Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: EozGpdHslPfCSALYEsc7cIye6+mnJlf7kVVs0j1q8rY=
Subject key identifier: 2D:BE:20:B6:E9:A0:20:D2:D8:65:0F:65:4F:59:9E:D1:AB:FC:7C:CC
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 0194BC04C81BB4901703950874CEEB4D44FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 0B85
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: W4rzCtCBSfAlEgZGfVHzgDHoBYnQthoAJB4iVc0gyIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:1b:b4:90:17:03:95:08:74:ce:eb:4d:44:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=2dbe20b6e9a020d2d8650f654f599ed1abfc7ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:7e:08:ed:9d:50:bd:f9:54:f5:b7:11:04:
c7:85:7b:ef:75:dc:d0:d0:5b:22:83:a2:b1:3d:14:
8c:32:d8:00:d6:f1:bc:c4:c7:20:fa:3a:f1:75:80:
cc:3a:7a:03:48:7d:14:2c:f9:0a:e8:14:5f:84:80:
2e:c3:63:d8:01:97:1d:06:f5:fa:b1:89:3d:98:e0:
a4:5a:f8:e9:c9:33:29:13:6a:08:54:e3:f2:9c:9d:
15:3f:0f:a5:ed:3f:fa:28:dc:6f:f2:20:82:3f:f8:
3a:c5:eb:6f:67:41:5d:43:be:17:57:b8:e9:61:58:
a6:8f:6c:fb:fa:5c:8e:ff:74:2f:6d:ec:53:ee:f4:
36:cc:23:81:b9:00:8d:1c:1b:0e:18:7f:ac:e4:77:
8a:e9:58:15:41:0b:90:22:84:24:63:b1:18:92:fb:
ae:ea:bb:1c:dd:3b:72:f2:08:32:51:b3:5b:1e:30:
dd:cd:b8:af:08:29:5c:e4:82:a5:38:31:ec:67:41:
b6:3b:fe:d4:a4:26:6b:e0:2b:35:ba:03:74:03:cd:
9a:c4:88:7c:fd:76:d8:b0:3a:f5:ef:dc:1d:19:68:
38:11:05:ab:89:55:f0:2d:7f:05:b9:42:65:1d:90:
80:af:06:8e:50:69:1b:f9:3c:db:25:70:ef:3d:40:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:20:B6:E9:A0:20:D2:D8:65:0F:65:4F:59:9E:D1:AB:FC:7C:CC
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3c:63:e7:3b:18:ec:5b:9a:4c:e0:92:a5:97:6d:b9:e0:51:
28:f2:eb:d7:9c:55:53:53:9a:99:b0:dd:6c:a9:2e:62:40:0d:
fb:60:35:d3:c0:1c:c1:06:da:d3:f2:c9:48:30:90:6d:37:95:
7c:7a:83:a5:ef:9b:73:38:ef:e5:f7:1e:62:70:3a:37:71:6c:
73:3e:7c:e0:3a:8c:a6:48:a4:e0:95:02:ae:a1:e7:58:ca:bb:
5a:89:85:de:53:d6:bd:6d:71:bf:a2:82:a2:e8:51:f1:f4:8e:
96:cf:00:24:8b:84:16:62:fb:2d:a8:b2:52:52:98:14:bb:d9:
dd:5f:08:a9:38:c7:0e:9a:17:62:86:cb:b1:c6:22:01:17:a0:
ba:fd:f7:e9:95:94:2a:a9:ae:34:56:43:c8:12:d9:f1:b9:21:
ab:6f:d4:69:d1:12:21:e7:1a:8e:41:60:3a:f7:e8:d5:b7:df:
a0:2b:64:b1:9b:df:18:7d:75:5a:50:e1:a7:75:30:b2:4a:0e:
65:c1:f6:84:36:d6:23:1d:20:be:79:46:2f:ec:4e:d8:57:cb:
40:86:19:3b:d6:1a:6a:6d:b2:b4:04:a6:b0:42:8d:8b:45:a7:
ca:1e:25:9e:1c:1c:9d:bd:c2:49:0d:c6:f2:18:56:a7:f5:fc:
9a:80:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:42 2025 by rpki-client