Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: hju/bhv0ba876DZreFd1F2aFTOHFvNmQuXufSEpkRQM=
Subject key identifier: 16:AD:B7:7C:9A:A0:CE:EA:F1:79:F9:E1:E5:15:96:C4:CE:19:07:55
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 0194BD177EF5885D2BD87953447D5C911300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 06E6
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: ulGRAg2eohFc8ngzdV7fUlKOvCgTjCLg0xn/I67rMtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:f5:88:5d:2b:d8:79:53:44:7d:5c:91:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=16adb77c9aa0ceeaf179f9e1e51596c4ce190755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:b5:c1:ca:8a:cb:af:37:05:50:97:47:a9:
f8:52:80:9d:65:66:6b:15:43:58:04:6f:65:e7:1c:
d7:27:6a:42:50:a8:92:a0:82:8b:5d:78:d5:6e:dc:
17:06:35:d7:e3:78:a3:41:eb:d4:4e:61:df:19:ae:
3b:f9:73:5f:48:f0:0a:dd:7c:37:8f:23:69:2f:5b:
65:1a:f2:e4:c6:b5:e5:40:1e:97:52:2e:75:f2:a6:
7a:a6:a7:9a:e0:c8:9a:ea:5d:c3:3a:e6:7f:d5:f0:
fd:16:10:50:30:f4:db:fc:c6:fe:4a:e6:8b:ee:27:
30:34:e6:12:aa:8a:96:92:85:40:63:4a:fa:fd:35:
c4:d2:d3:c6:47:cd:e1:69:38:79:7f:5b:9d:42:ab:
81:89:19:eb:8f:20:36:82:2b:94:e6:03:75:d5:a5:
1a:a0:b1:63:be:c6:be:e8:06:08:7d:3e:47:d0:ee:
3c:1e:77:a6:7a:c6:62:d9:cf:3d:cf:d4:6a:da:dd:
6a:84:ca:fa:5e:e4:72:b6:68:95:0e:73:43:ec:47:
17:c6:5b:0d:0e:c8:f3:73:ab:d4:b8:da:cc:00:90:
75:5f:e1:cf:9e:71:53:b8:ed:1e:70:e0:07:e9:b5:
29:da:b9:2c:08:d9:eb:1b:a0:ab:42:3a:88:f7:86:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:B7:7C:9A:A0:CE:EA:F1:79:F9:E1:E5:15:96:C4:CE:19:07:55
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:dd:5b:5b:1a:f8:4e:6d:44:3e:c1:df:be:23:1c:11:35:99:
5b:cc:1e:0a:13:ef:0f:ea:4f:51:7d:18:95:40:92:61:b2:1b:
ee:6f:65:37:7f:d2:2d:f7:0c:6a:fb:d2:28:37:ce:f7:71:a5:
bb:e7:ce:cb:83:53:81:81:39:59:51:c1:27:d2:78:92:e0:1e:
cc:44:da:f0:d0:98:65:ff:86:14:7b:49:97:2d:83:fe:ff:dc:
f6:b8:f2:7e:bf:43:6f:92:28:a9:9f:b2:1a:de:33:e2:c2:03:
1e:15:c0:db:6c:f5:12:7d:9c:01:84:14:36:67:6a:29:4f:de:
a8:72:66:1f:1a:04:26:ee:ed:24:9e:ec:bd:c6:16:99:84:cc:
2b:51:1f:87:e0:9c:b6:82:3d:33:28:a8:1c:07:bb:c7:84:45:
2a:5d:d7:10:b3:19:53:53:58:db:2e:d5:30:d5:31:85:dd:fc:
37:70:38:53:11:a3:a5:40:2d:d4:38:95:94:94:36:e7:af:cb:
38:bc:26:f4:cc:87:ca:8b:0e:7b:15:3d:7c:ae:fb:9a:17:d2:
bd:f5:96:98:8c:e1:e7:ea:af:b1:13:f4:0a:54:88:c3:ad:58:
19:52:65:e9:10:c7:85:03:1d:68:61:8c:94:95:88:d8:1c:7d:
91:e9:e4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:40 2025 by rpki-client