Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: zVcHZMQUbLaO0S+Z5goBugUzWVPnUdN7/XpvQGyWafI=
Subject key identifier: 92:7A:61:59:91:03:81:4C:B6:DD:68:E7:63:AE:43:49:DB:8B:38:41
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 0194BC3C88884E904EFEECEAD89BED9FD5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 03F8
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: WziYZQTgG6uYWNEdvqwQxarVou4.roa (hash: K1TtQwXEcoMLvYVaawZdU+KIeSsRtPv5nA+Jxlzh0sU=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: z+JcknZeHgJMg/5lgoRbDajU5ks5usi3HspYjq+J4bE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:88:88:4e:90:4e:fe:ec:ea:d8:9b:ed:9f:d5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=927a61599103814cb6dd68e763ae4349db8b3841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:91:e4:53:24:9b:e8:3d:02:04:10:49:7d:
4f:12:4d:8d:d1:52:0b:6d:23:cd:f6:8b:48:46:f7:
e6:e1:09:41:11:bb:0d:2a:1f:8a:12:ac:d0:3e:ed:
84:12:d4:64:c0:41:a2:04:51:05:31:c0:50:02:fe:
2b:d8:28:c5:27:20:f7:4d:a8:4f:d7:f4:37:f3:a2:
6d:46:cb:7c:b1:3b:16:1c:43:15:7f:6e:25:e4:37:
ca:d7:79:05:23:db:b4:20:f4:6d:46:6d:c4:a0:a7:
d4:e7:89:ae:5d:fe:16:76:5b:8c:c0:7d:69:92:49:
55:c1:a5:a2:4d:8c:ad:eb:b0:6b:de:24:18:27:ba:
55:71:ff:1c:7e:6b:bb:9b:2e:35:54:50:ed:ad:a2:
10:0d:2f:77:d7:45:1d:8d:0d:ab:0a:b6:b9:73:7a:
15:bb:6b:9a:55:a4:2c:91:51:4a:4d:df:7b:db:89:
02:b9:46:59:d6:2b:64:b8:b8:e8:73:e8:c5:13:0e:
9d:28:35:02:18:ee:6b:69:eb:8a:cd:2a:cf:a9:b9:
7c:44:df:4d:b9:f9:56:49:37:80:17:4d:b9:28:bb:
95:fe:00:0e:9b:25:22:64:ea:14:04:b5:7e:07:5e:
0d:f3:9b:1b:d5:54:09:65:8e:b4:03:df:6a:ab:ff:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7A:61:59:91:03:81:4C:B6:DD:68:E7:63:AE:43:49:DB:8B:38:41
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:91:6c:36:cb:b6:2d:6d:2b:bb:01:9a:09:9e:b3:3d:09:
a8:45:38:a9:a9:d7:29:d2:69:0e:e7:ef:5e:37:ff:a8:28:6b:
0c:da:4c:a7:16:2a:89:a6:1e:76:fa:46:04:a0:d1:3d:a0:11:
14:04:67:99:bd:3b:9b:5c:98:e4:2b:0f:4f:10:4b:aa:87:8d:
90:89:ac:47:a4:ee:69:9b:27:d9:db:15:9f:8b:8c:ca:f3:0c:
f6:94:a0:08:3d:16:52:b6:37:63:e2:9f:09:69:86:06:ef:61:
16:5d:03:10:96:58:96:ac:9a:59:7e:d6:39:32:b6:94:0d:b9:
e2:9e:89:4b:67:cc:64:e9:24:4d:b8:54:9d:75:d0:72:f7:90:
cd:cd:45:15:2e:34:18:e6:20:40:0a:af:5a:1a:f6:61:71:38:
0c:e7:76:1e:90:de:ed:14:0b:3f:7b:c8:61:5c:3a:51:a7:11:
a8:73:91:e2:c3:7e:12:43:dd:a1:07:78:b8:1f:58:cc:d0:67:
8a:da:0b:54:2e:8f:12:cb:d2:9d:fc:6d:ad:b3:12:f3:fc:2d:
71:52:a3:17:00:57:df:7a:c1:79:5d:b8:f3:e1:39:f5:dd:64:
4b:64:d2:46:5d:f9:f4:a2:79:3d:8c:73:68:ef:e0:fd:fb:7e:
d2:0b:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:13 2025 by rpki-client