Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: yUNYHKlOm9bsWOL4B7kXXRjruf6A4MZli7a5P6tX7ig=
Subject key identifier: 23:AA:5F:54:75:B7:82:EC:FE:E6:DD:2A:64:6B:A5:A1:3F:81:A6:6E
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 0194BC3BEB3A6DA824BAC61839E73FF67EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: MOy3y_lcyrr-_uZmr0leY3-7Nxk.roa (hash: YOHkYivCptCzJR0V0Ab30X03x2LQcY2S2U8MBsC/It0=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: akwNPO4PyNI9cmSl6mf0/E+pLv17caivJJyOP74cWMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:eb:3a:6d:a8:24:ba:c6:18:39:e7:3f:f6:7e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=23aa5f5475b782ecfee6dd2a646ba5a13f81a66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:65:3b:eb:b9:cf:11:b4:99:1c:65:de:54:
bb:8f:d7:18:c8:d2:0a:bc:23:17:e6:f8:79:1c:bc:
f3:71:65:a7:ef:f3:53:3e:21:d9:e6:79:80:d4:55:
54:2f:0c:e6:41:2d:ac:c0:b4:60:8a:b6:d4:77:c3:
f4:84:ae:f0:7e:ca:69:d3:14:71:55:d7:59:e9:1d:
cf:e6:68:43:ca:97:cb:85:39:3e:a0:06:b4:b7:bf:
97:4d:95:eb:64:3b:86:8f:13:19:67:9d:ab:9f:ca:
47:de:0c:c6:20:04:8e:cf:0a:68:70:34:72:92:6c:
db:7a:2b:08:83:26:7f:d3:4f:a4:48:7a:57:c7:3d:
bb:76:75:8a:3e:ca:0f:33:9e:c0:fd:0d:6b:56:2d:
c0:ed:06:5d:04:76:ea:c7:45:25:91:ef:64:d8:c4:
f2:4a:b1:06:35:48:46:e4:a9:eb:6c:43:8f:6a:3d:
7b:fb:b8:18:56:a0:97:d2:f5:42:7e:6c:de:18:cf:
d8:52:a8:b3:6b:f5:c1:ca:80:b5:87:37:f8:f3:6f:
ae:3a:87:30:25:02:7f:45:7f:d5:8f:af:3e:3b:c6:
b8:e9:9e:de:c1:db:25:26:52:cc:22:b9:99:4f:82:
c4:d3:7e:63:2a:81:45:5d:aa:1a:1d:11:98:09:eb:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:5F:54:75:B7:82:EC:FE:E6:DD:2A:64:6B:A5:A1:3F:81:A6:6E
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f3:25:05:38:13:f0:4b:c8:29:4f:21:62:62:0d:4f:ad:ae:
83:77:b5:c6:f2:53:3b:37:2c:55:47:ec:b7:0f:cc:30:1d:2a:
89:12:cd:b7:85:cc:ae:e0:5f:2d:85:bb:05:9c:0a:43:d5:49:
63:0e:d5:c7:0f:b8:7c:33:23:56:cd:f3:22:db:23:44:3c:28:
2d:24:31:7f:75:fb:5c:62:85:66:00:b5:d7:3d:68:95:86:d4:
7c:91:a0:19:97:f1:c1:ea:cd:85:ed:1a:2c:9c:ec:a5:38:8c:
18:55:c4:c1:78:8d:42:4b:18:0b:03:e3:74:d0:56:fc:2f:01:
4b:2b:e0:a9:ce:3c:99:5d:34:e4:10:53:b4:16:f8:a2:c7:30:
da:60:c3:bb:b6:49:c3:35:e1:9f:0e:7c:f4:94:51:81:92:01:
ba:e4:61:cd:23:1e:d3:53:6a:61:f5:3c:7b:1e:5e:a7:4b:84:
06:b8:85:bf:e7:fe:f2:cf:4b:00:c1:02:98:e5:5f:7a:eb:e4:
e6:81:a5:1b:fe:d5:05:2d:b8:73:fc:b2:dd:37:d6:7d:93:b6:
ec:e0:93:e6:5f:a0:1e:2b:54:ec:49:fa:b2:4f:40:77:7b:c0:
ad:af:05:89:43:f5:d2:13:86:34:6e:ad:1c:a2:26:b0:07:65:
04:d4:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:52:30 2025 by rpki-client