Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: wuMlPg73vQpiFTzfjMiutBU+kny/kvpf+TOJASpGIJE=
Subject key identifier: FB:E7:3F:E3:26:25:56:E3:6C:E8:A4:9C:8D:1F:9A:7B:7E:DA:68:31
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 0194BD858B79C05457EF2DBA5F077A2A77BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0B61
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: hEISot9G7OVOp0JbEztFKrVLK2GmSPPwfTgBdzl/hwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:79:c0:54:57:ef:2d:ba:5f:07:7a:2a:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=fbe73fe3262556e36ce8a49c8d1f9a7b7eda6831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:2c:68:24:dc:2f:dd:76:66:48:58:a8:16:
d7:82:6f:03:58:b2:da:fa:79:47:b0:e7:ae:2c:c0:
ae:c6:78:3a:62:a5:d4:92:5b:01:d0:99:6e:5c:c3:
e5:95:2a:44:11:77:13:5e:36:ed:b6:b0:35:ae:09:
c3:71:e1:68:28:87:64:c8:d7:30:cb:6c:53:a0:3a:
fc:d4:56:dd:b4:d4:8d:c5:5a:6f:43:e4:aa:b8:ac:
4c:24:32:09:9a:21:e2:c3:a6:c7:65:61:b3:61:5c:
6e:ce:c7:d4:aa:19:cf:11:ac:28:97:4e:cf:22:e2:
ab:92:4f:ae:67:87:aa:5d:7e:d3:d7:98:d1:c5:4e:
73:20:30:83:eb:44:83:a1:96:90:b5:c9:57:73:92:
87:bc:de:81:78:ac:70:a0:cf:d4:3b:ec:59:c1:d2:
b0:2a:27:18:e1:06:6f:d5:a8:a8:5e:e8:fd:72:51:
36:a3:cf:78:a2:e3:70:c4:38:60:17:e1:c9:44:23:
85:8b:2f:31:f4:e4:5d:d9:60:28:be:b5:aa:4a:d6:
9c:ff:40:c1:55:11:d6:df:68:f4:b8:85:a5:00:16:
87:97:65:f9:79:7e:bd:b9:49:30:18:04:75:da:70:
ec:b6:5c:1b:51:1a:c6:17:1b:05:2d:4a:32:39:04:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:3F:E3:26:25:56:E3:6C:E8:A4:9C:8D:1F:9A:7B:7E:DA:68:31
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:12:a9:89:65:7d:13:4f:d6:a8:25:fa:32:13:e3:37:97:
d9:1c:55:1a:42:18:76:53:a5:26:97:4e:8f:e8:75:8d:33:b6:
5b:b0:06:5a:e0:d6:d2:b6:e1:d6:38:ef:5b:23:94:31:ae:3b:
38:55:ee:29:ca:a1:16:f3:c0:a1:6b:05:60:d1:c8:1c:be:a3:
52:c1:a6:6a:63:18:d7:f8:e6:d2:e7:76:2b:31:9f:89:47:3e:
03:56:1e:a1:99:6c:40:68:cd:60:99:94:84:e2:58:36:50:b6:
af:a3:fd:15:76:b2:c5:9b:cd:17:6d:47:5c:9f:35:06:38:7b:
6a:c5:33:6d:69:03:3e:c7:d2:e0:6c:8c:85:bb:d1:2a:8c:d9:
5c:61:61:9a:d2:36:de:b0:13:05:aa:90:25:95:55:bb:5e:7a:
de:89:ac:e4:12:05:bb:d9:a4:00:94:df:77:78:9a:f4:55:93:
a9:19:d7:d5:9d:c9:78:55:7c:b0:a5:2f:10:14:9d:cf:63:62:
f1:a1:7a:75:5c:15:6b:14:85:57:49:91:41:ad:e4:29:12:ed:
83:8a:7d:67:3a:95:9a:8a:f0:05:cf:e5:bc:af:7a:10:0c:9d:
5c:0f:7b:33:53:57:2d:35:6a:5a:bd:67:16:b1:23:9d:a7:c0:
76:32:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:21:38 2025 by rpki-client