Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: JLjGddInj+hc+ttzYXNHDrpo/oUOyfsoItPnwGlLqCM=
Subject key identifier: DC:9E:BF:D0:07:43:E8:5E:CF:45:E9:13:9E:82:3E:FC:30:6E:F0:1F
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 0194BBCE552F3513D6664D6C8EA6E184417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 04C1
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: T97PhxMy-s6iz7MiHiiatck56go.roa (hash: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: BBrEu3Q2WqFjUReJTOLOmFxynJFGcok58JTKpG9WVYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:2f:35:13:d6:66:4d:6c:8e:a6:e1:84:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=dc9ebfd00743e85ecf45e9139e823efc306ef01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:bb:41:0b:1f:67:f0:13:eb:68:b3:5b:3d:
72:2a:5d:57:02:40:a8:99:61:62:ee:a3:2f:91:83:
7b:92:28:8a:de:d9:90:e9:0a:f7:04:f5:91:93:05:
ce:b3:01:a6:c7:f3:ac:d8:2f:ee:4b:e2:ac:7f:a6:
73:b8:54:3a:83:70:78:53:d0:08:40:f5:79:eb:09:
7f:5d:a5:c7:c3:3f:4e:2a:49:bd:91:80:d1:28:2b:
5d:36:6b:62:7e:66:2b:bc:f3:c5:26:c4:3c:63:c4:
c6:fe:f8:21:1a:cc:c5:18:ae:64:6a:a6:4d:e1:48:
82:d0:39:5d:28:53:b6:60:6a:6e:a9:f8:ff:33:c2:
e9:67:71:86:e1:52:d8:68:69:47:33:3c:84:42:f2:
ee:2f:c0:b5:31:be:10:e7:79:7e:73:0f:a8:c9:f0:
62:58:32:9d:42:9a:97:d6:cc:6f:f8:d9:cf:26:bc:
82:e7:53:65:e3:76:e3:32:25:62:57:7d:40:3e:00:
7c:d4:1b:ae:7b:9b:2d:0f:47:37:a0:7c:3d:3a:f0:
e3:e1:71:7c:f7:2c:de:f9:10:0e:32:09:23:e8:6c:
42:27:70:09:de:b9:be:8d:74:6e:24:fe:ca:0e:ef:
13:60:ef:e2:b3:d6:1e:1f:39:63:07:a9:40:1a:30:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:BF:D0:07:43:E8:5E:CF:45:E9:13:9E:82:3E:FC:30:6E:F0:1F
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d1:38:ef:f9:03:d6:c0:41:6e:d4:92:72:5e:84:86:70:15:
77:5b:fd:e3:00:e9:eb:bd:f2:b2:8e:bf:78:e6:80:e1:e1:ef:
05:8d:14:77:79:58:f5:78:6c:c4:39:e5:b4:3c:1f:b4:7a:ed:
35:74:01:d0:a3:f5:e3:a4:72:7a:61:19:bb:f0:b3:9a:a2:54:
e5:44:40:c8:74:b4:f2:0d:56:5a:10:70:1b:72:9b:51:81:78:
75:8f:75:99:4e:1e:bc:a2:25:fd:5f:1b:d8:28:a0:53:9c:cd:
f9:10:45:60:a5:d7:90:d7:1c:4c:48:a6:26:b7:64:90:ed:74:
1d:07:56:c4:39:87:1d:80:40:ef:62:0a:2a:ea:4f:b9:9a:23:
c1:d9:68:e2:bb:1b:38:fc:46:e8:68:29:cb:cd:89:43:92:49:
11:dd:4d:f7:1e:c9:4b:c9:8a:e5:03:5f:2e:c0:ba:86:dc:74:
5d:d3:2d:f4:20:76:f2:34:4e:dc:bf:ca:7d:e4:49:77:ef:21:
0c:0b:85:1f:85:31:29:ec:3f:f8:6e:b4:f8:0c:d4:a6:41:51:
94:b5:06:a6:7f:42:d9:e7:b8:f5:3e:84:3d:77:73:45:b2:c1:
ee:75:0a:b1:70:dd:7d:50:0c:02:0c:1f:00:45:b9:fc:cd:94:
e6:88:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:18 2025 by rpki-client