Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: KDrlaZbwS0FX19Sg+lj0NdDMzVBG0iOA66ryCmIZWKA=
Subject key identifier: 3E:04:2A:E8:E6:A6:F0:C2:75:B6:1B:36:7C:F1:C9:10:DC:97:B5:DA
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 0194BD858B1F32F7EF117A7566343D1E8DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: Tprmf29CA+B84ld2C9jiM9VxC+hiV4qKCufrGm/yzkM=)
2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:1f:32:f7:ef:11:7a:75:66:34:3d:1e:8d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=3e042ae8e6a6f0c275b61b367cf1c910dc97b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:e4:cc:7c:73:e3:a1:5e:a2:d2:ae:75:29:
01:5e:c9:da:f2:ea:f6:3d:ef:f3:9b:02:f9:00:ee:
41:d3:5b:7e:6f:71:be:35:40:84:5c:15:17:6a:05:
a0:f4:59:e1:cc:c4:dc:c1:6f:7c:65:5a:1b:82:31:
33:78:95:6e:b4:39:12:24:6c:55:34:80:0d:bf:10:
4c:c6:1f:73:96:e2:0d:f9:c1:16:14:51:f9:db:90:
dc:23:a8:bf:03:0f:44:f4:4f:61:ff:d0:2e:4b:82:
14:93:09:2b:62:d4:31:3e:85:c6:ef:36:55:7f:a5:
ba:13:c3:3f:c5:a1:21:d2:94:37:1e:86:f0:49:35:
8a:0f:b3:28:88:c1:b5:fd:37:52:b5:63:94:d3:e6:
72:52:5f:75:96:12:42:d1:c8:50:1c:2c:af:de:94:
06:fb:fe:6d:de:17:05:a8:e2:12:bd:c6:ea:e2:93:
07:93:ae:64:71:0a:9f:a8:04:c5:df:27:0b:18:b4:
7e:ca:b2:6b:be:98:e4:0d:96:fa:b6:24:3e:a5:fb:
1e:84:b8:b0:e1:df:bd:31:eb:13:bf:6b:ca:61:de:
59:68:90:80:d8:78:23:4a:14:2e:bb:8e:3a:18:3f:
1f:44:d2:83:18:5b:67:54:4c:4d:3c:f0:59:91:ce:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:2A:E8:E6:A6:F0:C2:75:B6:1B:36:7C:F1:C9:10:DC:97:B5:DA
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:91:18:96:37:a8:f6:07:42:0e:4a:95:b7:bc:81:1b:a6:
e1:50:ad:09:78:76:3f:50:fe:10:33:21:72:8f:90:54:da:e4:
e8:76:81:0a:06:f3:a9:4a:7f:1f:7a:8e:78:23:7a:be:99:24:
19:98:28:18:28:74:f6:37:fb:2e:31:7f:ef:d7:41:90:c6:9c:
df:4f:ac:91:7e:d4:20:26:0e:dc:1e:84:8e:37:9c:6c:d7:9e:
5d:e5:35:4c:ee:8b:27:f3:fc:2f:64:fc:80:dd:eb:e2:d0:d5:
89:16:66:f8:07:32:fc:45:11:f1:21:5e:94:94:b1:c2:d4:ef:
b2:a9:27:34:46:ff:56:9c:75:b7:31:cf:97:c8:f6:2c:80:fd:
84:55:9d:6f:fa:e0:2a:65:6f:38:ff:ba:95:79:0b:86:d5:ac:
9c:99:b8:91:3f:34:26:95:6d:78:f6:ee:d0:c3:fd:25:71:ab:
f7:5f:17:c6:1e:a6:b2:aa:85:8d:dc:e3:c9:f2:1b:40:8c:05:
21:60:62:4a:c4:03:c9:20:34:99:3d:3d:0f:29:6a:3f:eb:81:
9b:42:10:ac:94:b3:d7:2b:3a:32:1a:07:73:52:d2:f1:08:41:
66:b6:7a:7d:c9:17:49:64:52:71:eb:c7:9a:90:f8:f6:87:b2:
fd:fd:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:27 2025 by rpki-client