Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: 4OpI8qzUmqsCemqPB7nLiwNibCpN5RKCbDRm3GpForY=
Subject key identifier: BE:BE:0B:15:DF:03:33:4D:27:30:22:2A:07:BD:63:D2:E4:DE:30:1F
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0194BD4EB53E7A0F1A82F2CBDAE91389F08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0AA8
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: z1yZBL78KCiFr1qUhaSVbOPYjkBFlgOVRV1sTH/PV8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:3e:7a:0f:1a:82:f2:cb:da:e9:13:89:f0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=bebe0b15df03334d2730222a07bd63d2e4de301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:c9:45:99:d3:22:b3:21:d1:89:c8:96:d2:
49:61:f4:0a:46:9f:63:c1:ed:f4:9d:5b:fd:ad:7b:
39:76:80:ce:84:46:07:c6:1a:50:b2:18:26:1f:2d:
b4:45:68:81:34:43:39:70:79:a4:21:a6:96:8a:40:
30:d0:b5:e1:e3:1f:bc:c5:db:df:b6:4d:f5:ba:01:
53:da:d1:86:21:90:da:a4:7d:b6:b7:80:af:51:6a:
40:2e:6a:f6:f4:05:72:e6:e1:2c:5b:67:f0:d3:25:
30:94:1c:dd:74:f6:0d:c2:23:df:d8:d4:70:6b:60:
e1:24:1d:53:7a:65:81:30:a7:80:a5:39:92:ff:f1:
5d:ea:ee:bf:00:6b:b4:c9:1f:65:3d:86:0c:87:c7:
ef:95:41:c9:a8:e9:1e:b6:42:94:51:14:1b:a9:fe:
89:1f:18:ad:57:68:9c:80:60:3f:c9:2e:02:95:08:
2b:13:ba:c1:17:e3:5f:4a:78:4d:18:77:69:8d:78:
40:b6:b0:d9:09:5a:bd:9c:42:ab:9f:fb:d6:3a:95:
a2:19:ea:5b:aa:a4:ab:8d:2a:8f:b8:78:87:09:c2:
62:6b:f3:bc:99:f8:49:74:2c:3a:10:52:9c:74:20:
4b:d8:e2:a8:cf:20:c8:1b:83:df:6d:40:d8:86:61:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:0B:15:DF:03:33:4D:27:30:22:2A:07:BD:63:D2:E4:DE:30:1F
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:15:c0:62:e1:2c:00:51:0c:03:ad:1c:d7:59:a4:17:fe:0c:
18:05:2e:94:07:48:52:3c:22:9e:20:dd:f3:08:29:f7:9e:6a:
97:41:67:fe:2d:94:7c:6e:5a:23:f7:a4:fa:2a:bc:8e:19:ec:
bf:10:e5:34:be:07:aa:ef:1c:91:ea:1d:76:c2:fd:a3:91:c4:
86:91:6f:02:33:63:a2:14:93:c9:de:71:90:21:98:ff:c0:1c:
12:7e:9a:64:f3:57:b4:91:0a:fd:40:82:7d:61:26:da:23:98:
99:dd:3d:82:9e:b4:4c:9a:50:db:01:6e:03:89:f3:f0:94:1a:
44:dd:21:6e:ce:3c:36:a4:ef:a7:2a:fc:63:0c:b1:4c:36:cf:
29:87:73:36:e7:90:fc:fa:fb:44:57:0c:d2:6a:4a:73:d0:98:
eb:90:6d:50:7f:e5:23:37:f6:5b:64:c5:07:f1:4e:c5:be:22:
c2:ef:b8:21:9e:a1:8f:4d:b1:02:17:10:4f:ac:75:f8:74:0c:
d6:06:14:df:18:ae:50:40:eb:40:36:47:e4:85:ac:37:d1:13:
ef:63:8f:8b:52:17:06:d7:49:a8:6e:ac:5d:95:a1:71:b7:d5:
c1:4e:80:87:9f:c8:bf:cb:72:b7:72:53:6f:c3:7d:3e:e3:b9:
42:50:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:08 2025 by rpki-client