Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: 2+1eOrBoM5G72SQg+S2meIIXFQ+OMczoZjjEMw3FsIQ=
Subject key identifier: DE:27:F2:1E:42:45:64:79:0B:DB:77:BF:AF:EC:4E:4A:CD:7F:3A:37
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 0194BD4E82AEBBFC5328B76FFDF679CD2E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: X51wjLxgMQ4Gi9EcdPDemyogmSbuSDOJd/cYVnCglFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:82:ae:bb:fc:53:28:b7:6f:fd:f6:79:cd:2e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=de27f21e424564790bdb77bfafec4e4acd7f3a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:4c:01:04:12:af:72:42:ca:cc:d7:9b:9c:
01:bf:a4:8c:96:17:59:24:71:b6:4b:6d:f7:cb:e8:
cd:22:3d:b4:9b:fa:ea:07:5c:d9:88:60:4b:13:d9:
d2:d3:26:c2:4f:7e:e2:c3:26:89:34:58:ed:0e:0a:
60:50:5e:b7:df:a1:3d:2a:1f:da:13:98:4f:64:5c:
95:76:4e:38:2c:47:f3:95:c6:a8:39:5f:6a:43:b5:
f6:43:2e:7d:5e:3e:76:d6:69:68:80:01:f5:9d:85:
4c:93:ae:54:5b:46:97:b5:6e:41:df:c3:56:72:0f:
4a:c1:b9:8f:d3:3d:5a:6b:47:38:36:44:25:ae:a6:
0b:10:f0:83:e2:da:eb:d9:28:7d:f2:af:8e:8b:00:
3b:39:da:9e:74:91:90:e5:f6:1c:a9:da:6a:82:dc:
59:4a:58:44:0b:c3:79:f1:ff:9b:66:12:97:0d:ff:
17:ed:f8:7d:67:82:fd:c6:ca:62:bb:bd:57:02:57:
49:5f:4a:5d:8a:68:6d:79:ca:c0:94:4f:f9:c9:1a:
d3:c2:61:d0:a7:b0:2e:8f:20:94:75:35:1e:42:bb:
80:3c:e6:70:35:36:86:5c:0a:d9:78:b3:b8:87:71:
19:f8:a6:c2:81:30:16:ea:e2:74:e1:a1:e6:2c:61:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:F2:1E:42:45:64:79:0B:DB:77:BF:AF:EC:4E:4A:CD:7F:3A:37
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b1:99:7a:37:13:c9:db:68:7a:81:62:78:f5:41:30:79:a5:
4e:0c:8e:42:41:de:ce:d0:55:56:3d:7a:15:13:5d:13:0a:5e:
a0:6d:23:f2:ad:dd:75:ad:05:73:1d:8f:39:15:c8:de:29:26:
0f:de:8f:db:d1:b1:1a:e4:95:f3:92:74:57:9d:69:38:f6:2c:
37:9e:a3:d2:17:13:bf:bc:cd:be:da:0d:f3:1c:29:da:2c:d6:
57:b2:33:fd:bd:db:d6:87:a8:4f:f5:7e:3e:f5:48:68:61:59:
da:7f:c3:49:7a:8a:9d:08:42:6e:43:4e:e7:4d:f1:d2:62:85:
90:2b:ef:89:1c:ba:5e:d5:28:7b:3b:12:e0:fe:d8:6e:16:ad:
7c:d8:79:5d:c9:2a:6d:d8:e6:e9:40:4d:c5:16:0d:09:d7:d3:
ed:15:5b:4d:8f:a8:c6:4d:27:b0:31:aa:43:ac:66:8a:c3:d8:
61:72:6b:b5:5f:a4:ad:7c:e9:91:60:b2:64:a8:72:78:68:04:
c9:26:e5:08:7b:04:1d:16:61:3c:4f:3c:7d:02:06:15:f8:a5:
50:b1:47:68:b8:4b:0d:12:ce:f1:7f:e5:2e:e7:69:92:67:bb:
d9:00:67:fb:89:26:ef:71:28:06:20:cd:98:0f:82:a3:12:38:
3c:9a:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:53 2025 by rpki-client