Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: l84iFL31bdE5+Swi371jjdjc8UAMWPTkOIKeLv039iQ=
Subject key identifier: E4:62:E1:9D:A2:44:6E:D9:CF:23:F7:0A:63:7A:B6:47:85:0F:7B:12
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0194BCA9AD5374399941C2711CE97BCB8B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0AA7
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: CFMfp/LFatqkKQxOlwXPl5U6SWEwY9lOrWzN8bFAw5U=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:53:74:39:99:41:c2:71:1c:e9:7b:cb:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=e462e19da2446ed9cf23f70a637ab647850f7b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:92:de:78:31:b9:c4:9b:d5:bb:e8:b1:3a:
02:42:36:a8:71:64:ef:60:1c:73:8f:f2:41:9b:52:
20:c9:c2:49:a2:04:49:f6:64:36:4e:48:da:88:a9:
87:dd:54:fb:bb:fa:41:4a:ad:a3:a6:71:c6:72:d1:
65:be:31:cb:c7:89:4f:1d:5f:ea:09:c9:ff:e9:78:
96:48:59:bd:d4:19:f5:5f:69:c4:9a:22:a4:47:05:
bf:fd:cd:8c:c1:5b:9e:b3:43:c9:7e:ed:f0:4f:50:
d1:77:9a:a6:e5:7b:17:f5:fb:57:7f:bb:c2:af:1e:
1d:70:48:2d:41:e3:f4:59:19:e9:a5:ce:b9:83:72:
61:5b:b8:99:93:74:e6:b6:e5:f4:f0:1d:fd:ba:9d:
65:4a:e5:af:80:2b:9e:9a:1d:2c:2b:9d:00:fa:6d:
ed:5c:af:f7:40:72:fa:2d:82:47:4e:34:ac:a4:73:
e1:1d:5b:ea:53:75:0a:4a:84:df:2b:91:6d:74:6e:
7f:48:50:c8:a7:0f:34:10:81:ed:e1:ed:38:7e:d6:
bd:b1:73:b6:d4:c3:75:87:03:34:30:22:6a:56:7c:
27:5d:f3:2d:c0:91:54:bd:99:2f:d6:45:67:3c:29:
1f:08:47:c3:15:d4:e3:f6:99:84:c5:39:1d:8d:3e:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:62:E1:9D:A2:44:6E:D9:CF:23:F7:0A:63:7A:B6:47:85:0F:7B:12
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:ea:37:64:95:b5:fb:8c:34:93:c4:2b:fc:b5:d1:b0:27:
e3:fa:ca:35:2d:6a:e3:b9:e6:8e:57:a0:19:21:99:cd:d2:bc:
37:63:85:b3:68:17:19:9b:f9:97:37:d0:52:4b:e8:90:59:a0:
05:09:2c:e5:56:72:9c:30:93:e9:d3:40:3e:c8:24:95:0f:37:
6c:3f:72:d5:a9:c7:93:97:f3:96:3c:c2:db:52:a4:cb:dd:5f:
f5:d9:cb:14:b8:72:64:b2:74:c5:94:08:f2:f3:29:77:05:69:
ef:b4:3e:98:d3:75:43:55:18:d1:4f:99:db:98:82:92:9a:f5:
cb:b7:7c:a9:7f:a6:8c:8f:14:ca:3b:33:15:d1:dd:85:d6:39:
2f:e4:fb:44:75:78:4e:e6:06:67:02:72:59:eb:2e:44:51:79:
00:a0:d2:d4:e7:bd:af:e3:94:0f:ff:5f:a3:f6:78:ab:05:67:
bb:30:a3:d9:b1:4e:ff:8e:36:4a:ea:73:9e:c2:74:92:71:ba:
ce:c7:34:2c:cf:f5:16:8b:a0:f9:20:e0:7f:51:da:46:c2:82:
a9:0d:6f:bb:87:01:e8:28:cc:22:67:fc:4a:cd:55:4d:43:e4:
c9:c4:22:62:6a:fc:d4:72:d6:d9:c5:c2:e8:02:47:93:f6:25:
24:41:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:07:13 2025 by rpki-client