Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: KjccCDUbXuMeSPMtSLUVE3OimLj8PkB2I9wfNqaALkg=
Subject key identifier: B0:FE:44:A8:61:9C:5E:8B:6E:53:9A:86:84:46:61:58:6B:55:35:0C
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0194BC04ADEA92A3DBE457F2F2CD116BC616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 07F3
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: sppFYulZPaNZTi82095Wocpe7oFnQGlST8TgbukBxLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:ea:92:a3:db:e4:57:f2:f2:cd:11:6b:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=b0fe44a8619c5e8b6e539a86844661586b55350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:3d:22:25:7d:10:fd:f3:ae:28:e7:f6:da:
bc:93:f4:a4:b6:03:07:ac:45:6a:52:80:21:49:e7:
36:17:2d:a6:59:ca:31:3b:c3:9a:0b:22:f8:24:68:
ba:d4:f7:d1:00:e1:0b:2f:19:23:15:fd:cb:e6:e3:
31:11:03:b2:26:04:76:46:c2:a7:c2:0c:44:0a:d6:
f1:a7:63:b5:cf:35:b2:b5:11:cc:9f:a6:27:f1:66:
9f:bb:17:75:df:ab:20:2b:b8:8c:09:35:e2:04:59:
18:0f:01:b3:b1:25:65:03:a9:81:48:d9:a1:fb:29:
8e:97:51:b0:03:7d:d1:b9:e0:37:b1:c5:71:20:1d:
c7:52:b5:2b:52:37:76:1e:50:0f:2c:6d:94:3e:ef:
bc:4e:af:ad:fa:7d:b5:ae:58:71:28:2f:ec:c9:be:
65:e3:9c:95:82:bd:17:1a:de:e8:f6:e3:ed:25:18:
22:81:f3:5b:6d:7b:e6:8b:71:7b:74:39:c9:dc:ba:
cd:ec:27:64:3b:85:58:0d:52:f2:9e:d2:29:77:14:
fe:6a:df:3b:c3:9f:fc:3e:13:54:d0:aa:3e:f5:c6:
93:9c:b0:2d:ac:9e:7f:1d:8c:ea:8b:8d:43:73:2b:
7d:f3:2e:f4:d4:87:34:7c:cd:8a:4a:56:24:3b:0e:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:44:A8:61:9C:5E:8B:6E:53:9A:86:84:46:61:58:6B:55:35:0C
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:f2:c6:a0:62:69:ec:34:31:b9:f5:1d:dc:bf:97:06:69:
0c:50:87:a7:89:d9:4e:82:3a:ff:6e:0b:4b:02:3a:30:3f:b5:
69:e6:fc:9b:c6:3e:e6:5d:ce:e5:45:36:38:05:12:57:a7:b5:
7d:76:ea:d4:7c:91:da:3c:e2:2b:bc:d7:3a:9c:cf:b6:d6:e7:
61:23:e3:db:ac:22:5f:34:15:6b:1d:50:4c:bb:c7:bb:81:66:
bc:87:0a:14:e6:a8:f8:87:3a:af:a8:c7:ca:0d:e9:1c:67:4e:
89:8f:d2:5e:16:f5:df:13:4b:f0:23:52:95:0e:79:3e:0e:af:
00:6f:d3:88:02:eb:ee:1f:4a:46:bf:d7:3a:52:e2:11:43:8c:
d8:26:0e:a0:a5:85:51:e4:c2:05:6e:6e:94:c4:5c:ea:de:95:
da:73:00:eb:b1:1d:fa:74:b5:09:47:bc:72:14:9a:39:a0:be:
a7:c7:0e:de:05:72:88:c2:fc:d0:2a:bc:29:7d:e6:4a:d8:e6:
d0:ca:90:ff:53:1b:dc:d6:db:bf:5f:12:36:ab:27:de:5b:0d:
b0:e7:7c:30:4a:46:85:71:db:da:89:d7:46:a1:cd:13:44:46:
80:21:64:8c:a1:50:89:7c:11:35:49:9c:39:77:7f:5e:c1:31:
71:f3:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:23 2025 by rpki-client