Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: gpD1Yhk9AWw21T02laGl5P3HZmMKpNCohWMCpEatRW4=
Subject key identifier: 1F:F6:76:75:EC:61:7A:5E:39:4F:31:D4:36:03:72:A4:1C:4D:43:E7
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 0194BD85949435888F037392B23962897E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 0B4A
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: 9HeJWNm84O3UdED740paCXUWA1usRbGj0HQb7QxQqVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:94:35:88:8f:03:73:92:b2:39:62:89:7e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=1ff67675ec617a5e394f31d4360372a41c4d43e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:84:69:2f:46:a7:f1:47:56:f1:99:61:38:
65:01:9a:5f:57:d9:af:b9:6c:bf:0c:25:a1:2e:4f:
c3:d2:50:e2:cf:45:0b:a9:cb:70:58:cc:0a:75:66:
fc:4b:dd:9e:7a:a1:6b:d1:d7:d0:64:92:d0:d0:e0:
88:ef:f9:19:a3:b2:9a:f5:2b:5e:79:d7:d6:8d:b4:
5f:a3:13:ed:23:d9:78:97:45:4c:46:35:cf:a9:34:
72:07:37:56:db:ae:3a:f7:ad:0b:3d:3e:c1:c4:6f:
f0:ed:84:1c:2d:fa:3b:1d:08:a3:b3:cc:89:96:e3:
4f:96:6b:da:05:5a:27:78:6b:e3:08:68:37:a0:18:
30:84:f7:c7:77:d2:10:ff:0d:6e:d4:43:a7:78:fa:
bd:a5:b7:5e:ea:88:f7:f1:85:eb:fd:98:8f:51:3c:
66:22:39:1b:6d:04:89:eb:3b:6c:ad:5d:32:3c:8e:
cf:ef:43:5e:92:4a:5a:27:5a:6a:76:93:a9:9c:e3:
ff:e2:aa:69:39:56:5c:35:f3:69:a9:11:2d:84:37:
c7:1f:15:1a:2a:53:37:ee:2b:90:82:37:09:0a:68:
91:8d:de:5e:f4:d9:ee:1c:4b:ba:c7:97:e5:dd:45:
13:d1:89:88:18:ea:13:00:30:50:89:a2:dc:22:bd:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:76:75:EC:61:7A:5E:39:4F:31:D4:36:03:72:A4:1C:4D:43:E7
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:da:ed:c1:6b:71:db:05:36:57:2e:d6:ac:01:99:8c:2c:5f:
8e:36:51:60:7b:8f:77:81:98:ec:bb:ad:28:89:b9:4d:ec:e3:
f6:84:08:c6:98:e7:99:ce:97:46:86:b2:20:38:e0:8e:cb:81:
b4:c4:2f:fd:24:a1:f0:36:da:5c:ec:ee:b9:13:0d:f6:37:32:
6f:c8:b0:98:45:cc:b7:77:8d:95:e6:a0:34:72:6c:65:7d:f4:
64:20:4e:87:b7:8c:22:e5:73:f0:3b:d7:47:8c:a5:61:f9:83:
7e:47:36:75:43:ec:0e:65:dd:ee:fc:79:07:e6:d8:1c:31:c9:
32:63:d4:20:4a:35:83:29:22:41:b1:22:a9:89:8d:60:c2:07:
eb:47:bc:5b:47:73:4a:0a:40:33:7a:86:04:c4:ac:97:e7:71:
43:6b:28:9f:52:87:9d:9f:81:83:5c:b2:2d:c0:bb:b8:ee:53:
62:ed:4b:dd:94:dc:c4:6d:52:f8:84:0f:8b:a3:29:e0:8b:c7:
be:6a:94:35:63:71:1a:1c:f6:66:f3:ce:98:b7:6b:72:68:11:
96:46:cb:1f:76:d6:15:5f:2a:a7:dc:5a:07:87:25:8e:5c:d4:
b5:29:dd:21:c6:f9:75:d1:7b:c8:bb:98:1e:0b:0e:ad:14:8e:
17:f1:ee:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:15 2025 by rpki-client