Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: Lt95EgggmnUVRSuWG4Nu527bEvUACQEf56odq901b50=
Subject key identifier: BA:88:70:86:36:82:F4:F5:2C:20:10:6F:2F:D5:53:5B:52:54:E0:AB
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 0194BC3C484F6449E64D191F01CD525173F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: +czIw6zhe7rOJic6mk3CJB0q0ZReYbV59ciZan8lqYI=)
2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:4f:64:49:e6:4d:19:1f:01:cd:52:51:73:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=ba8870863682f4f52c20106f2fd5535b5254e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b7:28:df:5a:f2:a9:8d:c7:f0:3f:86:f4:09:
5c:cc:1f:66:da:54:dc:f0:71:bf:ae:0b:5e:07:b3:
96:c2:0e:1d:4e:cb:cf:26:d8:21:51:81:9c:dc:b7:
92:c6:e1:6f:43:06:4b:91:3b:4e:af:59:6b:7a:d6:
6b:38:c4:55:b3:14:2b:b9:c0:66:23:61:b9:1c:75:
5b:3d:7e:f1:49:2d:06:7a:6b:c5:10:12:e3:1f:5f:
9b:ba:bb:d9:31:07:79:1e:47:94:38:bd:49:ce:9b:
99:82:0c:82:9a:3a:e7:be:22:23:0d:89:6c:58:91:
87:68:50:b5:5b:f2:96:6d:07:86:c7:7c:90:b8:26:
0e:9b:10:b9:fa:32:ba:1f:3a:74:23:e3:fe:3b:84:
4d:f4:7c:38:fb:78:dd:44:fb:7d:58:fa:45:f2:ff:
86:52:f1:55:65:c4:f0:61:a6:bc:a1:8e:81:42:b1:
41:7f:6e:0d:da:01:05:90:fd:05:f3:60:e6:36:29:
2d:e5:8c:ec:73:81:e9:2c:d3:06:d3:f3:40:24:9e:
e4:05:93:bf:63:ed:36:ef:ac:43:2d:4c:3d:ae:e8:
70:04:86:5d:f6:e5:2c:ac:87:b9:b0:cb:7c:2c:75:
5b:f1:b2:82:a5:b4:bd:f2:53:3a:d0:aa:c5:12:0a:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:70:86:36:82:F4:F5:2C:20:10:6F:2F:D5:53:5B:52:54:E0:AB
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:25:ac:ba:aa:ed:a7:48:d8:51:13:bf:7c:c5:e4:08:d3:15:
3b:9f:48:84:e1:10:e6:78:e4:6c:ee:8c:31:cf:a0:5f:92:42:
43:17:64:cb:87:58:a2:5c:a7:c6:3f:e3:0e:c5:b6:42:af:4a:
47:4b:47:05:6b:3c:b6:de:40:1b:9d:21:e4:7f:c1:5b:34:df:
80:15:23:67:b2:2f:06:9e:02:e8:b2:d3:cc:ac:76:a1:7e:83:
cb:0f:9e:68:9b:f9:af:50:0c:5a:78:ea:f3:71:e8:cc:f8:10:
51:db:49:0d:7d:b3:05:53:62:b6:27:54:45:5b:be:8f:cc:16:
a6:15:c2:22:e0:2f:05:f9:35:60:b9:76:f6:61:50:ba:32:c1:
ab:4c:2b:8e:71:af:f0:db:d4:0f:0e:7d:d2:ad:81:b6:9b:c3:
e0:11:b1:ec:ad:36:8e:1a:db:a6:fb:1b:9a:bb:b0:c6:3f:89:
7f:4e:44:1b:07:b3:c0:6f:6c:91:50:fc:1b:1c:db:13:da:a2:
29:b8:fd:79:51:6d:83:d2:e2:ee:50:dc:56:13:06:63:d5:14:
bb:41:ab:07:b3:3c:d9:2b:03:52:ba:c0:47:59:e5:19:b2:07:
04:3f:87:84:f8:4e:01:52:83:fd:19:2f:10:d7:45:cd:58:2c:
97:06:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client