Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: uTkrm0BOm1EIW8ddkLjRo/1etYqOgZ9DBG751X9W1T4=
Subject key identifier: 5C:80:E6:6C:A0:35:23:6A:F5:E4:C3:B2:38:C1:1B:BE:97:7D:68:DD
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0194BC04B9F82E477560BA2A287FBD343CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0C9F
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: 1al1CeYhGX5pFdv3iN7KhUHMPha4i/UqRRJmrho/7+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:f8:2e:47:75:60:ba:2a:28:7f:bd:34:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=5c80e66ca035236af5e4c3b238c11bbe977d68dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:f7:17:68:bb:20:fb:d4:2d:1b:36:14:36:
86:29:da:72:37:87:f7:8c:01:30:88:23:a4:c8:52:
53:60:2c:4c:12:ac:3b:51:08:89:43:3e:64:73:0f:
2b:b5:40:ba:a4:c8:ec:da:41:ec:d3:fc:67:92:d3:
9b:37:60:bc:81:22:04:7e:a2:31:18:bd:84:35:65:
33:45:da:a0:f0:f5:2f:6a:ad:32:99:5a:ea:06:73:
a2:f7:d6:e1:33:2c:5c:b7:9b:70:a1:32:61:87:0f:
84:25:4a:98:5b:f3:7a:f5:d0:a0:56:e5:30:50:2a:
d1:a0:1c:57:d4:22:f8:95:33:cd:db:28:cf:20:b7:
73:6c:b3:09:86:b0:e8:69:b5:da:f7:6b:ba:be:74:
ae:b3:7e:c0:fa:ca:e2:17:fe:5c:6c:d2:58:53:61:
56:00:01:41:e7:f6:62:a8:bb:2e:ae:52:45:a9:32:
6b:df:b5:85:3b:12:09:e7:91:18:2d:d2:dc:b1:ef:
01:ad:c3:a6:6a:54:d8:cf:50:09:01:b3:52:97:3d:
00:79:b3:99:f6:69:83:a9:14:47:54:65:c0:4e:ba:
de:b2:e7:f9:80:0c:41:69:06:06:39:c4:3f:69:c2:
69:1c:76:0c:2a:0b:9a:57:09:4d:99:02:22:9f:85:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:E6:6C:A0:35:23:6A:F5:E4:C3:B2:38:C1:1B:BE:97:7D:68:DD
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:42:5e:13:b3:57:91:8e:bd:ea:69:09:f6:ff:28:3f:4c:94:
51:48:3b:9e:71:0e:5c:73:87:17:f6:03:50:0e:2d:cb:11:53:
84:16:b7:04:91:d7:c5:3a:91:23:f7:1a:43:e3:45:ce:41:9f:
aa:4c:77:8a:0a:f2:b9:1a:d9:e0:4a:b1:8b:ae:bb:6c:8d:db:
b3:7f:2d:79:15:d2:fb:04:2c:81:c3:46:b5:18:b7:64:73:79:
86:88:a1:05:43:92:e1:87:93:6b:54:c2:ab:7f:7f:c5:a5:c9:
68:f7:e0:1e:23:a2:97:43:8d:c7:16:26:3a:d4:83:17:a4:c2:
50:3a:cb:b8:c3:09:6e:bc:be:f5:68:dc:ff:d3:6e:59:c6:f1:
f0:b3:16:40:2c:c0:a0:6b:a0:73:8f:7b:01:6b:c4:49:44:7c:
ad:71:bc:e1:d7:87:96:db:f1:2d:d7:01:05:6b:a1:53:30:b6:
42:65:87:30:f7:a3:9b:5b:af:da:3e:76:f9:d9:b6:27:be:5f:
78:bb:ec:ea:9c:fe:dd:1d:f9:69:c5:38:30:be:f1:fb:a9:24:
74:2f:b5:ef:c2:49:d2:71:05:dc:46:70:5a:3f:77:8c:2d:25:
21:19:77:31:b2:ce:e6:f4:86:fb:9c:8f:b9:50:e8:be:12:32:
49:26:e9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:49 2025 by rpki-client