:eb:0c:42:fb:77:
71:55:7f:b9:0b:58:81:79:17:72:39:d7:7a:4f:4d:
23:6d:eb:53:f3:04:30:9e:6c:13:2d:a8:3a:2c:94:
a3:8c:a7:bd:20:83:e1:ab:87:2a:67:b7:cb:51:2d:
b2:1e:66:b3:13:c7:f8:c5:aa:07:6a:d9:a3:06:dc:
b1:5c:0d:72:5e:86:f5:c1:92:ce:3c:01:4e:66:66:
aa:a6:75:1d:f0:59:66:d0:ae:ff:00:71:f0:7d:56:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:50:16:A3:82:B9:64:CA:F0:42:F4:22:4B:72:6B:AA:58:77:6A
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f0:dd:23:ed:a5:d8:51:b9:63:4c:00:0c:42:54:e0:46:fa:
ba:40:cb:c0:86:ed:f8:2b:95:bd:d3:11:00:52:01:69:b8:9c:
51:90:ce:51:32:6e:79:e2:80:a8:91:25:0c:23:d8:72:10:1a:
40:5f:e0:4c:b5:a5:0f:df:85:df:0e:eb:11:cf:58:f3:df:24:
c8:f1:08:9d:5e:53:95:de:46:0d:fd:bf:18:37:9f:ae:0c:27:
b5:ce:61:84:94:23:68:66:4c:66:0e:60:c9:ff:23:c8:59:48:
06:3e:4d:7c:3b:a1:48:eb:ab:89:6f:89:cc:b7:6a:88:e5:b3:
a9:10:6b:31:d5:cf:db:fa:b6:85:13:7a:e5:32:5a:b2:3e:11:
f0:61:18:a0:1a:f2:e0:d0:aa:4c:0f:b5:b0:c9:42:bc:7c:22:
1a:3d:d0:b0:ef:96:de:ed:b7:b7:c9:c9:23:b9:1e:06:08:b3:
1c:9d:45:8e:73:47:bb:57:69:ff:76:d2:9f:fe:ea:34:b7:38:
04:45:df:4e:23:6d:a7:12:d8:8b:2f:cd:01:91:d4:ab:13:8e:
b7:f0:00:23:ed:64:b3:02:9c:74:bc:8b:04:63:07:80:c4:bf:
90:9a:f7:40:d2:c2:f4:c8:64:fd:ed:0b:ee:f0:f5:67:2a:ab:
e0:37:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:23 2025 by rpki-client