Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: vJuqyE0HNwBaefDy+N28FuN3OSSwl4ANK4+2sGDcFPc=
Subject key identifier: FB:C4:E9:5E:50:08:43:97:2C:40:60:9A:7F:2C:C6:B5:61:A8:61:CB
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0194BCE0700FD487424F7CC62CE19E474F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 0205
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: tmZDMVwcRjpSphKYVdEyr+OZgirTq8hy3FJUS54PHKM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:0f:d4:87:42:4f:7c:c6:2c:e1:9e:47:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=fbc4e95e500843972c40609a7f2cc6b561a861cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:b2:34:15:bb:ac:4d:69:75:00:71:f8:69:
ec:a6:96:1d:61:0e:0d:9a:d0:5f:38:59:69:db:6d:
44:52:d1:01:54:2d:d2:88:15:25:2b:34:cb:0a:cf:
04:10:2c:3d:ae:ee:bf:6b:a7:d0:37:8b:7c:56:10:
cc:40:07:cd:a2:ec:e8:28:f1:ee:48:f7:6b:df:54:
72:2f:7b:21:3a:ce:d5:00:84:d8:18:07:d7:5e:ae:
9d:6d:89:0f:54:62:ea:bb:56:b7:3e:69:c3:fa:6d:
cf:fa:55:64:1a:71:d7:5a:a2:05:87:da:ed:cd:20:
6f:8e:5f:22:6e:18:c8:24:28:6f:ab:74:07:09:47:
79:ac:35:d4:0d:2d:9f:9f:f1:01:2a:01:17:8d:bf:
cd:67:43:dd:01:55:dc:c3:43:2c:11:6b:dd:62:00:
a1:22:c1:29:8f:17:3b:2a:94:a6:d7:1b:39:a2:8d:
da:f9:7a:62:4b:b6:37:c5:61:f8:81:4e:d7:88:e6:
2a:32:2c:aa:05:a4:06:45:26:42:75:80:42:c9:01:
ef:d1:12:6d:9f:dc:a3:2f:db:05:aa:e4:8a:a6:2e:
8c:95:85:a6:91:b7:5f:58:64:b7:6e:af:51:00:f8:
2b:ed:04:23:42:e7:c6:e5:dc:35:44:43:1a:d0:5a:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C4:E9:5E:50:08:43:97:2C:40:60:9A:7F:2C:C6:B5:61:A8:61:CB
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:5b:a6:1c:1f:2a:8e:7b:a2:0f:ec:c4:f9:5c:40:b0:2b:
d5:84:6a:b9:16:13:0f:0e:54:f9:9c:cd:b1:4f:38:97:dc:c1:
61:83:ab:44:15:91:33:1f:85:b0:3d:b8:99:1b:5f:f8:36:38:
07:21:0a:64:f5:93:e8:d8:04:bc:0c:d6:87:ea:c5:01:ba:c2:
45:80:d0:6b:fc:c1:33:cd:c3:a0:db:07:82:dc:5e:a6:46:cd:
83:c3:6e:ce:17:d0:29:13:3c:09:2a:51:23:e8:fc:5d:5d:97:
06:b5:f9:d7:b4:40:9e:47:2d:f8:04:38:d3:9c:ec:a5:a0:0f:
5a:3a:c2:05:c5:d6:0a:7b:a4:e5:44:58:07:c7:43:c8:8d:29:
ea:93:f9:de:07:11:54:4f:d0:d4:3c:ac:cf:9d:d8:75:10:2a:
37:59:37:e5:03:a2:30:41:7e:02:d4:d0:84:3f:a9:e4:c1:5c:
f5:a4:9b:70:02:e3:89:1f:f6:7d:e3:0f:40:c1:79:e9:ba:f0:
f4:23:6f:56:ac:0a:20:b7:90:17:d9:ac:d7:01:df:3e:3b:62:
78:c2:e9:39:d0:29:4c:e0:de:78:0d:94:76:1d:05:22:75:54:
bc:83:0b:d8:65:c3:79:93:5a:be:9c:58:69:d6:83:4e:6e:b1:
0c:86:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:31 2025 by rpki-client