Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: QuXJdOSXOzlyyrRxwBMcaHNPxuvUnRuh/O9Po1v/Vtw=
Subject key identifier: 32:4F:73:72:3C:18:E6:66:2E:33:DE:2D:E7:91:88:B3:BE:55:F7:DC
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 0194BC3BC5A0C48227CB884C3D0CB089C1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: lGyvUh/Ncupga1dtbOAwnVARrh3kQKEYRbxVCX1q3zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:a0:c4:82:27:cb:88:4c:3d:0c:b0:89:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=324f73723c18e6662e33de2de79188b3be55f7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:8e:67:2f:3b:a4:81:d8:8f:0f:98:47:0c:
89:40:26:99:bc:23:08:c6:d5:9c:09:15:ca:ca:ed:
50:a2:42:31:7e:4f:2e:ca:54:78:84:5f:1c:1c:75:
3d:1f:ea:50:d9:42:66:fe:33:9f:84:88:d6:10:16:
77:fc:45:98:52:4f:74:74:76:fc:83:18:86:f9:f7:
0f:cb:4b:2f:3a:5f:51:8e:2a:f3:fc:76:bf:a0:6a:
b0:2f:4d:02:ce:1e:d0:7c:a2:d8:a2:d4:5e:df:6f:
b3:5e:0d:12:c2:a3:c1:85:83:fc:d6:90:ce:dc:66:
c2:10:3e:77:09:98:9e:d3:37:72:25:64:d7:b6:c1:
b9:ec:6b:9c:78:cc:fc:88:53:2a:28:dd:0e:a9:3a:
80:f3:df:f6:84:91:92:9f:cc:19:c7:4b:2f:c2:d4:
e5:a9:06:6e:cf:99:68:e6:89:64:da:27:18:d6:bb:
22:0a:a9:bd:67:04:a1:98:72:ba:56:e8:30:57:2a:
18:7a:e3:84:a2:d2:f1:f7:9f:99:47:08:e3:50:52:
78:c1:58:9d:8a:31:66:c7:3f:5b:ca:5b:05:51:87:
21:14:57:1f:cf:1f:0c:df:d9:22:ff:46:88:a7:91:
d6:c4:85:34:01:3a:d8:1c:45:05:d6:8b:ca:d7:8f:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:73:72:3C:18:E6:66:2E:33:DE:2D:E7:91:88:B3:BE:55:F7:DC
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:6b:13:fe:27:83:0b:85:fb:eb:f9:49:02:81:10:4b:3e:
c3:0e:58:a3:b0:76:26:aa:89:27:04:47:0e:ae:f2:40:53:a5:
90:8b:08:9e:d3:5a:04:86:3c:9b:f9:a5:6f:41:1b:2c:79:36:
08:21:2f:74:10:60:16:07:83:d0:eb:32:98:70:59:2b:92:a6:
b0:09:c2:83:3f:71:bb:53:1d:27:6b:72:8f:1e:23:f0:53:a2:
b2:fb:02:bd:e0:dd:4c:44:c0:81:63:83:b2:ab:23:0c:de:6a:
ba:36:07:d7:a9:66:d8:e8:41:72:d0:4c:e3:5b:3e:b8:d2:04:
a2:27:12:70:95:7b:50:50:0f:f9:bf:aa:60:ad:46:dd:39:0c:
6e:48:97:d7:53:b9:8b:b9:d2:06:73:dd:05:61:cf:b4:43:0b:
54:68:de:e2:bd:b8:4c:af:de:4e:0f:80:92:0f:6c:ea:15:43:
0b:a7:51:14:12:2d:b3:6e:03:ce:8b:b8:4e:c3:39:f6:c4:16:
39:de:ca:34:13:b9:06:36:25:bb:95:b0:fb:40:05:66:17:d3:
e2:1b:34:a8:2a:16:d6:79:1d:18:63:58:84:e1:41:c0:a9:3e:
09:63:4d:22:41:ac:f6:a4:ee:83:ba:14:aa:7f:c5:36:f9:1e:
78:dc:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:27 2025 by rpki-client