Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File: upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier: Y7ucqwBQvZPV960aAJJeC3HyTxT7vib9hUaon9MQzQ0=
Subject key identifier: 43:2F:C1:E0:F0:3C:E7:C4:CC:C9:05:94:B0:CD:97:BA:60:CC:18:17
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 0194BD852B11EDFBC8AD36892AF05D1D3D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number: 07B1
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: iB0nh2pqz5-ySXR-fF2YCAS68X8.roa (hash: Y94jSzgT6noKQkiYTVT17vXi3fN7I6D0Bkm1xKFYYKk=)
2: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: RbcXiKxq0SoErgmVALQG6Hb91UTo6auBi/9pX+KD3m0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2b:11:ed:fb:c8:ad:36:89:2a:f0:5d:1d:3d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=432fc1e0f03ce7c4ccc90594b0cd97ba60cc1817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:78:b8:92:2a:9e:4c:ba:75:85:42:b9:2a:
94:de:6d:59:d3:6b:1d:2f:71:a4:29:68:3d:04:44:
dc:d7:67:19:c4:67:a7:5a:60:3e:fa:65:3e:62:3b:
81:65:60:b2:ef:08:00:a3:b1:cb:4f:9e:4d:98:a1:
e1:cc:1a:ea:54:00:a6:ed:58:dd:86:65:17:d5:b8:
e4:a7:4b:1a:5e:2b:7d:ee:f6:28:cf:c9:1f:0a:bc:
59:73:51:13:5b:25:19:ba:2a:71:18:79:93:fa:9b:
90:79:15:05:ed:63:6e:33:75:61:69:50:65:b4:d7:
c9:aa:dd:6f:ab:a0:85:b2:6c:40:15:46:55:7d:47:
4a:28:3f:66:46:4b:a3:55:d7:16:d0:14:f2:5a:d7:
d1:f8:69:72:e2:5d:5e:ea:2e:06:d6:8a:88:85:f4:
c3:0e:97:52:84:6c:e3:e9:cd:23:ae:40:9f:2d:44:
f4:7e:8d:d5:b9:81:5e:77:81:dc:6a:1b:48:2d:2a:
37:9a:d9:24:b2:22:24:45:38:c1:ee:cd:08:a6:e0:
3f:99:15:30:7f:8b:56:6c:82:7e:6e:f2:bb:2f:7d:
60:76:f9:f0:dc:c0:50:76:98:3e:5d:f6:25:f0:67:
c7:85:2a:84:01:63:d3:50:64:82:85:50:b6:32:1d:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:C1:E0:F0:3C:E7:C4:CC:C9:05:94:B0:CD:97:BA:60:CC:18:17
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:d5:cf:e1:c8:58:58:d7:c3:08:18:a5:ef:0b:fa:90:46:c5:
5f:08:8b:b5:0d:dc:45:af:ab:e2:f2:ae:67:11:75:f9:26:ec:
c0:f3:5a:df:02:18:04:34:b5:60:80:6d:7f:54:78:3d:67:e2:
0e:43:43:53:57:fe:fb:dd:9e:24:6e:68:17:1b:c0:cf:20:64:
aa:55:63:52:64:a1:16:b7:92:f1:9d:19:e1:73:8b:cd:dd:33:
ce:0b:a7:8f:f7:d7:5b:e6:08:30:dc:d0:71:80:81:43:fb:7b:
17:05:a5:f0:2b:b9:b3:fa:e2:bc:3e:d7:21:98:83:0a:09:fb:
4f:73:13:f6:0f:0e:34:e8:7a:fd:ea:d7:e6:41:ca:5d:ad:ab:
19:43:f7:6f:5c:26:93:e1:3f:fe:81:b2:2f:5e:a1:c6:fd:85:
06:e3:7c:ee:ec:ad:33:6d:03:88:5e:68:c6:9c:96:7c:bb:d9:
c6:1b:27:ec:ad:bd:b9:c5:2d:6c:57:76:9d:e0:f3:22:1e:8f:
84:ef:4d:6c:24:92:34:21:e8:cb:47:5e:5d:b3:5a:87:c8:e7:
45:7c:16:cb:0b:19:44:b1:d8:f3:92:88:65:a1:c4:15:33:08:
88:04:af:79:aa:ff:3c:ea:2d:a8:41:7d:ce:32:84:46:4e:ea:
55:ed:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:17 2025 by rpki-client