Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier: 6DzhHPry43Ar2dJWJJgScbOO+xahUu6AYep71Z5oekU=
Subject key identifier: 9D:53:7E:2A:B6:A2:94:4B:B0:BE:F6:06:E3:DD:F6:E6:AF:0D:83:A1
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 0194BC04A2F5FE579795CD018F8FC522E991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: KmdBfxAhtfiNS3plSVaELcTWpBnEJYqRxemraQlY2lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:f5:fe:57:97:95:cd:01:8f:8f:c5:22:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=9d537e2ab6a2944bb0bef606e3ddf6e6af0d83a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:5c:7b:aa:ea:dd:e2:15:b4:46:dd:f7:1d:
15:d9:37:2e:68:bc:6a:4d:92:41:44:e2:04:89:a5:
48:a1:bd:d7:6c:bd:46:57:d0:18:64:8f:91:b7:c4:
81:c4:ca:9a:7e:6d:53:62:1c:91:45:46:88:1a:ee:
0a:9e:a4:2f:41:59:f1:e0:36:38:88:24:a3:64:7f:
1f:54:47:48:a8:a1:79:72:24:57:73:12:45:57:b0:
7c:9d:46:5e:0f:e5:1e:c3:5b:47:8b:30:a6:3d:1c:
23:90:77:00:22:1b:0a:ec:92:cc:27:c7:3d:ff:df:
78:d5:4a:b8:a9:7c:9e:68:f5:57:49:cb:05:da:63:
23:ea:0d:7a:0f:c8:71:64:90:26:19:e6:e9:53:b5:
ec:80:6e:55:19:61:00:ed:94:09:8e:23:61:41:05:
34:4a:88:69:81:ef:9d:7f:49:c0:f5:2c:2a:6f:6f:
a4:8b:3c:4d:ee:3e:a1:b4:ab:19:50:80:e8:e3:76:
bc:45:82:4a:53:75:20:44:27:e3:76:1f:d2:c3:de:
c1:4f:7b:94:df:0b:77:18:fd:c3:a1:9b:11:09:fb:
26:19:b3:f7:f7:88:c3:b3:e4:fa:c9:4e:bc:96:ec:
4a:59:89:05:f4:2d:28:d1:0d:1b:aa:fa:4f:a6:3b:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:7E:2A:B6:A2:94:4B:B0:BE:F6:06:E3:DD:F6:E6:AF:0D:83:A1
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:ca:d3:10:1a:c4:25:a4:c1:e5:f8:56:d7:48:54:62:ef:
dd:ac:d6:3f:8e:68:0c:d3:f4:f1:dd:b2:ed:c6:88:0b:3b:20:
44:05:d5:10:76:a1:ee:1d:d0:db:10:d7:a2:64:92:c3:b6:a1:
34:04:fa:88:03:10:3c:66:da:b4:77:91:0a:c5:60:df:9d:40:
aa:81:87:39:99:43:75:63:7c:fa:9e:33:41:c1:a0:15:15:18:
6b:b4:a5:4a:ad:f9:8e:c1:20:6c:63:af:c6:16:df:fe:26:50:
4c:ce:93:7e:60:32:c4:31:4f:6e:7b:b2:bf:a8:28:02:19:40:
c8:ef:94:03:99:8a:66:0c:de:95:8e:65:ea:81:74:c6:d9:68:
83:1b:76:ad:ec:36:4e:3d:1e:fa:b2:bc:7f:dc:77:00:4e:c1:
df:9c:05:cf:07:28:2c:22:9f:b0:b9:af:58:b3:47:1d:9c:8d:
e7:77:1f:fa:4a:08:6d:ef:3f:cb:ec:2d:84:3c:58:57:47:c1:
9c:70:b8:c2:d1:34:08:0e:05:17:18:0a:57:d1:7a:9b:8e:eb:
cc:25:e8:33:0f:30:52:7f:94:54:38:dd:72:b7:11:5c:25:54:
29:3f:1e:0d:b7:05:86:d8:19:22:fe:a7:dc:d2:37:ff:75:04:
ad:4b:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:07 2025 by rpki-client