Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier: brGsNvxy3FsQUwAbmCdJKYVmxq/BaFEmalgnW9+Umio=
Subject key identifier: FC:8D:9C:44:71:E7:4D:BC:88:C0:01:21:37:C5:87:AB:B3:20:EC:D2
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 0194BD4EB02E562E9CBD364A4BF77BAC828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (hash: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=)
2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: Gnksr6qeadyeWLbqVL6CelSuQWj5Sd6z/J4/oCMuSGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:2e:56:2e:9c:bd:36:4a:4b:f7:7b:ac:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=fc8d9c4471e74dbc88c0012137c587abb320ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:a9:57:bd:05:ee:9b:5a:4a:50:97:b1:d2:
4a:b1:10:72:b0:0b:fc:80:e0:35:34:03:32:a1:e6:
6a:b0:47:f8:1f:fb:fc:5e:5e:77:fc:b7:55:d3:c3:
43:4e:75:4a:22:b6:77:aa:80:3b:d1:ee:78:60:fe:
9d:d7:0c:17:90:f3:45:67:4c:a4:80:35:e4:18:ab:
5f:6e:b7:b9:b0:c7:34:85:30:59:02:d5:93:53:b3:
08:d5:eb:6e:ba:3c:a9:8c:c0:0b:98:4b:96:48:48:
55:53:50:2c:bd:4c:06:c6:a8:31:8f:0c:0e:d7:e1:
60:99:e5:d1:56:2f:34:34:fa:b4:8d:8d:05:97:8b:
ca:2b:07:6a:24:b4:2d:2a:fb:ef:2f:75:02:23:14:
f1:69:08:8f:fd:a9:55:a3:27:31:e3:0d:9b:8e:b3:
4a:fb:61:b9:15:c2:a6:a2:e3:92:93:2a:47:c1:f6:
88:94:5e:7b:9a:22:a4:28:5f:ba:4c:2c:fd:e4:2c:
ee:aa:e7:98:60:d0:df:f0:15:52:df:7b:e2:8a:02:
c1:30:f2:5a:b7:af:c7:1f:e0:a4:52:72:95:36:8b:
9a:68:7d:39:77:28:f7:bf:41:9f:58:fb:d3:54:e7:
86:aa:cc:cf:7f:32:d3:04:4d:20:f3:1b:96:a9:72:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:9C:44:71:E7:4D:BC:88:C0:01:21:37:C5:87:AB:B3:20:EC:D2
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:45:1b:73:6d:d1:81:72:07:26:e7:39:d8:bb:17:37:7b:
ed:a8:19:7a:4a:81:06:74:3b:4e:ea:6e:ef:97:07:06:37:a9:
de:5a:1b:37:7b:a6:8a:e1:e2:41:b2:16:a4:5c:24:82:91:0c:
c5:ab:f6:92:c5:c1:4d:91:52:5c:5b:f5:2e:fe:57:77:1c:64:
59:2d:c2:cc:2e:a8:1e:db:65:63:f8:9f:d3:12:e1:78:4e:2a:
0e:78:46:47:99:07:e1:96:ac:c7:46:e5:39:c6:f7:83:b1:46:
65:cb:02:68:4e:99:7e:55:28:f0:27:de:d6:c8:ce:28:b2:23:
fe:99:4d:c7:54:59:ed:bf:fb:c0:32:4b:77:14:96:4d:a9:c1:
7b:9d:a5:83:02:0b:3a:72:aa:41:64:9f:3f:bf:c1:da:b5:4a:
01:6a:e1:7a:8d:05:8e:64:68:1f:67:c2:6c:2c:1b:99:20:37:
f6:8e:8e:a6:b7:6f:fa:3f:aa:78:0a:df:4f:f5:a8:ed:10:35:
09:6e:36:6b:dc:5e:1f:b6:e9:39:1f:20:23:0a:4c:58:da:3c:
9d:13:32:f2:6b:ba:9d:fb:cc:be:c6:71:4f:48:13:e5:1b:33:
e0:a4:88:51:1e:b2:46:de:49:b8:cc:b5:22:f2:3d:ec:3f:29:
4a:93:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:47 2025 by rpki-client