Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: fBBvfOHW7LuMFWpcFpM6Y73oSOJrdcqa5kw89oxt8VQ=
Subject key identifier: 54:9F:2A:89:9F:1F:EF:14:75:58:CF:44:9F:7E:74:19:BC:A4:B9:C4
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 0194BC3C56136B0D349FCE243AB5F526B483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0A45
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: lX5lUBRMr0qRNeUQdaN4ltutYPA.roa (hash: BmUNSmbdUF6R1nm83/KFGUM2Dtk8AbO+iQW7VW/AX64=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: NDRVUMaRnfXoJ5RPHIDUe0F2IwPoUmd2pXn/vnPTAD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:13:6b:0d:34:9f:ce:24:3a:b5:f5:26:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=549f2a899f1fef147558cf449f7e7419bca4b9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:c7:bb:a2:a1:da:41:81:bc:10:3f:94:a1:
05:b8:b2:9d:d8:c5:25:95:50:e8:cb:f0:df:40:f5:
af:12:cf:9c:ec:6b:f7:85:00:f8:44:5b:2a:ee:bd:
63:76:e4:31:5b:2c:b8:2a:9c:7f:8d:fa:ea:b0:8a:
4d:9c:34:b1:04:22:53:ea:62:67:8a:5d:c1:08:33:
ff:12:44:94:ec:0e:bf:77:79:1d:d4:9c:63:42:95:
0f:a3:6e:12:08:75:93:77:f7:f6:f3:3d:ed:d9:62:
3c:70:d6:8e:e1:ba:20:90:52:88:e0:42:97:24:2c:
c6:a0:ad:98:2f:7c:8d:66:03:39:40:9e:37:10:fb:
8f:41:80:ee:5c:58:41:d9:54:26:13:e5:92:dc:5d:
c8:c4:1f:82:87:cc:5f:44:a5:92:08:4f:aa:15:8c:
57:06:58:94:fa:b1:b5:49:35:94:0b:c5:e5:ae:c4:
d7:88:d7:f4:5e:89:00:3c:b0:d4:2c:e5:5e:3e:2b:
ed:ff:9c:a7:22:5d:a6:e5:42:b8:66:e4:c3:06:2a:
52:4e:be:f1:db:24:d0:36:59:d1:82:28:bf:be:9c:
bf:8f:4c:1c:f2:0a:a0:1b:92:02:4c:12:18:9e:38:
c2:2e:a1:b7:b0:03:6e:20:0a:11:84:0e:3b:c5:0a:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9F:2A:89:9F:1F:EF:14:75:58:CF:44:9F:7E:74:19:BC:A4:B9:C4
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:13:cc:be:9d:47:c7:82:65:78:38:b3:80:de:1d:e3:51:e0:
47:a6:3d:2b:3b:c9:39:26:82:2a:69:6e:71:56:27:0b:16:b0:
f2:80:9e:9e:3c:ee:22:31:e5:80:c3:f1:c4:e0:df:01:ca:57:
89:8d:4f:6b:32:fa:45:25:da:a6:4d:fe:15:34:86:20:0c:76:
0b:10:28:1d:80:c0:52:0a:55:75:17:9f:97:8e:80:14:9b:89:
bb:ba:87:19:6c:2a:8c:b7:6b:3f:c3:05:8c:d9:d2:f9:43:b8:
d5:a3:b2:14:8b:7b:e9:cf:b3:e8:b2:c3:03:1f:f2:95:32:a5:
00:b2:0f:21:f1:e9:46:be:7b:6c:f5:f4:a3:96:62:6b:67:2a:
0b:ac:a0:86:23:75:d3:75:c1:0e:4b:c9:10:38:43:71:99:13:
68:e4:06:ee:e6:d7:c7:de:dc:b1:98:cf:5d:fb:9f:7c:db:9e:
0c:ba:f7:76:e5:66:20:11:91:c1:d8:a9:22:17:7c:73:37:6f:
81:90:65:df:97:f7:52:46:fc:5f:dd:3e:80:b5:74:cc:1e:6c:
92:e9:6b:18:0d:f2:e1:2b:dc:79:f0:eb:f8:a2:0c:8c:d6:d7:
b7:e2:52:06:6e:16:77:b2:22:d5:a9:5b:bf:27:27:e5:8a:c4:
c4:72:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:26 2025 by rpki-client