Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: dgDOwi6IcKDZpJRMqKVhSaH/ZYj29/seJpwEyFa8g2c=
Subject key identifier: 8C:B9:3E:52:16:E5:FE:60:01:2D:BC:0B:C0:82:21:F9:6C:93:7D:8C
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 0194BD4EBD4E15A90DDC1EF271B5989CBC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: UDBoPtov9/oRJgDOKfKGwdPRozu0SeXmE0olkcHiiA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:4e:15:a9:0d:dc:1e:f2:71:b5:98:9c:bc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=8cb93e5216e5fe60012dbc0bc08221f96c937d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:af:4c:01:50:1a:45:23:95:32:82:af:c6:
09:7b:86:85:c9:60:92:7e:2a:9f:2f:f4:9a:3b:74:
ca:bc:3d:6b:4b:50:73:a9:ed:5e:a1:64:8b:ff:78:
fc:be:a3:ab:af:41:31:52:1a:b2:98:c6:57:21:42:
d3:a8:25:4e:1a:04:ea:8a:1a:25:a2:d6:02:1e:f0:
5b:a1:e3:30:97:d9:54:30:d5:b3:9f:d8:34:bf:f8:
47:38:d2:8f:89:c0:53:c0:c9:fa:ce:e9:0f:ff:9f:
24:9f:7b:50:59:0a:a3:8e:d9:0c:4c:8b:1e:ab:d9:
d8:d8:c8:11:c3:7e:d7:a6:99:99:70:39:23:25:83:
3f:80:b9:5f:18:54:12:36:73:d8:8c:b9:74:91:2f:
05:27:63:79:a7:2d:c6:dd:d0:77:99:a5:d6:e2:96:
9b:7d:86:ea:1e:50:75:da:b1:52:8e:f6:68:4c:ca:
c0:ef:6c:5a:a5:33:ee:4e:61:c0:7d:f3:4e:2a:98:
07:a9:3c:20:ad:f9:13:95:51:71:6b:d8:fd:fa:20:
35:ae:60:be:65:4c:77:78:1e:38:ff:f9:ba:4a:40:
42:c4:41:84:ce:46:4c:1d:4d:1a:95:ab:38:45:07:
d2:74:64:d1:a0:31:9f:79:5d:f4:87:db:cf:4a:e5:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B9:3E:52:16:E5:FE:60:01:2D:BC:0B:C0:82:21:F9:6C:93:7D:8C
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:ee:45:03:d5:b7:2b:38:8f:4a:91:8a:f0:5a:d6:e1:e1:
b1:96:23:68:e4:89:61:f1:ba:38:9e:01:fc:a3:0a:fd:56:df:
9d:15:d4:31:1a:a5:1a:14:30:c2:fc:f1:75:11:4d:eb:f7:87:
74:a1:79:82:8c:03:61:a7:75:de:3d:ff:65:7f:cb:fc:51:61:
d1:a2:3c:35:63:41:a9:a6:d2:63:29:9d:17:c6:ea:d9:c8:87:
54:b6:c3:99:fd:e7:07:62:1d:35:ce:48:b7:85:18:5c:71:a1:
3f:cf:bd:01:70:88:a8:5a:74:b8:06:61:cc:d5:0f:ff:1f:1f:
98:6e:9a:34:87:f0:1a:ed:d7:84:80:a8:65:1a:e2:03:30:6b:
f1:cb:9f:51:22:e3:ee:af:7b:89:64:e6:c6:6b:f8:27:89:2b:
38:72:b5:c7:66:d7:e0:4a:a5:30:1d:a0:91:71:de:97:da:69:
ee:cc:c8:1c:90:f8:4e:9f:c9:79:8d:f6:27:c7:bd:c3:cc:ac:
77:44:a2:df:82:77:0e:03:f0:3f:18:78:9c:15:20:ff:f1:3f:
1a:1a:d5:37:4c:dc:1b:13:22:77:a4:bf:aa:49:06:27:ea:7d:
6d:14:dd:f9:69:27:fa:bc:a9:e9:db:a7:df:59:66:dd:e0:13:
b8:1c:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:55 2025 by rpki-client