Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: YQVE8BEdh26fIPdXxDwDZje851nkoXfBo2KLIDH6aTw=
Subject key identifier: BD:32:9C:EC:A6:A2:D1:F5:16:DC:65:D8:24:73:D0:DC:B0:8A:46:80
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 0194BD4E7E10D42DE421EA03DCB730047A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 0636
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: zM65BQ7fja+NGPdz2/ca2cfY7J1QlqFzkxQKUA0FAnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7e:10:d4:2d:e4:21:ea:03:dc:b7:30:04:7a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=bd329ceca6a2d1f516dc65d82473d0dcb08a4680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:bc:c7:72:9e:45:4c:38:21:07:ce:b6:b0:
4f:8f:36:91:41:20:66:67:f7:4e:f1:6d:1e:3e:d3:
c9:7c:24:ec:8b:8b:03:38:d9:a1:b7:c9:9c:3f:dd:
5a:7c:78:ed:3c:3c:70:b8:4a:a2:c7:aa:67:a9:68:
84:be:c8:28:79:81:86:bd:3f:1c:9e:77:6b:cf:56:
75:48:65:12:2e:fd:7c:52:c9:53:97:46:13:a1:cb:
7d:65:87:4d:82:f7:9f:b5:ef:44:7b:f4:7e:97:36:
48:e3:84:a9:7e:01:7e:57:5c:36:ff:ac:ba:c4:5e:
cb:e1:1a:e7:87:17:94:c6:ec:0c:e5:c4:b9:8c:4c:
54:76:9c:8d:c7:2d:5e:87:7e:8e:17:3c:41:ca:ab:
e8:62:d6:fb:a8:9a:b9:57:58:34:6d:9e:a4:1e:aa:
e9:38:5b:a7:2f:8e:0a:22:b3:ce:a3:f2:0e:55:26:
22:3d:80:84:ba:7a:df:ea:f6:ec:90:fb:16:e8:c4:
6d:44:5f:f1:b7:d9:25:a0:2b:2d:54:cf:ea:e5:3d:
7b:ec:31:97:61:5c:8a:6b:9a:4b:43:ff:4b:84:b4:
b8:d0:6f:b0:9b:2f:9c:88:2a:74:8d:32:f0:72:d5:
8e:c3:26:6b:78:48:22:7d:3c:d4:83:12:b5:42:2d:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:9C:EC:A6:A2:D1:F5:16:DC:65:D8:24:73:D0:DC:B0:8A:46:80
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:26:1d:ab:fd:4c:16:7f:a5:d8:f4:c2:bc:7e:71:8d:c3:3a:
13:34:28:66:fb:e6:0d:4f:5d:19:bc:f8:fb:e9:d1:15:63:1d:
5b:2e:59:7b:f3:c1:05:a2:a1:8e:45:4a:1c:64:9f:cd:4a:c4:
77:6c:4d:bf:c1:67:b5:0d:72:05:4b:c7:88:7e:a9:34:d4:14:
b0:00:c1:4c:c8:5d:09:8f:e9:83:03:90:37:c7:ac:15:90:f0:
dc:26:53:5d:d7:a4:92:f1:3f:e7:7f:91:8c:37:e8:3a:a9:46:
82:e4:22:b6:22:67:55:e6:6f:72:cd:b9:0e:3a:2c:38:ea:87:
42:fa:68:15:13:95:a7:7a:e4:1f:ff:96:d9:44:c9:26:24:2f:
b4:39:a5:b3:55:3f:09:79:66:8b:f9:71:40:40:ba:46:70:d7:
12:fe:ca:b9:77:ab:27:f6:d3:ef:fe:9b:d8:6b:86:fc:45:57:
03:b1:12:f2:f7:86:b2:ac:3d:e7:a0:41:ba:95:80:3a:f0:a7:
ce:88:97:ed:b4:31:37:0b:2a:08:4a:35:44:b8:47:ad:2a:8c:
aa:5b:68:cb:11:06:f7:90:c1:bc:59:2f:3b:b8:04:ae:04:b5:
81:2e:59:2c:3f:ad:be:58:b6:55:50:e1:e0:ca:5e:d9:bf:06:
11:5f:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client