Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: OiNvocM7Vo1ebxKpzbkymSh+2B1/zmXxpubKSvU02BE=
Subject key identifier: 74:98:E5:C7:24:0E:FC:2B:AE:62:6E:9B:49:C5:9A:85:8F:5C:37:42
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 0194BC72D55CE91CB3FA2CFDA49674D6B067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: tjHqhxq//adVFUwa4sky5WVyp/kqmfxL0gzmyvzZXf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:5c:e9:1c:b3:fa:2c:fd:a4:96:74:d6:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=7498e5c7240efc2bae626e9b49c59a858f5c3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:25:49:e6:62:52:59:86:83:28:f4:c6:67:
4e:a3:57:94:f5:4a:54:8b:7e:0b:60:39:41:12:c4:
b2:97:1e:da:01:47:95:e5:91:b9:84:12:2f:07:63:
16:33:ec:9b:45:95:90:1b:61:a9:85:da:55:cf:01:
12:d0:e1:95:0c:de:76:58:85:88:59:7d:96:38:d0:
84:85:41:9a:0e:96:32:14:c9:6a:3b:37:0c:c6:1f:
c9:74:b1:7a:85:2f:3f:07:97:27:25:2b:66:7a:84:
39:a3:1c:1f:ac:59:7e:f0:5e:02:de:ce:bb:a5:68:
e7:94:d6:24:3a:64:69:66:f0:70:c5:05:97:f0:57:
68:2a:54:ef:25:bb:f4:7f:04:5c:cf:08:ef:81:94:
7b:cc:3c:cf:8e:d9:37:40:10:c9:89:f7:eb:d3:8a:
a2:4a:62:ab:b9:7f:dd:fc:55:74:4d:ef:e6:fc:0c:
c4:e1:e0:56:0f:25:4a:63:ff:f6:b7:47:cb:42:d9:
13:18:f1:e9:73:a9:10:0e:b5:4b:71:d7:96:18:92:
b6:77:4d:1b:b7:00:e8:38:cf:90:85:90:03:a3:80:
3f:81:ed:2b:de:48:d7:29:84:00:c8:60:45:76:7e:
75:ba:77:df:40:25:f7:28:51:f5:d7:77:37:73:1f:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:98:E5:C7:24:0E:FC:2B:AE:62:6E:9B:49:C5:9A:85:8F:5C:37:42
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f9:a9:7b:1e:64:21:26:77:ff:8b:54:6e:1a:65:eb:0d:be:
e8:96:4c:9e:85:e7:0c:43:3c:eb:ed:bd:d6:12:37:f1:8f:da:
4b:c2:d9:5d:9f:3d:05:4b:39:e3:b9:6d:d8:af:61:84:5c:59:
f8:57:6d:4b:ad:20:71:22:bf:39:7a:12:f7:ff:e7:ee:15:10:
95:90:1a:df:d5:97:29:48:ad:9c:e7:42:c4:65:d7:46:98:e8:
25:57:e0:04:df:90:1e:83:2f:8c:d8:35:d3:b6:48:ca:6b:3e:
f3:c9:3a:41:2d:1d:ac:26:6c:b0:42:a9:03:bc:a6:6f:48:98:
bc:00:ce:96:ba:80:c6:06:e9:62:82:29:a5:de:47:de:5f:4d:
ec:ed:e6:49:9a:e5:fa:4c:ed:2a:2c:78:58:1e:cc:b1:f2:e0:
a0:76:8f:5a:be:ee:e1:d5:c3:f5:16:63:cb:d5:9a:b0:9d:d8:
e7:92:6e:68:4c:d7:06:c4:c9:6d:74:7e:9a:cd:62:fd:15:1e:
e2:a6:d8:61:dc:24:a0:07:29:62:ef:74:ff:eb:63:4a:e7:b7:
f7:29:60:86:40:38:9e:c2:bc:90:85:d2:a9:18:ea:02:3f:eb:
dd:54:0c:38:0b:8e:5e:01:2d:09:b5:32:15:f5:4c:35:e6:6e:
a9:9b:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:53 2025 by rpki-client