Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier: +xbp4pg7avj6ZD5SCFdYkTXYN4M3CcjAJphjhYBr5ms=
Subject key identifier: A0:B1:52:36:F4:EF:BB:B0:C9:82:12:6E:CD:31:7C:E8:BD:FE:F1:96
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 0194BBCEB66F7A8510B8D9A0E9CBB07064E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number: 0C2A
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (hash: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=)
2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: CdS2oC1mBEwU9z9bt8cuYnlGPkTNtGuL4CW7cwhXLqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:6f:7a:85:10:b8:d9:a0:e9:cb:b0:70:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=a0b15236f4efbbb0c982126ecd317ce8bdfef196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:85:b8:36:03:f4:a0:a3:81:c6:8e:1c:c6:
02:be:58:c8:f5:59:7d:c2:51:3b:b1:1e:bc:a7:f3:
5c:8b:51:5d:d4:de:60:18:cf:dd:08:bb:19:81:41:
62:14:75:d3:17:e8:fc:c5:fd:02:bd:aa:12:95:b1:
4e:47:5d:05:aa:8e:49:12:a7:67:c7:b1:00:94:68:
b0:e2:48:b0:74:ea:f1:90:74:e8:2d:e3:5d:c8:ad:
6f:51:02:b1:f0:0a:bb:e3:e8:96:a3:c1:80:4e:6b:
f1:dd:b5:bb:d0:b0:c7:dd:3c:8b:61:a4:fe:0e:d7:
91:e0:89:5a:55:ca:e8:38:68:75:df:6a:08:c9:2c:
57:77:37:81:4b:89:ea:83:2b:03:23:c5:a2:3f:61:
fd:d7:ef:8e:ba:38:78:eb:35:fc:d0:3a:2f:59:53:
1b:1c:92:e5:cb:bb:fb:ad:a4:c0:e5:73:33:b5:96:
a5:56:cd:62:5f:3f:eb:3e:2f:ab:f0:cf:7a:73:89:
11:bc:12:4c:d8:a7:d3:53:eb:0d:09:4c:3f:d8:9b:
db:aa:19:79:bb:7b:62:7f:8d:98:ad:bb:19:bd:f3:
f3:eb:a6:5c:f6:6e:47:be:4d:b7:fb:9c:e5:70:35:
aa:46:9d:25:4a:32:be:1a:04:4a:68:f3:8c:ca:74:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:52:36:F4:EF:BB:B0:C9:82:12:6E:CD:31:7C:E8:BD:FE:F1:96
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5f:f6:28:d9:45:44:3e:2d:55:d4:45:a0:92:b7:a8:40:31:
77:1c:f0:1a:d0:82:86:0c:19:a8:17:c2:b1:1b:45:2c:fd:b9:
97:2d:a1:c8:e0:aa:a1:09:e7:7d:b0:0f:fe:51:41:b3:64:95:
4d:2a:d1:aa:db:01:67:bc:6f:9c:a5:e0:f4:56:f6:1f:9a:c6:
37:61:67:43:a9:fa:89:43:f0:ea:9e:f5:3d:28:e0:12:97:fc:
12:39:aa:e6:b2:3c:e5:68:b1:23:51:2b:46:ff:7a:ed:01:b8:
c5:c7:f4:73:77:3f:86:25:b7:53:e8:27:33:e5:76:6f:4d:21:
e2:92:d8:a2:c7:19:fe:b4:6b:d0:df:5d:5b:80:17:fc:ed:ca:
7f:aa:2a:b1:bb:af:14:b7:74:d7:65:d3:6d:0a:8a:d3:4a:79:
28:7c:10:ca:a4:57:17:b2:9c:26:c0:7e:c1:b3:a2:c3:0f:8b:
2c:82:78:25:4e:73:0d:d3:65:b3:6e:fd:d1:fa:d9:86:02:03:
aa:84:3d:07:97:36:2a:85:1a:a9:c0:66:af:7b:04:b4:03:b9:
c7:c6:06:37:43:21:3a:42:11:f1:1a:16:f9:89:55:2c:1f:84:
52:87:1c:35:b8:6e:1e:ff:56:78:fb:65:ea:5f:46:0f:72:45:
e0:f8:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client