Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: 9SjD2noL/DGmz26yJ4wrj0daPQKQqvrtyu5tszJZUE8=
Subject key identifier: 04:9F:14:40:BF:C3:20:1F:8C:F4:29:58:9C:3F:0D:3A:08:CD:AA:5A
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 0194BCA9C350F9E5662D38D26BCACBDDDE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: 5VbctEI4Q0C1trqI39c5PKVHSrr0yN9Hsg+hTkKd6wM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c3:50:f9:e5:66:2d:38:d2:6b:ca:cb:dd:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=049f1440bfc3201f8cf429589c3f0d3a08cdaa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:91:16:45:40:57:fc:15:c2:39:87:b4:a2:
06:5f:5b:e2:66:5a:48:3f:e9:cf:0a:34:8a:f5:6a:
55:c4:a8:40:b9:b2:a7:69:4e:fb:34:98:83:41:99:
bc:ec:ae:1f:73:0e:1c:99:d7:ca:f5:de:ef:29:2e:
7e:8a:83:a3:20:e1:c8:b6:c9:5e:d8:3a:90:70:ad:
12:cf:96:e6:8d:c8:c0:8c:1f:67:4d:26:5b:2f:7e:
b0:04:33:d4:4b:51:f0:89:5f:22:7d:63:ce:75:8e:
18:31:1b:82:28:60:2e:76:09:79:bb:70:ff:0e:8e:
77:ef:3c:31:14:f3:9c:ae:38:3d:af:a9:e9:b2:41:
24:ad:30:43:e2:d5:7d:59:b1:f0:c7:2b:48:ad:7a:
4a:c3:99:95:aa:6f:b4:77:f9:93:a7:92:e7:f1:e8:
58:38:3d:9a:2a:11:7a:0d:91:10:73:98:76:0a:ac:
0e:35:2e:25:62:70:6d:58:2a:ae:02:2b:8e:db:68:
1c:2b:88:f5:85:60:de:aa:db:75:d4:9b:d2:87:82:
65:91:df:43:25:d9:8e:d2:f2:08:c8:c8:c7:cb:40:
14:1d:b7:4c:fd:e7:bd:1d:d2:7f:ac:ff:21:f9:31:
f0:25:2b:75:7f:13:6c:81:82:3e:ec:6f:0c:a4:cf:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9F:14:40:BF:C3:20:1F:8C:F4:29:58:9C:3F:0D:3A:08:CD:AA:5A
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:a4:9d:d7:ad:d8:1b:a4:e9:11:dd:50:01:18:76:ab:90:
41:a4:2a:a9:28:50:c7:bb:62:2d:18:25:ae:e9:02:03:8d:03:
85:eb:bf:6c:a0:38:f5:17:ac:09:d2:40:22:65:ea:48:f7:cd:
da:bb:68:48:0c:39:0c:c3:dd:7a:c6:84:83:d2:a8:5a:55:83:
d7:44:ba:a4:8d:85:a0:f3:f0:6c:4a:0b:cb:41:3d:95:35:1e:
cb:e2:5b:3e:46:a1:ec:af:73:e7:ea:9c:a4:b1:85:29:93:5a:
be:0e:e3:85:73:7a:70:88:d4:cc:53:34:28:a7:e3:b0:f4:07:
e9:ef:c9:00:b5:95:11:56:84:8c:d6:44:29:d7:d5:46:4f:e8:
50:3f:11:7b:a1:4e:72:e5:dc:6e:8d:a3:79:23:2f:f1:2b:ae:
51:f7:80:ea:0a:4b:83:1f:91:00:cf:5e:09:99:4d:d2:76:75:
01:f9:72:b0:f5:15:f5:3b:0a:7f:97:7b:b9:68:df:21:f6:76:
c0:48:74:bb:07:30:79:a3:96:ea:37:6b:01:8e:bc:ee:56:dc:
bb:0b:62:d4:37:b2:5a:9b:72:2b:31:9e:9a:56:00:e7:13:cf:
c5:ea:cc:77:42:26:b9:75:79:fa:ca:9b:a0:1b:65:91:29:7f:
af:99:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:01 2025 by rpki-client