Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: 4VcByDAG9slccFCEKTALglZI3vpVpciFSjFSnfsb/Fo=
Subject key identifier: 1E:65:60:12:E4:54:8B:19:C5:E7:C5:5C:07:56:6F:21:B4:76:CE:78
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 0194BD17EC7EA36ECA3F7252DE06B8A124DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: 6hyn6env+c9Eo6z0PhXo7R2aURIIXbjuxNMcHH8+Vic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ec:7e:a3:6e:ca:3f:72:52:de:06:b8:a1:24:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=1e656012e4548b19c5e7c55c07566f21b476ce78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:16:6b:83:a3:6e:2b:79:71:32:2f:be:d8:
50:1d:c1:8c:13:c4:87:ef:9e:4b:1f:b3:d8:92:48:
ef:6b:c6:e9:9c:66:ae:0f:fd:44:04:1e:32:15:ec:
03:70:49:0e:27:97:65:ce:ff:20:c8:21:b6:14:7a:
36:cc:b5:1a:8f:d5:5a:ee:ab:6e:47:19:39:7b:c0:
0f:1c:46:77:3c:06:cf:91:a1:3f:12:cc:77:df:32:
8e:e9:d8:c6:8c:7f:4a:54:bf:20:de:99:56:79:ae:
73:8a:b2:3d:e7:5d:de:2e:e3:6b:57:04:24:de:c9:
56:aa:88:1e:48:17:1b:e5:1e:f7:03:1f:04:5d:9b:
03:59:6f:00:c8:72:47:f1:62:94:b1:04:e0:be:1a:
90:f5:7e:b8:40:2c:b4:17:d7:a3:28:09:f9:5b:3b:
e4:4f:f2:9d:0c:43:40:13:98:26:e5:61:6e:3c:e9:
44:a3:31:f6:6c:d7:9a:b3:be:cc:44:ca:81:05:e1:
d1:a8:50:55:64:06:eb:27:0d:83:9c:03:24:d4:ba:
39:96:fb:13:19:7a:9e:bc:42:c0:9b:25:8d:ce:d0:
24:af:6a:13:8b:9e:d4:fd:a7:4e:8e:9f:a7:1e:ef:
b9:7e:d8:67:95:f5:54:f1:10:c8:77:29:1b:76:0e:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:60:12:E4:54:8B:19:C5:E7:C5:5C:07:56:6F:21:B4:76:CE:78
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fb:9d:2c:03:53:e2:e9:0c:3c:b0:a4:ef:3d:77:b8:7d:d5:
26:ed:e9:c5:76:e6:28:ec:cb:08:f4:58:7d:52:eb:d9:0f:a8:
32:cc:68:dd:1f:04:82:d5:ba:23:a4:4f:79:57:15:e5:f6:da:
7b:03:35:c6:f2:11:82:e6:6e:c5:eb:82:e4:18:8e:56:a9:b8:
d8:87:28:18:ba:50:99:13:d4:ad:04:b5:78:75:2e:e2:a5:ee:
b0:6c:84:84:df:6c:4f:f0:a9:ad:ee:58:6a:50:69:1e:1c:06:
db:03:10:1d:e3:ed:f0:da:c5:ef:c7:8e:19:d1:74:34:bc:a1:
7a:86:59:47:19:20:36:7a:eb:b7:d5:5e:4c:a3:1c:cb:dd:67:
3d:32:a8:d3:17:f6:c4:f5:ea:6e:02:77:61:19:e2:ee:8d:10:
3b:cf:53:59:58:56:9e:e0:8a:b5:b4:4e:b3:22:94:9d:8d:45:
fd:6f:3c:c3:5b:cb:e0:b6:d1:38:3e:f5:34:5e:c6:00:0b:37:
16:37:2f:8d:d3:c8:75:e1:8f:d2:97:12:72:c0:88:f4:3a:7f:
a1:14:8b:19:bd:9a:fd:7b:62:20:dd:f3:6a:53:2c:bb:db:c6:
fd:4b:be:83:76:61:79:fe:2d:34:16:61:c0:a6:c2:c1:38:b9:
9d:94:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:12 2025 by rpki-client