Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier: XVpdQwSS+cUaI8aV0k5A6aZb3Im1QzKCrV8qT0L54po=
Subject key identifier: 35:42:7E:81:A3:3B:45:E2:4B:93:7C:4C:A6:CA:17:73:EA:81:E8:30
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial: 0194BCE0A978792BCAC3F2CC807BBCFF91A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number: 10DB
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: Sv5Lq4Hnnh8zoKj8j0qRfNHH3rz27Yu2UfwdHxIwo68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a9:78:79:2b:ca:c3:f2:cc:80:7b:bc:ff:91:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=35427e81a33b45e24b937c4ca6ca1773ea81e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:3f:4a:2d:46:3d:6f:9d:50:63:2f:cd:3d:
be:ef:3f:2e:b5:9b:01:76:58:4a:b3:ec:7f:44:9d:
5e:2a:3d:ce:c8:3c:7e:57:8c:5d:ea:e4:d1:1e:13:
3d:63:54:f2:08:fa:20:75:9a:c9:23:7a:f2:59:81:
2d:1c:71:df:4b:eb:e6:00:73:42:af:c3:fb:82:f4:
2d:fb:92:73:fa:b4:78:6a:47:81:41:1e:85:a1:b3:
bf:66:c9:b5:4e:97:e8:fc:01:10:c4:eb:d7:87:a8:
3c:83:d2:6f:9b:33:64:61:3e:1b:56:1d:4d:fe:94:
f2:c4:a9:71:59:91:2b:79:df:de:9d:c1:fd:d3:03:
aa:bf:75:16:18:14:79:49:10:8c:c7:ec:72:60:d1:
1f:5c:3a:56:6c:2f:44:4e:13:f4:13:c8:d1:21:45:
78:51:f0:0f:70:24:5e:e8:4c:ef:8f:b2:83:0b:d2:
91:e8:4f:27:06:a3:da:fa:8d:f6:80:6b:da:c4:2c:
77:4d:47:f3:87:a4:ec:4d:ba:57:1f:ba:c1:b8:5f:
fc:d2:98:cb:b4:a1:93:1d:5a:d8:8d:69:b7:c9:df:
db:95:7b:5e:39:26:86:3f:01:92:9b:3f:97:31:42:
a4:4a:f8:1a:70:d9:0a:b1:48:9c:6e:d3:c9:98:5e:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:42:7E:81:A3:3B:45:E2:4B:93:7C:4C:A6:CA:17:73:EA:81:E8:30
X509v3 Authority Key Identifier:
keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cd:97:c1:ae:50:b6:fa:8d:78:e3:04:99:75:8b:3b:de:e7:
6c:f0:75:c1:a1:bf:1b:89:b7:75:d9:0b:5f:a6:a2:e0:59:5d:
f2:63:05:23:4f:71:d9:0c:8e:4b:32:31:a8:6d:af:dd:c6:a2:
f3:0f:03:d6:37:80:d8:29:d5:64:70:72:0c:93:c2:ae:ff:fa:
88:df:7e:67:29:82:f4:ef:73:24:b1:13:7f:15:12:63:4f:44:
ee:2e:ac:e3:01:5f:76:06:37:c9:7b:ff:e5:d4:21:44:68:f4:
9a:79:91:3f:d8:a7:eb:4a:21:ba:28:34:2d:e7:94:a7:c8:ac:
3d:88:b6:a1:a2:73:c2:15:87:21:c7:a7:f7:13:77:e2:b2:70:
51:9d:8d:87:be:09:07:3e:99:9c:f9:a8:50:6d:8a:8e:1e:c3:
e4:9c:08:fd:e9:8a:b0:eb:cb:a0:ba:4b:6f:13:80:8b:5a:8a:
bd:5d:7b:84:a0:94:67:33:a9:03:48:29:05:87:c2:4b:87:5e:
5b:ef:6c:47:e3:d0:64:94:1d:a2:b7:b1:04:4c:b4:9a:cc:b4:
1f:e3:a9:b0:a2:83:10:92:a3:d8:a4:45:90:da:02:b2:7b:89:
72:54:15:30:88:2c:64:b0:92:dc:da:12:3c:b4:8a:c2:a3:11:
23:37:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:40:46 2025 by rpki-client