Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: Wa/S1d909CtIyrXrf8UUeo31mUKcOohZG3u/IEsARo4=
Subject key identifier: BF:5F:56:C3:55:68:42:0A:F5:22:29:5E:91:4B:51:2F:5F:33:F7:23
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 0194BD8592AC386E9E9090C2E8FF64BB509D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 08CC
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: HEbsrA71pzjmg2m9tAn6z68Oja5a8+6G6DLBpmm+wqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:92:ac:38:6e:9e:90:90:c2:e8:ff:64:bb:50:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=bf5f56c35568420af522295e914b512f5f33f723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:36:ec:80:79:84:15:1e:54:cf:04:9c:c3:
d0:ea:03:79:d8:8b:dc:25:78:bd:9c:75:78:5b:6b:
79:8b:2d:c8:eb:28:0c:b2:f6:11:91:15:b9:16:57:
69:35:31:83:7c:67:5e:47:d0:61:80:a9:4a:69:4a:
47:a8:f3:54:14:b0:35:98:dd:12:b0:ba:59:09:d9:
c4:7b:d7:4b:08:11:83:ec:e3:2b:20:e9:4e:05:f7:
76:10:1d:53:31:51:2c:a0:9c:a1:b9:22:cd:64:75:
7d:8a:74:22:3d:f4:c0:16:fc:45:5e:62:ce:6e:c8:
46:c5:39:33:00:65:8f:62:e8:ae:c1:14:18:a6:e2:
d8:2f:f2:d9:af:62:d0:94:a2:44:9e:31:2e:7b:a5:
44:18:6c:be:be:0d:11:63:94:37:55:b5:12:e7:98:
a8:76:2e:3a:37:82:1c:fd:ad:4f:90:17:f6:da:62:
1b:af:5f:ab:18:bb:bb:cf:91:22:86:e6:3b:9b:43:
37:b8:f3:51:b4:b0:d7:63:20:47:a4:5d:5b:ca:54:
19:2b:75:c9:57:07:2a:ef:5e:bc:04:b2:9c:be:64:
3c:9c:ff:fe:9b:c2:3e:05:34:69:c7:39:a4:60:ae:
34:38:b8:fd:41:f7:41:28:4d:d6:c1:0b:4a:dd:be:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5F:56:C3:55:68:42:0A:F5:22:29:5E:91:4B:51:2F:5F:33:F7:23
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:cf:66:f3:47:b4:11:22:9e:27:b6:ad:c1:f5:f5:76:fe:
3d:b7:c7:06:1a:9a:c4:f6:44:ef:11:26:b4:7b:f8:67:12:19:
a4:d1:86:8f:9b:5e:19:a1:fb:31:36:a6:a8:d0:0d:ba:57:7c:
5e:78:b2:02:30:cd:1c:4e:38:4a:d4:6a:94:a9:2e:ad:32:24:
25:69:74:3b:da:e6:2b:eb:a4:2d:6f:29:31:1d:8e:22:64:9a:
9d:91:33:50:c3:60:a5:a7:86:d5:bd:50:2b:da:25:01:72:31:
89:25:fb:c9:d3:e3:78:af:a3:3b:e3:92:fb:78:1b:92:ca:21:
37:44:71:84:41:16:15:60:0b:21:30:38:f6:75:0f:cd:50:06:
36:99:ba:46:11:7c:8e:6b:1b:3a:ed:24:69:01:f3:87:28:11:
e5:11:fd:42:52:70:39:ee:e9:51:35:66:4d:87:24:25:e4:48:
a0:cb:1f:7e:91:4b:69:8e:4b:80:26:ba:8f:d9:d2:bf:66:16:
b6:e5:d1:05:12:80:01:a5:11:9b:f3:ac:63:bd:f2:f5:46:73:
0d:0c:d0:31:37:b6:72:fe:c0:da:f9:63:06:05:16:ef:6a:a7:
0f:63:af:d1:4f:f5:89:54:d6:80:ff:9e:d6:95:d4:82:cb:01:
02:ba:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:29 2025 by rpki-client