Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: DTTaOQAxsQetSt4iACGDFexE/H1GQ9WagjKBHSZednE=
Subject key identifier: BF:3D:FD:6E:3F:F1:2C:19:2F:98:E0:D7:1C:9B:BE:F4:7A:4A:A9:24
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 0194BD17B264C072FFF446509CE739EE588F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: xDr5rQcBjBj+PjxQeV9Jgfip47QgSGOh/1HQu2lcuWQ=)
2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:64:c0:72:ff:f4:46:50:9c:e7:39:ee:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=bf3dfd6e3ff12c192f98e0d71c9bbef47a4aa924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:08:e4:33:85:ed:09:23:46:7e:70:d5:84:
19:8b:85:ed:2c:50:c6:c1:b9:c9:36:88:be:38:75:
a1:b8:3b:a3:a4:9e:f2:03:b0:0f:28:bb:27:c8:ca:
6b:11:bf:73:4e:bf:22:8b:01:dd:bc:cb:8d:9a:9f:
9b:05:91:7b:e0:75:fe:0d:dd:3e:c5:ad:78:ef:0c:
69:42:a3:a7:4b:d0:dd:2b:8b:5d:94:06:33:30:aa:
6a:c9:e7:a6:82:87:84:1a:e4:5b:7a:b8:8c:93:34:
ef:c0:3b:e8:97:24:c9:81:ab:2f:7a:a5:c2:22:2a:
be:26:6e:c7:ad:dc:5c:c7:10:cf:92:d5:e8:10:d7:
a3:b7:73:1b:57:ff:77:6e:70:5c:2e:b1:9b:32:34:
45:c6:76:a9:ba:b9:72:da:93:af:3b:3a:0c:6e:28:
5d:1c:6e:f4:9c:43:9b:54:08:2e:c8:ee:77:83:83:
65:de:f7:f9:96:16:de:0e:20:7c:8e:55:94:58:45:
0d:d9:ef:ce:91:f1:be:7f:d7:b1:39:65:24:a3:9c:
60:9f:e1:fc:d4:40:6b:23:e8:28:8c:c8:99:12:4f:
d6:7f:30:11:59:04:00:0b:88:65:0b:cd:a7:42:b3:
e2:9f:85:d1:b5:a7:81:e4:af:42:92:c4:00:3a:1a:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:FD:6E:3F:F1:2C:19:2F:98:E0:D7:1C:9B:BE:F4:7A:4A:A9:24
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:54:9d:cf:13:a6:cd:9b:87:07:65:6c:a7:ba:cd:fa:48:e9:
92:7d:1d:d9:62:01:7c:a3:8d:c4:dc:45:82:95:37:06:81:4d:
21:17:47:10:0e:48:e7:d4:1f:1a:34:8b:04:f5:48:fd:dd:cb:
63:96:b5:a7:92:08:41:1f:a9:4d:36:e7:72:c3:33:92:30:1e:
8a:53:b3:3b:d2:06:38:6b:32:bb:fb:74:3c:27:8c:fc:5b:06:
7f:25:a5:d4:91:ce:06:3a:4e:fa:e6:a6:9c:46:5a:52:91:4a:
6c:29:b7:93:77:3a:37:ea:04:d5:2a:65:bf:bb:dc:ef:a0:3e:
2c:3e:7f:18:72:ad:dc:82:f6:3f:0c:99:f1:5f:04:2d:e0:57:
63:70:f3:bf:00:0d:79:74:22:7e:50:da:8d:76:85:57:53:b8:
56:a1:16:33:00:05:66:36:ad:81:0f:34:e1:3d:36:ad:15:f2:
f5:a5:c3:61:ef:fb:31:0d:84:d7:82:76:5f:9e:79:78:6e:76:
c8:6a:f1:97:44:2f:e6:12:ff:77:b8:07:b7:27:60:5d:b3:1a:
01:5b:46:ca:51:04:c3:20:68:54:d8:70:62:67:e0:b1:f7:38:
83:19:9c:fb:c4:a9:cf:7e:0e:a7:ef:bd:ce:65:a8:43:08:ee:
1b:97:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:09 2025 by rpki-client