Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: 9LiTCdxlzVGmP0fPBtM6bka72Y8r3LlCPjbER5N/eVU=
Subject key identifier: 21:7F:85:71:81:E5:3F:08:02:77:F6:5D:0B:6A:B4:7F:18:EE:E0:E2
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 0194BBCDC5532A4DF2C37CAFA5541ABD27D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
2: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: XdKC5g9sFMpNPI2+qdPrTEJdnKfpk1dhsj1U9BwVnF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c5:53:2a:4d:f2:c3:7c:af:a5:54:1a:bd:27:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=217f857181e53f080277f65d0b6ab47f18eee0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:bc:65:5b:a7:ea:84:69:e4:dd:44:b8:11:
f6:24:e8:b0:84:cd:57:1e:6a:0a:14:13:f6:75:03:
51:37:ce:03:8e:d3:3c:d8:72:ac:d2:e6:3a:4a:b7:
52:7f:e7:ff:ca:01:92:6c:f1:2c:d4:8a:ef:e0:31:
dd:f6:58:90:17:82:22:1e:38:17:ef:06:52:3f:5b:
fb:74:54:e3:c1:27:d5:28:da:e8:50:74:4c:df:b5:
85:37:55:a7:78:18:81:8d:5c:4f:32:75:d2:5f:22:
cb:f6:a8:35:86:af:df:13:4b:8e:25:3f:3c:1a:81:
89:18:3a:b9:e1:9d:31:76:c3:81:c8:c8:ef:74:58:
71:cc:7f:0d:c0:72:e0:c8:80:ce:3c:fb:ec:86:28:
e0:52:b1:e6:4e:26:23:06:ec:3d:9e:c7:59:8e:39:
bb:69:23:85:24:0c:dd:0c:03:50:e6:43:5e:79:37:
a2:56:92:5d:87:aa:0a:1a:b9:8a:5b:b5:f7:44:82:
2a:68:43:db:d6:f5:a3:34:8c:6d:a6:82:0e:e0:c0:
f4:9b:2a:2b:28:31:32:9d:01:93:1f:3f:89:d6:b7:
41:d0:3b:23:b6:20:01:10:7b:9e:78:fb:11:a4:1e:
34:eb:1c:ed:26:bd:84:58:83:6a:41:a6:98:b7:48:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:85:71:81:E5:3F:08:02:77:F6:5D:0B:6A:B4:7F:18:EE:E0:E2
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:09:e6:61:98:e2:c2:f3:81:60:c5:03:1c:22:1b:23:7b:09:
e0:ad:c5:6f:92:04:f6:de:a7:33:36:35:b3:7c:65:26:93:cd:
1c:bf:69:d8:8d:2a:c8:bb:04:57:29:99:33:36:35:73:17:52:
29:87:ff:3b:d1:a6:1e:aa:c8:ff:bd:e2:1a:ee:58:de:0e:f8:
eb:2c:2d:34:35:94:be:12:ae:bf:13:9a:0b:0e:56:fe:69:59:
3e:72:19:5b:16:98:05:7c:cb:26:38:87:1e:11:54:44:8d:bd:
a9:88:be:43:4b:c9:22:fe:cb:9a:c2:d7:2f:f3:8f:78:75:e5:
f0:a6:78:8c:0c:87:a8:fa:4d:86:f3:7c:11:55:5d:e5:05:71:
8a:b6:3e:06:45:3c:fa:79:f4:e5:b8:08:b5:59:1e:bb:65:4b:
d6:3e:66:ee:ac:45:f1:bb:ae:a6:da:a9:45:3d:b5:69:97:cf:
d7:fa:ea:ee:16:51:b6:e4:af:d6:49:11:92:b5:9e:5c:90:0a:
9f:12:c2:4e:e3:e9:5d:7e:1e:d2:cb:99:74:ff:eb:1f:3a:23:
f8:fc:21:1b:2e:c0:c8:33:9d:de:13:2f:ab:d4:56:25:3f:90:
e9:64:3c:d1:aa:c6:85:79:a1:b7:71:c8:f8:aa:2b:fc:1d:e5:
f2:d0:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:53 2025 by rpki-client