Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: uQPxe88NW+sQGvDhAnvupf8qntg6VgnrPUL9wyfvrSg=
Subject key identifier: DD:E3:0F:49:2D:18:E7:A0:4A:FB:04:92:2A:D6:12:32:DB:0E:13:B3
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 0194BCAA0B99208AF773A13F005C3D24332F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: YXUUhpd1+wIrg2HRU/xPK/5sJWyHfnbWtiHnTuHVoJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0b:99:20:8a:f7:73:a1:3f:00:5c:3d:24:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=dde30f492d18e7a04afb04922ad61232db0e13b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:0e:b7:a9:b9:87:a8:96:87:d6:0d:9a:1e:
bf:7c:31:5d:a4:dd:bb:97:3f:62:e4:7e:dd:22:6c:
7f:f1:0a:6c:1a:d1:4a:7b:c4:6e:8b:c0:f0:8b:b6:
1a:c9:8d:ba:58:3f:9a:66:9a:4c:99:73:11:4c:31:
4e:57:1e:cf:2f:9b:d5:4f:52:05:09:38:56:9b:d6:
3b:64:16:ab:d1:63:66:91:5f:5c:aa:cc:a4:6f:10:
0b:20:02:f9:14:e7:2e:76:3b:6d:b9:01:65:c5:66:
43:3e:b6:f5:4f:47:8f:c8:e3:11:30:c4:03:3c:a6:
07:a5:76:38:df:01:f4:cb:2d:a8:2c:3b:66:b5:5a:
14:16:99:69:f1:05:cc:da:24:6a:36:dc:11:f6:91:
0a:df:3a:6a:a3:cc:43:f1:3b:14:98:24:f5:6e:de:
a8:9c:02:a4:09:de:bc:83:23:a8:56:42:28:f0:27:
d9:78:2b:eb:27:31:a1:d9:d8:ef:50:2d:41:7a:76:
22:8c:f6:c4:d2:75:c4:f1:f6:97:77:9a:14:38:ec:
a4:f3:e9:1e:a0:3c:98:d2:ea:c3:ed:4b:7d:50:3c:
40:63:70:6a:79:f5:53:6a:2a:ed:fd:73:4d:9b:cf:
51:27:ae:d6:5d:65:fa:ee:f8:06:fb:6d:3b:03:af:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:0F:49:2D:18:E7:A0:4A:FB:04:92:2A:D6:12:32:DB:0E:13:B3
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d7:47:7e:24:29:f8:84:8b:a3:19:df:52:d0:b2:0b:bd:e9:
9f:e0:0d:1e:62:70:0f:58:ec:61:40:00:0d:6f:0d:73:fb:ad:
a1:5d:00:2e:0e:05:b5:da:55:20:cc:53:a5:cb:ba:95:a2:3a:
2c:a8:8f:2a:9c:3a:6a:0a:38:5f:58:47:c1:c6:4e:c0:84:5b:
88:f3:3a:f5:e1:bd:ce:05:39:f0:90:e3:43:c4:3a:94:16:a8:
3b:06:5d:d8:15:f7:5d:a7:a0:65:af:55:4b:2f:86:51:dd:fe:
d9:88:57:d8:5e:93:9f:aa:1b:1f:66:1e:64:33:18:f2:d2:4e:
e8:1b:49:b9:1c:b5:f5:cb:50:cf:49:48:30:25:ab:28:a9:3d:
99:5d:67:da:9b:3a:35:b4:00:0c:4f:05:f3:69:81:b3:6f:63:
7a:95:06:70:9e:56:c7:10:9b:98:43:fc:71:33:f3:0d:11:02:
bd:a2:8b:c1:ad:6f:be:c8:46:a9:c1:eb:65:aa:eb:7f:7c:5d:
db:fa:41:a6:3c:0c:36:93:c7:19:90:8e:e8:65:14:5c:f2:87:
5c:80:db:34:85:d5:2d:eb:1a:1c:0f:fe:79:e3:78:b0:b8:0a:
9c:2d:fa:db:2b:4f:4b:27:69:80:93:33:87:f2:03:58:77:5b:
60:c5:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:36:54 2025 by rpki-client