Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: 3j9HrRck1ZwCCxBGQt0SXGAQdFbCOqWEI7vNHloucJE=
Subject key identifier: FE:8D:2A:6B:FE:64:EF:69:69:1C:8C:76:2F:F2:AA:EC:38:F7:8D:04
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0194BCE0E6314FF8E500BF7EA0CC9880AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: A-cNKJbI824skO47BgdvmDTrgvU.roa (hash: tIAjk+TRnpd5uqz04V7fJbtQ91h75HDVReF0OaqE8AQ=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: kPz4HBHnwnkhNJQbtKURJv2+Rv5G1lQtYXuEvwBeHYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e6:31:4f:f8:e5:00:bf:7e:a0:cc:98:80:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=fe8d2a6bfe64ef69691c8c762ff2aaec38f78d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:ae:cc:03:ca:c5:82:ea:53:37:41:bc:07:
7c:c8:d2:cf:2d:e4:67:9e:61:89:b4:bd:94:1b:2e:
a4:83:b5:22:1f:2a:47:35:ff:c1:59:70:d0:dc:23:
4c:61:d8:7f:a1:04:f8:c2:b3:86:84:98:28:95:de:
14:bd:0d:cd:78:95:6c:1d:74:83:5c:fe:bb:99:26:
f1:35:df:32:4d:b5:c9:65:3c:99:02:71:52:61:b7:
68:62:44:31:a4:72:8c:a5:2d:cb:29:76:a9:08:06:
27:c2:dc:cf:fc:11:c4:e1:07:8b:cb:f8:f1:87:c1:
74:cb:b9:eb:64:c9:fd:1c:18:df:1c:ca:a0:ee:43:
9a:b1:e6:32:b3:dc:9d:c3:ea:3f:cb:26:70:5d:7e:
c9:1e:df:b4:07:19:27:23:36:74:82:a9:71:ce:38:
a8:5f:49:b9:ff:bd:1b:78:58:11:3b:ad:24:00:38:
83:08:a6:85:81:77:0f:f6:7a:72:86:f0:65:ef:e6:
49:3d:b0:6e:1a:1c:6d:c8:98:91:ec:ea:47:ce:c6:
73:ac:76:6d:8c:71:30:15:9b:8b:23:78:19:a5:72:
c7:31:56:d8:f2:3b:65:4d:ce:f9:d9:76:00:c8:47:
4a:01:29:36:c2:62:34:81:1b:6f:4d:b8:a5:2d:a4:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:2A:6B:FE:64:EF:69:69:1C:8C:76:2F:F2:AA:EC:38:F7:8D:04
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f4:84:67:15:6d:7e:2b:f1:e2:54:e1:a6:2b:f7:09:50:2b:
60:20:7a:87:ce:a2:6f:46:28:29:22:aa:d9:3c:fb:5c:70:d5:
ca:22:7a:d5:22:58:3c:e5:28:c4:aa:a2:7c:9a:cf:ad:96:35:
89:2e:25:9a:57:01:27:f9:af:4d:68:92:10:ab:38:47:a5:29:
39:c1:02:95:81:78:b0:0b:74:4c:b1:92:96:af:72:90:41:5d:
22:02:53:5f:81:8d:81:ce:89:73:b5:31:f8:1c:8d:9d:fa:f4:
98:fe:db:74:70:90:33:e7:77:8e:c4:9a:b4:78:4f:aa:d0:da:
95:0c:31:5f:d1:b3:20:73:a9:10:43:57:1f:e5:8d:65:74:48:
b0:27:d2:5c:1e:48:d4:d3:b5:8f:c3:ea:8c:e2:07:ea:59:9c:
87:59:e1:90:95:9f:ce:1b:a9:79:ad:c2:bc:14:ea:64:1a:9f:
37:98:f6:b2:c5:c7:2b:87:2e:8c:d6:ca:2e:eb:78:ee:6f:a9:
6d:d9:48:c2:b8:ee:62:41:2c:10:f3:e0:90:00:23:3f:54:0d:
54:be:80:80:11:f9:70:b5:2e:9d:50:f8:d4:71:a8:99:5b:e6:
7f:a1:e8:cb:b8:58:8e:e9:4f:8e:97:85:aa:a1:f1:4a:e1:b4:
e5:71:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client