Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: +BE0H59IJz6fJosbT5t3fehNVudp1hkmjLl/EKI3H5s=
Subject key identifier: EC:E8:CB:F7:1D:7A:72:27:2A:6C:31:DA:DC:FB:E0:D8:29:45:23:D5
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 0194BBCECF0DAD7B025D40519D8816ADAC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0D55
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: 2zEinWoOkoxLTQvCIyzOrtAiqP/CMAgfNkTj/l7rlKA=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cf:0d:ad:7b:02:5d:40:51:9d:88:16:ad:ac:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=ece8cbf71d7a72272a6c31dadcfbe0d8294523d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:72:24:95:00:0c:eb:b2:99:70:d8:36:de:
a7:de:e4:20:48:dc:b2:80:75:63:2f:d2:60:6e:50:
ae:e1:e1:1e:56:4e:8f:33:2b:97:de:52:cc:57:e6:
f9:da:e1:1b:ec:c2:5e:1c:22:60:64:06:0a:1b:79:
f0:8c:d6:21:38:b6:bd:d7:43:17:4f:64:9d:a0:b5:
61:52:b5:39:b6:4f:1e:e9:1b:99:d1:a7:01:9a:3e:
62:91:01:94:7c:26:c8:6c:d4:55:9f:a0:7f:05:76:
10:76:07:00:55:03:e9:c9:9f:33:d9:03:f2:c0:8d:
60:e2:ef:26:ed:46:3e:0e:4a:68:1c:7f:4f:fa:d5:
45:07:e1:3f:fa:ed:a7:49:b7:ef:cf:d2:56:ab:07:
59:e9:a5:c3:81:aa:46:56:e8:36:16:98:27:85:33:
6c:7e:12:a3:15:4b:d7:c8:a5:b9:a5:7e:38:2b:92:
5c:15:23:65:1a:3a:6c:24:c7:90:5e:b8:5d:7f:d9:
7d:67:8e:57:7f:9b:45:ff:73:dc:33:fa:31:82:4c:
b3:39:3a:5e:dc:d7:53:5b:27:50:21:6a:e6:d3:0e:
6c:f9:72:98:a2:8c:a5:96:e1:13:d4:61:88:15:ab:
c6:bb:41:be:05:5c:91:23:01:c1:eb:ab:09:3c:39:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:CB:F7:1D:7A:72:27:2A:6C:31:DA:DC:FB:E0:D8:29:45:23:D5
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7f:8a:95:5a:5a:65:30:f2:43:0c:f3:de:d7:c9:f4:d0:5a:
45:3c:0e:7c:01:7b:ae:85:b5:f2:bb:4c:e5:96:eb:10:16:13:
b7:6e:85:20:2c:6c:ce:65:99:a5:19:1e:b8:5e:a8:20:d4:d6:
ae:fd:b3:ad:24:1e:c3:a3:87:ef:7e:fe:43:00:6c:00:7c:66:
02:f3:2c:3a:ea:52:78:9d:15:57:28:6f:98:60:5f:b8:77:9b:
36:e6:b6:46:66:59:3b:a0:5d:98:2b:e8:39:06:5e:21:c6:3b:
c8:65:e9:e4:46:23:26:d6:30:fc:19:24:32:66:a7:51:6b:85:
1e:2a:f1:6c:82:13:22:eb:1d:cd:ea:10:10:a5:b3:5c:4e:41:
df:6e:6d:aa:70:5f:7c:0e:c7:19:02:74:d8:b9:65:4e:0a:93:
18:1d:45:15:9b:93:c1:02:42:c2:f9:6a:21:63:49:e2:34:70:
a1:cf:d1:0c:66:bf:d5:0e:d5:85:f2:0f:fd:23:99:cd:c9:35:
b1:1a:7a:f3:f0:14:02:3c:8a:57:a8:7b:31:a8:47:98:05:b0:
3b:1e:e5:85:06:9d:e5:af:64:36:b2:d1:0a:64:32:1e:af:0a:
c6:81:8a:33:bd:8c:93:db:29:87:fe:71:b2:d5:4a:4e:b3:b4:
ce:c7:4c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:49 2025 by rpki-client