Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: hlNASDLsbUS2V7zZiLOjaKCaU8mBCzUee+2O6Pf3A5A=
Subject key identifier: 47:3D:82:AA:00:AA:7B:28:49:12:07:0C:18:D7:5B:A5:0F:38:D0:55
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 0194BC04CFF266184F88B9A2944556373D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0D2E
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: /kP+lqxky6xvhGvOg4FEVLf3idHFsE3jWlnvuy5K/Lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:f2:66:18:4f:88:b9:a2:94:45:56:37:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=473d82aa00aa7b284912070c18d75ba50f38d055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:18:a2:4e:79:75:52:20:a2:81:12:31:6f:
77:ce:36:04:ae:18:04:72:a3:5d:a4:4e:67:5b:60:
a3:5b:80:f1:be:93:3b:e6:5e:33:95:14:05:62:13:
50:97:71:2f:5b:8d:4d:8d:ec:56:2b:87:20:6b:e9:
84:18:d3:e2:be:aa:3f:5b:07:0e:22:b2:5f:9d:eb:
54:c9:f2:1b:d8:ba:ea:b2:1d:27:71:72:4a:67:71:
33:fc:18:cc:a3:d6:ee:93:d0:61:46:07:75:ab:9a:
cd:51:f3:19:a2:26:2e:19:d2:29:70:0c:a0:04:30:
69:18:7c:2e:25:be:e4:2b:7b:e7:c3:d2:21:97:37:
e8:46:ce:ac:c3:2e:15:c7:86:8a:eb:1c:dd:cd:f4:
47:4b:6f:19:f3:38:26:3d:da:2e:79:5f:bc:cb:31:
0a:c0:42:cc:f1:4e:f7:52:86:2b:cd:c9:82:23:30:
f9:ca:74:cd:77:a4:e4:95:1e:1a:9c:f8:52:9f:f6:
a9:b7:e3:68:6b:4a:4c:9d:3e:f6:19:ee:0b:64:3e:
a9:0c:2e:a9:75:3d:3e:3e:50:12:a8:72:14:68:eb:
55:0a:84:1f:09:fb:27:65:f0:4b:c8:11:f4:bf:02:
0d:f2:0b:ae:f8:7a:76:eb:8a:4d:06:21:16:36:08:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:82:AA:00:AA:7B:28:49:12:07:0C:18:D7:5B:A5:0F:38:D0:55
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e2:00:ca:dd:85:51:0a:b9:c2:8e:c5:21:35:79:4b:7b:89:
85:47:f9:f5:f0:00:55:d8:e2:a0:21:0a:9b:30:1c:55:ea:da:
b4:56:fb:4d:cb:af:e5:0a:79:87:06:cc:12:44:48:53:7e:eb:
a5:81:32:2b:89:6f:ef:fb:99:c6:99:c6:03:01:72:11:b6:59:
c9:fd:6b:e0:21:15:3e:ac:49:af:f6:c1:61:0e:74:93:21:98:
bf:2c:92:de:21:d8:2e:5a:47:b0:8e:1e:d9:74:4e:98:2a:89:
a4:be:c2:4f:3c:d5:50:1f:73:4b:74:1b:9f:17:30:6d:1b:b5:
c2:26:73:44:9a:3f:d4:be:5f:a9:99:b0:03:ac:4f:79:87:0e:
0f:22:7e:89:37:22:38:d9:c3:a8:9f:4a:79:7d:ff:f3:de:e9:
70:a7:bb:1d:b9:1c:b8:c1:b2:57:e0:b5:32:5d:33:08:a8:55:
73:a2:cb:4c:7b:de:ae:d4:14:ec:0f:2b:07:d5:1c:79:6e:76:
4d:4a:94:e2:fb:4a:b5:9e:4b:09:73:29:e2:29:79:bd:3b:12:
27:29:99:58:d2:8e:0d:27:e2:8c:1e:5a:6b:9f:90:9a:33:c4:
15:fd:ff:9f:b4:ee:da:b2:79:4b:ae:68:41:eb:1c:d5:75:f6:
31:71:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:23 2025 by rpki-client