Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: 31aVXOEpu+SMZL5E0viAjkwaFyT/tswfTmjCdGtGGQQ=
Subject key identifier: 3E:17:82:15:3A:5C:56:22:DF:BA:10:F3:9E:31:C5:51:E1:79:FF:54
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 0194BC7316F27977BAF1C361BB1227446C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: htaRur2PmQ/Ql1aLDLJ29tcCM9/9oXpIpf+p+xrU+Fg=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:16:f2:79:77:ba:f1:c3:61:bb:12:27:44:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=3e1782153a5c5622dfba10f39e31c551e179ff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:11:a3:0b:98:58:7e:fe:09:46:5f:99:ef:
b5:b8:30:80:4d:2a:47:29:96:c6:7b:e4:67:fa:aa:
75:e0:fc:a4:55:3e:2f:d0:c5:5c:84:f4:2e:78:27:
fb:48:c5:93:4e:6d:eb:33:84:b4:3c:f5:61:1f:e2:
dc:a9:89:74:05:57:ce:7d:98:fd:8a:26:e8:c6:81:
d1:61:13:8c:53:c2:2b:ad:81:97:be:ac:58:a6:5c:
71:5b:54:24:e0:a2:69:76:c9:0f:c2:46:26:b1:91:
b4:09:63:2d:63:e5:68:dd:93:17:c0:20:b3:2a:a1:
43:55:65:c6:5d:6a:22:e3:a9:72:f1:12:30:9c:71:
f0:bb:9e:5a:71:2a:3b:b5:b4:23:da:92:ae:93:58:
c2:4e:ed:c7:a1:59:91:a1:e5:9b:80:14:33:17:e4:
da:58:1d:79:05:99:c4:d9:f6:2d:fb:aa:59:c5:c5:
07:e4:cf:6b:19:84:31:7a:0e:fa:e7:36:39:64:58:
c5:32:50:16:01:b2:ea:c0:aa:81:06:07:4c:a0:3f:
53:60:31:36:a7:27:c6:6a:e7:e5:cc:ba:95:e0:63:
13:de:8a:fe:b5:fd:38:a6:90:32:09:5a:2f:a3:e7:
00:14:4b:a7:84:ca:c2:8e:ff:33:33:66:e7:4b:a6:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:17:82:15:3A:5C:56:22:DF:BA:10:F3:9E:31:C5:51:E1:79:FF:54
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:77:4a:fc:69:0b:cd:a9:73:51:ca:d8:01:78:cc:98:a7:
23:01:ba:96:fc:09:8a:62:29:62:ce:30:ff:8c:2c:56:b6:d4:
a2:40:69:c8:64:d5:4d:bf:33:87:72:35:69:b5:40:d4:b6:f3:
18:70:fe:7c:12:b6:a4:3b:dd:f8:ec:bb:dd:5e:0b:3c:6f:ec:
5e:01:77:98:95:a7:48:d7:16:cf:f4:c8:1d:36:0d:d8:89:37:
15:30:20:e5:36:1e:49:cd:57:e0:37:2e:b2:b3:14:a9:3f:c2:
ef:36:c4:60:ad:07:8f:53:3d:52:f7:e1:56:de:e6:1d:18:51:
b1:46:0d:59:6d:4d:ce:23:c0:e7:52:ce:a3:37:67:bd:b6:40:
6c:a8:17:27:bf:28:fa:df:f4:33:55:b0:74:9a:94:6f:9e:3d:
e7:30:c7:77:29:cf:3b:49:ab:5f:7f:5f:c1:17:69:46:a8:8a:
6f:2f:f6:34:4a:9a:28:5b:5e:2b:b5:4d:12:fd:c6:91:32:20:
fc:8e:b5:90:c5:90:f2:fe:7a:ce:5f:53:58:87:b7:92:26:2a:
fa:e3:0a:19:fe:d8:36:06:66:ab:4e:5c:57:5c:17:a9:58:67:
46:e0:a4:8d:9d:c6:38:64:48:52:fa:c2:db:ce:95:bd:6b:00:
c8:b2:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:07 2025 by rpki-client