Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: XsDDKd1o+hOqihwtLi1YiogXEz5hwFRonR4vYxjA/G0=
Subject key identifier: 23:A3:2A:EE:78:EC:0A:C7:3C:87:EE:0D:1E:BE:F3:29:FB:24:F1:80
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0194BC05010E3DD4E08625BAF8A9C8507E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: CqR993Sxl8T8_xxFtdAQLARlWJ8.roa (hash: pLoqBN+RV3KzUQAn7YJ0i8rh2tkXVTjCWUT7auAZtPo=)
2: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
3: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: 2B695vfUaxK6zT+RU6B7M0fuD3PiZ6v/wc019qWsD4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:01:0e:3d:d4:e0:86:25:ba:f8:a9:c8:50:7e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=23a32aee78ec0ac73c87ee0d1ebef329fb24f180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:f0:6e:16:07:a6:38:ee:77:62:5d:4a:e7:
ca:49:25:c5:b8:13:29:69:9f:84:2d:7b:5e:2c:d0:
01:06:9f:ab:a5:1a:d3:11:36:c3:12:7e:e5:84:1b:
60:a6:cb:8e:85:c3:28:d3:77:26:47:35:eb:98:f3:
f3:7c:9c:d3:f4:4d:4f:7e:50:12:2e:d0:6a:ab:48:
6d:60:cf:7c:a5:33:af:24:03:1a:7a:92:af:bd:da:
db:c5:65:c5:ed:3c:cb:97:23:65:c4:f5:6e:57:e9:
4d:92:55:8f:a7:eb:eb:95:ac:4c:71:72:f2:19:f7:
e3:78:a8:5f:41:7f:2d:68:d4:07:86:a8:81:a2:2a:
ad:15:4f:c0:a4:82:a8:4e:95:b8:c3:03:d4:0a:c9:
37:7d:3c:a9:85:5d:94:42:70:37:cd:f3:24:96:52:
8b:e9:9a:e9:7a:b2:87:0e:55:fe:89:ea:c5:58:31:
ef:96:e6:ec:97:ed:2c:93:a3:67:ec:cf:41:28:0b:
55:08:d3:35:81:0f:84:22:f6:ee:30:20:b4:dc:c1:
24:0c:25:83:a0:ec:89:27:2c:35:96:7a:d1:78:7d:
94:c2:d1:cb:e9:74:1f:d4:db:a0:4d:94:c0:8c:e0:
ac:a7:1b:fd:34:ac:a3:2e:be:d1:1f:8a:62:1c:b6:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:2A:EE:78:EC:0A:C7:3C:87:EE:0D:1E:BE:F3:29:FB:24:F1:80
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:38:a2:fc:21:e3:13:08:71:57:1f:96:31:f6:c5:1b:48:6c:
21:e6:ec:25:60:83:aa:da:59:44:24:37:79:46:7c:35:c1:cb:
c4:4b:92:1a:c8:17:53:65:a0:06:52:09:ae:11:4a:27:7a:7e:
29:c3:1d:36:6f:28:bf:24:0e:3d:37:24:d4:e9:59:7e:87:fa:
ea:c5:e4:4f:7e:7f:aa:54:4a:cd:34:3a:9a:35:a0:15:f5:2a:
96:a4:45:75:4b:d8:da:52:33:a7:81:8e:44:c2:ca:66:b6:5d:
35:7a:41:0a:8f:13:01:68:84:6f:7b:1e:fc:a5:8e:b9:d4:a5:
df:46:5c:9c:2b:38:51:36:46:af:34:b4:ae:06:23:d6:b7:97:
5a:87:fa:72:3f:a6:c5:af:d5:4f:cd:d1:06:bd:28:cc:dd:bc:
67:f3:1e:12:59:27:47:9a:2b:ff:41:ac:b8:d2:ce:74:bf:23:
49:0f:52:32:26:9d:d9:af:b1:9b:ab:76:19:e2:eb:bb:3b:35:
76:04:23:17:61:37:23:27:fa:ed:3a:d0:d2:c8:58:10:ac:c7:
70:12:bd:36:2e:10:e7:76:eb:8f:3a:59:d2:a1:f7:1d:8e:a9:
6d:74:0d:2d:5d:72:59:f2:b6:c2:da:64:ca:50:43:78:ec:0e:
93:2c:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:02 2025 by rpki-client