Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: XgAp8ey6htxzYTW9VtzcZu9yyn9t9YLdhgdKzp9O5Hs=
Subject key identifier: 8A:39:70:C8:8C:51:C2:45:11:02:80:41:8A:4D:6F:A2:60:B3:3B:DB
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 0194BCA9A9BCC888778827516CF0F3DD742F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0B69
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: 8bXJRlPuypHpf3YcitLqySpBfumRDB2kN1NYSnYAkfA=)
3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:bc:c8:88:77:88:27:51:6c:f0:f3:dd:74:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=8a3970c88c51c245110280418a4d6fa260b33bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:b6:ea:2a:f5:af:4f:d5:aa:8c:0b:c2:91:
3f:a7:71:52:ea:52:27:ce:ad:43:67:2e:a6:b5:4b:
55:ff:61:82:22:29:fe:8c:29:bb:d3:9e:12:16:6b:
02:f1:9b:35:d9:b6:7c:e0:0f:e2:86:51:5b:5d:9e:
bf:ed:90:9b:2c:05:32:8d:39:df:4b:1f:a9:52:cd:
6d:9e:52:2f:0d:58:36:b3:06:55:1d:f1:0f:13:6e:
07:ed:0b:68:47:2f:d2:61:11:8a:7e:50:94:bd:f5:
cc:3d:d0:e9:42:0d:1c:af:85:35:66:72:10:65:f2:
75:8e:0c:3a:61:1d:e8:21:71:fb:d6:13:e9:ef:bc:
b1:01:58:94:d2:05:4b:5f:49:e6:eb:31:85:4d:11:
30:e2:03:49:22:cf:36:1b:5a:2b:5b:f2:97:e9:ec:
62:2f:6c:dc:1a:27:77:c4:cb:2c:d8:5d:44:d9:9f:
06:de:99:d7:2d:93:84:16:ab:16:35:fd:ab:f3:7e:
5d:4d:bf:49:db:d3:66:56:5f:24:83:40:8d:74:b4:
86:cc:2c:e6:96:37:97:98:79:d8:ba:56:09:d6:f6:
36:52:8f:b3:1f:e5:43:fc:91:a1:fa:1d:ba:d6:35:
88:85:22:20:15:6c:fb:dc:cc:5e:40:24:75:b4:18:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:39:70:C8:8C:51:C2:45:11:02:80:41:8A:4D:6F:A2:60:B3:3B:DB
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c1:ed:71:0f:72:e9:33:de:82:d4:79:bf:07:f5:4f:0b:a8:
5d:38:68:c8:ba:cf:85:7a:7a:33:f5:19:c3:19:8b:a0:64:97:
fd:d0:97:4b:d5:ad:d3:29:be:37:fc:85:19:cf:0c:fc:38:1d:
a3:cf:4e:5b:5f:e4:30:52:0c:a3:5c:b9:78:dc:4a:ef:77:8b:
5b:9e:90:1f:1f:b6:cb:c2:80:39:ef:4c:fd:89:74:1b:28:1b:
35:95:20:78:54:d7:da:a7:2b:19:df:d0:a8:16:a1:80:3b:d0:
f2:1a:3a:21:4a:a6:7c:ec:ca:23:a4:89:6e:f8:13:e2:03:05:
42:3b:97:67:fc:67:7d:a7:23:52:1d:59:5e:f4:2e:c0:a8:e9:
23:21:01:c7:1f:5f:9e:ac:fc:29:df:f6:e7:bc:69:35:c8:10:
25:e7:da:f3:c7:13:23:e7:75:71:07:1b:de:27:a8:e7:19:d3:
24:62:c0:6d:3d:6a:a5:f2:a5:36:45:1a:b2:26:22:cc:5e:03:
ee:d4:7f:ec:e1:63:d5:8a:96:ce:d4:b5:d3:f6:78:ad:73:f9:
e1:a4:a9:ce:37:ff:9f:1a:33:e4:f3:8c:48:6c:38:1c:4f:4f:
19:50:8b:d5:c4:b1:9b:fd:f8:df:f7:07:96:b7:0e:87:e3:8c:
bb:a0:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:44 2025 by rpki-client