Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: v2k8lOTLVBXn1yTnO5uW4sBCP45dK10cAWzSEQkIV64=
Subject key identifier: 00:A8:D7:08:29:66:B6:DA:AD:EE:DB:85:03:C5:D1:C5:A7:C8:3D:DC
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 0194BCAA3ED0018D277CE00D05A0340E8A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: 6pnKPFXTkG6sJoIZWxt1uU4ok9WRxx7zLjEcd4fOixA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:d0:01:8d:27:7c:e0:0d:05:a0:34:0e:8a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=00a8d7082966b6daadeedb8503c5d1c5a7c83ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:40:08:61:c1:0a:ed:91:aa:35:59:1a:3c:
e9:89:0f:94:c9:1a:bd:ba:05:40:ed:a5:01:ac:7e:
7a:70:30:f3:fe:3d:00:36:fa:51:9a:b5:b5:7e:fa:
5f:21:aa:42:be:8a:be:6c:b4:d8:9f:ed:df:d2:2a:
9f:b2:7e:1e:31:87:d0:a9:d1:7a:d2:d6:9b:d7:b4:
0d:91:3c:53:bd:e0:1f:2e:f9:30:6e:f7:95:d6:2a:
6d:4b:c1:11:ee:92:65:c6:a1:ac:a1:61:52:0f:08:
28:76:b2:53:a5:4b:91:24:34:be:aa:0c:c8:a6:72:
05:d8:8e:fa:76:76:cc:ba:17:52:45:0f:32:d0:e4:
9f:72:36:9d:0b:1e:da:b1:ac:a9:fb:55:a4:de:d1:
7d:09:99:fe:ac:fc:4e:78:e3:7a:97:61:10:33:39:
85:50:ca:c9:59:58:d3:da:48:1d:6b:67:59:ad:1a:
75:1b:ab:d4:2c:36:d9:cf:72:c2:28:dd:a0:34:95:
17:2d:51:0e:00:90:2b:72:f3:50:94:c5:76:dc:5e:
fc:ef:91:6d:a9:7a:1a:44:72:04:c0:58:a1:79:7d:
c7:9c:3c:be:a3:e6:3a:f7:e1:05:84:78:09:0a:0f:
2c:16:c8:1a:cc:f6:fc:f3:85:4a:75:eb:83:8b:04:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:D7:08:29:66:B6:DA:AD:EE:DB:85:03:C5:D1:C5:A7:C8:3D:DC
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:63:33:c8:f9:d9:14:f4:1f:51:62:62:b0:fb:a2:4d:47:
c0:aa:33:11:70:18:09:26:07:34:f3:da:1e:0c:10:76:4e:19:
4c:78:ed:c5:f5:da:df:0e:dd:aa:c6:59:9e:14:18:40:6d:7e:
6a:41:07:bc:2b:ee:6a:fd:e2:3f:ec:f5:1d:b7:85:73:09:d4:
5d:c1:9f:98:05:35:7d:9d:c6:57:42:95:d2:8e:2e:f7:1d:5a:
72:c2:32:22:31:dd:0c:e3:34:a7:7e:93:2e:46:1c:76:25:75:
6e:dd:9c:50:21:46:05:3d:d9:44:19:b1:b7:d7:48:2a:8e:b0:
30:69:f4:b9:10:0e:5a:68:e5:40:9a:cf:72:8a:45:86:e9:31:
82:93:cd:bb:e0:a7:69:0f:d1:d9:3d:87:aa:ac:76:ba:33:fa:
f8:4a:7a:d4:b0:9e:c0:ba:f2:39:9d:c6:38:7b:8f:a2:e7:b5:
f2:77:49:d1:76:aa:ab:aa:81:7f:65:30:51:c1:f1:e9:e2:3f:
b9:b2:78:35:b4:98:9a:75:f0:db:e7:1a:85:9b:75:47:1d:fb:
56:5b:0b:5e:d5:18:0a:6c:b4:1a:73:2a:e9:c1:69:aa:5d:ad:
07:50:38:b2:e5:b0:bb:37:f6:2d:32:02:de:81:78:75:70:a0:
b5:3f:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:43 2025 by rpki-client