Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier: UvZS4UWMxfTqaHvUAWzyFk1WAhKb6fBxV6A2+2u0Aco=
Subject key identifier: A0:43:6F:36:7A:89:05:B1:D8:DF:4B:8E:A8:B7:F9:27:A7:07:F3:4B
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial: 0194BD8560ABC4709C0B8B949275038398E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number: 118C
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: MggUNL8VW9yE4LnaTyr5YJxrDwU.roa (hash: GpA5vo0L4EKCpZl/rQZR5bRixQFok1LnqW2Xg8KUiaQ=)
2: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: rjY8LCtClIMCR7i7pN4GTWqqDJciZ6x2VJAFwReTweE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:60:ab:c4:70:9c:0b:8b:94:92:75:03:83:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=a0436f367a8905b1d8df4b8ea8b7f927a707f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:ee:9d:43:2b:fe:e4:5f:11:48:bf:aa:78:
29:4f:be:79:18:4e:06:94:92:68:4b:b7:5d:45:ad:
97:0b:1f:98:9d:b9:d1:ba:38:39:6f:ce:95:71:d3:
63:2f:4f:90:44:5e:4f:2a:37:00:1b:ba:ca:34:f4:
e7:e2:26:aa:c4:35:84:5c:41:29:91:98:05:95:6d:
fb:60:79:4d:33:90:d1:f9:f4:bc:71:58:0a:57:04:
a7:07:df:9b:1e:89:32:55:02:7c:95:29:ad:bb:34:
e4:86:ce:6d:18:f9:f9:d1:ce:3f:6f:63:cf:e9:8d:
7e:86:04:42:a7:03:ec:c6:0c:b7:f6:79:3d:90:c8:
ee:4a:27:f2:eb:d1:9f:e9:3e:21:0d:18:74:d2:43:
ae:88:bb:49:cf:7b:aa:c4:cf:94:5f:a1:b2:18:87:
e8:fb:ae:e5:75:af:08:be:b7:ea:da:9c:41:89:f0:
48:34:ba:21:30:49:83:7c:7c:04:8f:83:64:fc:87:
97:14:12:a3:a3:74:d8:4b:19:23:5a:39:f0:ed:27:
a1:dd:89:6c:ea:57:f3:25:60:a9:1f:1f:fc:fd:83:
96:2f:4a:2a:58:20:60:a3:be:55:84:c4:0e:f1:6e:
63:7f:1b:66:d9:52:55:ec:2b:16:d2:f0:d7:e6:24:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:43:6F:36:7A:89:05:B1:D8:DF:4B:8E:A8:B7:F9:27:A7:07:F3:4B
X509v3 Authority Key Identifier:
keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3a:e3:57:65:42:ff:9d:73:09:9c:90:78:1a:51:c8:f7:f1:
68:c2:3e:91:03:87:90:44:95:e9:4a:83:61:f0:9b:b6:d0:1c:
3e:4d:b2:97:29:99:af:98:86:f6:74:ce:1e:4d:52:45:32:b6:
33:38:f9:e0:eb:ad:5b:d4:55:e7:4c:9c:f6:d9:b2:12:c7:05:
f3:cc:48:1d:97:04:aa:10:3c:67:da:5e:9c:9f:9a:73:2e:29:
47:bd:b4:59:d7:90:ca:a5:ea:8b:2d:92:50:c9:a1:55:fb:05:
10:f4:a0:9d:cf:9f:24:ff:23:87:21:60:52:23:4e:1e:2a:07:
ac:00:9d:a4:f3:c2:ba:22:3d:cb:11:12:cf:98:8c:a8:4f:4a:
b4:98:33:08:2f:0b:c2:d1:0c:89:ca:5d:85:c6:be:bb:99:5c:
59:a7:f9:40:4d:1d:7e:66:37:00:7a:3a:fe:db:10:ab:72:b5:
c4:65:ad:b8:5e:f2:c0:9f:06:e5:94:fb:d3:98:e0:95:c7:3d:
71:31:91:85:bc:a5:8f:e2:92:c4:31:c0:20:46:d6:a3:f7:d0:
b2:5d:ba:cd:1a:9b:d2:53:98:7b:25:e3:6c:84:31:20:8c:c3:
7f:86:ce:88:02:21:4f:53:88:9d:29:6f:31:46:e6:f4:32:3d:
03:e6:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:16 2025 by rpki-client