Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier: 0JMhsSeFRaaDO6mb5KN9bJeISs26x0v113kNDNwrWEo=
Subject key identifier: 79:0F:4E:3E:29:B1:88:28:BE:0F:91:A8:89:B5:E4:C4:77:4F:69:B0
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial: 0194BD85789D1B41413FAF827E117D8977D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number: 0B8C
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (hash: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=)
2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: idEeQRLFa3xPDCZe+Yjj82I+B8tkjAnAB3c6JLBfLBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:9d:1b:41:41:3f:af:82:7e:11:7d:89:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=790f4e3e29b18828be0f91a889b5e4c4774f69b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:4c:60:46:f0:9d:a5:3b:1d:76:7d:99:ab:
ea:0a:4c:85:3e:b1:7f:a8:ed:57:63:b5:9f:8a:d6:
49:53:a4:d2:98:92:44:52:ea:89:7c:65:32:f6:2b:
d8:ca:da:5c:43:ac:b3:40:d2:cc:33:ba:53:72:28:
41:8f:df:01:43:9a:27:c3:7e:c9:bc:46:04:f7:23:
27:fe:4e:90:7a:90:de:d9:1a:ff:18:65:c9:54:47:
6d:39:27:7a:f1:46:66:d5:4a:49:48:08:92:4b:99:
b9:6c:7e:34:ad:78:99:49:bc:eb:42:13:48:85:4e:
b8:aa:bd:40:d9:8c:be:91:d0:0c:9a:af:78:f4:4a:
d8:c2:16:58:73:3a:a4:d3:8a:84:4c:11:f6:15:41:
72:c5:90:eb:a7:79:4c:0b:21:57:f5:d4:af:8a:f2:
de:24:fa:0f:e5:26:8d:13:80:18:81:4d:e5:45:01:
0f:dc:48:f2:cd:b1:a7:db:70:de:25:fb:76:07:65:
6d:c6:d6:d3:3f:fe:d5:02:7b:c0:00:ae:e5:34:12:
c9:4e:cb:85:33:6a:5b:45:08:f1:49:a7:f8:9d:95:
eb:b1:c3:31:e8:38:20:ff:ec:d6:ca:13:c7:10:14:
9d:29:91:f6:2c:55:7c:82:2b:54:75:ea:37:7b:70:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:4E:3E:29:B1:88:28:BE:0F:91:A8:89:B5:E4:C4:77:4F:69:B0
X509v3 Authority Key Identifier:
keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0f:63:74:1e:19:a0:27:6d:dc:e1:7f:1e:e1:00:40:21:44:
c2:ee:c8:a8:0f:df:c7:de:c3:10:a6:79:74:9e:2c:dc:06:f2:
df:90:8a:d9:73:67:1f:c9:c7:4e:54:8c:94:12:78:28:fb:b7:
92:10:84:a0:0d:7f:e5:bb:a3:84:34:4b:44:43:47:76:b7:9a:
93:d8:a8:cf:13:6c:7f:5c:1b:85:74:2a:38:97:b6:75:04:74:
80:98:7b:c6:87:c1:9a:8e:d7:ef:f2:34:7d:8c:46:01:67:a3:
ca:dd:dd:8a:f7:26:97:c7:43:be:c3:04:0c:66:e4:04:65:f0:
73:9d:d2:7f:66:28:f0:bd:4b:09:87:23:ee:f9:2b:05:52:52:
72:fe:f0:1c:6b:fa:51:2d:a6:7c:2a:fc:15:62:2d:58:0b:76:
c8:56:9d:0d:a2:ea:77:62:a1:ea:b5:70:0d:1a:b7:32:fa:fd:
5c:55:ba:19:be:67:97:be:be:f9:a6:e4:fe:02:ef:9e:7a:84:
49:4f:6c:59:c7:bb:82:7c:df:01:be:82:b0:6b:79:90:7d:7b:
b8:37:53:b4:ef:9b:22:3e:1d:c2:bd:03:0e:56:8b:51:7d:11:
1c:48:e9:a4:ec:3b:cb:11:42:f5:1e:b7:3a:8c:06:b4:df:fd:
5d:ba:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client