Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json)
Hash identifier: 0VZJDo4tUh/NAjB/P+kpRKMFguif0ywq/LkdnY76LT0=
Subject key identifier: 70:0C:97:58:1B:5D:A7:67:17:C1:5B:C8:79:0A:49:06:F6:BC:E4:F1
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0194BC72CCEC4C8CD5F145CE9157A8D97A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
Manifest number: 138E
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 67knVum1wBay7k_VNa2UY1ZRh60.roa (hash: mJTVZRqj1O7LfCpRR9HxwFssov8nRBQ/WlFjuFod+is=)
2: F6thJua_pfK1T5A75geE8te-p5Y.roa (hash: qKLS4h0BBZz8S6M5TJO8nDFTOYkr36FxmU2mfQ/9+DQ=)
3: GJHaatQheZf97nB24x4JgSqBMf0.roa (hash: +FlQApNOw6BNUpMXsT14zzUVOyzFNJwvGUQalJLYj3w=)
4: GeXAjifASMWW-RetKJHYQD473Ts.roa (hash: jdnwbDBImN9RF5KlDVV7kqZXHMWrLJ35s/1hnZnwdh8=)
5: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: U1wIYDEI8NXXo+BMIqumJOZVmY8QxIAoxJjqbMpP8IM=)
6: _esXnKi8frhyKxTNyBGcORNFzu4.roa (hash: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=)
7: yuDYBrZjhTV7uI-QS5PT6qF5N7s.roa (hash: +th6rVasBDhTDv9q3+kidlk8IPZxm2tOEsWRAh7P2ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:ec:4c:8c:d5:f1:45:ce:91:57:a8:d9:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=700c97581b5da76717c15bc8790a4906f6bce4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:49:16:86:4e:fd:c7:33:23:fb:f5:5f:16:
10:29:48:14:70:f9:e5:5b:4c:e2:0b:dd:5c:76:eb:
91:e2:cc:9f:d3:7e:65:19:21:24:51:a1:df:ce:31:
2a:63:9d:ff:9b:57:73:ac:21:dc:4e:49:52:61:be:
45:ae:41:93:64:20:e2:db:f5:32:7a:f5:fd:57:16:
91:4b:7f:28:68:b0:e7:1f:23:a6:85:80:53:7c:e2:
e9:8a:aa:a8:1b:4c:56:98:c7:86:ac:be:37:7d:d9:
18:d3:fa:e8:55:26:d2:a5:43:12:c2:42:4c:43:41:
c5:cd:ee:ca:a2:95:1c:f8:df:1b:fa:50:9c:30:c0:
e2:df:fe:47:a1:69:ca:d4:01:03:30:e4:bd:e9:3d:
0c:71:4c:c6:c9:56:fe:26:e3:94:0c:38:8c:6b:4c:
3b:26:f9:1d:d5:ee:28:72:ba:e6:35:43:e6:77:28:
58:6d:2c:3f:a8:b6:96:8a:d4:0c:86:4b:1f:09:3a:
31:be:2b:8a:1f:eb:72:a7:98:47:64:2b:91:75:2d:
88:d7:e2:09:99:58:eb:59:bb:b5:84:4f:a4:c6:d0:
b1:47:86:db:5d:6b:20:02:14:86:6a:b5:71:2a:c8:
32:8f:6c:be:e7:8a:35:2d:56:e6:35:7b:2d:71:c7:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:97:58:1B:5D:A7:67:17:C1:5B:C8:79:0A:49:06:F6:BC:E4:F1
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:2b:1b:b8:28:8d:47:d9:a7:c8:cd:93:f4:d5:ae:0e:4e:
0e:8a:b3:1b:0c:ae:ab:91:53:69:16:a2:f5:3a:1b:85:38:74:
19:47:a6:31:38:50:d4:04:53:d5:8c:bc:f4:7d:9b:79:fd:d0:
92:da:f2:08:e2:e3:05:2a:99:21:7c:bd:5b:f1:87:43:79:0c:
8d:53:1f:e2:9c:49:57:3f:65:0d:54:63:2a:f5:fb:a0:3e:84:
cb:d8:f8:ea:40:c7:a4:88:e2:d2:da:5c:b9:60:ce:29:c7:93:
4b:cc:5c:66:69:75:d5:cd:29:14:9b:c3:d0:3f:40:61:d6:a2:
58:53:2e:6c:8a:e5:c0:6c:a8:65:21:79:f7:e9:ff:e0:b8:bc:
13:e5:31:72:c4:bb:2f:4b:14:2d:a7:1c:7e:ee:51:0e:dd:d5:
05:a0:91:b8:ea:55:8d:9f:94:c4:56:68:6e:3e:e7:7d:a6:d5:
c8:ed:96:42:29:7c:08:2f:1c:da:2d:3a:2a:8f:3d:1d:27:02:
4f:ae:5e:61:7f:87:12:6b:86:0c:a5:16:a9:84:8c:9d:d2:2d:
b2:d6:b8:cc:43:27:e4:7e:e5:fc:4c:ba:e6:6e:6f:b4:6a:5d:
1e:cd:87:e9:2c:74:98:07:d4:70:bd:fc:6c:0b:4f:58:cc:ad:
2a:9f:08:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:39 2025 by rpki-client