Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: 2ndVsJPpouRl1BipOOXPOkNTgD0uTPoY8iZuUoQlQK0=
Subject key identifier: 8B:12:1E:C3:3B:97:17:08:C7:89:0F:24:06:A4:49:2D:96:36:4E:26
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 0194BC050D2E2772556135ABCD478B8AC741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: wLVl8a9AUyCWZV5L8a/lWswNccdGa5StwhQsyrf3T1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0d:2e:27:72:55:61:35:ab:cd:47:8b:8a:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=8b121ec33b971708c7890f2406a4492d96364e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:e4:c2:da:12:05:5d:63:e7:5b:27:08:1e:
30:3a:f6:5f:e4:1d:29:bf:fe:66:86:7d:54:d5:a3:
6a:9d:f3:74:a8:89:80:7d:5e:72:43:9f:47:d0:a4:
e3:85:42:47:08:93:39:96:e1:84:bb:79:7a:b3:79:
f5:9c:74:3a:e0:11:81:76:5c:5d:02:ee:95:f5:48:
13:ca:1b:f8:c1:32:b7:69:27:ff:7e:ed:9e:4e:88:
f2:eb:35:e7:c1:a5:f0:96:2f:2f:96:38:f1:18:4a:
f0:3b:8e:b0:a2:b2:da:3d:74:9a:ea:fe:80:d3:5c:
31:fd:78:94:50:48:76:cc:f8:b6:56:3d:c4:fd:5c:
cc:69:d6:13:42:87:0b:e5:ea:6e:05:92:6e:cb:5e:
b0:b7:cf:7b:af:a5:86:3b:e4:6b:89:7f:c6:fd:92:
16:37:9a:d3:85:98:fe:8a:fe:75:d9:d9:5f:be:23:
a7:89:a1:d3:f3:9d:d2:5f:e1:a5:be:ee:54:0a:e6:
8d:63:7b:c5:34:fd:20:d6:2a:3e:18:16:d6:97:fa:
ba:9c:32:d7:20:eb:78:30:5f:eb:f8:ae:ad:53:81:
50:e3:70:1d:83:1f:71:65:a9:15:e5:78:64:bd:81:
76:0c:94:4b:d2:06:70:a6:b0:7c:a9:b4:32:c1:63:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:12:1E:C3:3B:97:17:08:C7:89:0F:24:06:A4:49:2D:96:36:4E:26
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:12:72:b3:93:92:8d:a5:18:c6:12:ec:88:fe:6c:24:db:
ed:c1:50:68:5e:1b:0f:7c:91:d7:88:02:64:e0:58:ba:83:b6:
65:92:7e:74:b5:b9:85:fc:fe:b7:13:1d:4e:2b:21:51:d1:6d:
33:8c:be:b9:63:e5:b7:c7:20:3d:a0:10:c2:8e:be:43:8c:b6:
19:fa:2b:67:9a:8e:54:8f:dc:1d:fb:63:b1:c2:13:7c:be:5a:
cb:76:9e:91:7e:d3:c6:e2:e5:36:ac:5b:0e:e9:dd:95:d6:0f:
04:74:fa:61:3e:e5:98:b7:8a:16:0f:f1:38:93:4a:e1:45:d1:
0c:a5:61:14:93:68:69:8d:57:5e:9b:10:a0:e3:dd:fe:fb:fc:
b0:ce:b0:31:66:16:81:f5:c3:3f:ab:c6:9b:2b:ce:59:cc:f2:
e7:41:7d:67:b7:d9:da:8f:d9:5e:9b:1e:25:9e:87:98:b8:4d:
84:e8:21:a4:98:55:54:8e:0d:a8:16:f8:e9:5e:31:16:56:a0:
a2:d4:85:9b:cd:af:c7:df:c6:8c:07:ad:d8:98:ea:18:d9:fb:
3c:e9:f1:ef:ab:0f:fd:e4:f4:38:52:d4:b9:2f:f9:f3:62:7c:
d1:d5:ab:3e:05:00:25:15:3d:1c:35:55:3c:87:be:4d:03:b7:
f6:78:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:59 2025 by rpki-client