Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier: T062zBPpGuZpFLmdlIB4w27AwkppzJ5jIiogut3mbj8=
Subject key identifier: 91:2E:34:8E:89:75:84:AF:23:3F:FF:EA:99:DB:D5:EA:75:FD:A5:1D
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial: 0194BCA9F56FE5CAEF3B83C3B2DA717982D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: qOLNGNRyGrNXwDtUb1Nnss6ejZA.roa (hash: QTajoDC346WYrSbnlkADnzaxaVDnFT9Xm/bmwQZTFeI=)
2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: Y606WkkttAw+es4g6Z6zXbVpvzWbgFyQtJJiUyYv+SM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:6f:e5:ca:ef:3b:83:c3:b2:da:71:79:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=912e348e897584af233fffea99dbd5ea75fda51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:c5:2c:db:c2:34:5b:0c:50:90:cf:1c:69:
8a:21:cd:b6:6b:b4:ed:a4:2c:96:d3:c8:c6:8a:10:
91:5a:53:70:a5:91:8a:bd:e5:53:b0:e5:c4:99:4b:
b1:32:66:10:c5:8b:c2:49:74:e4:45:cf:f5:c2:11:
2b:6d:82:1c:57:ec:24:b1:00:9d:82:6e:67:a5:d2:
d8:52:5f:22:d6:5f:12:02:c8:b6:8b:26:15:e6:b3:
19:82:b3:4b:d8:4c:25:fa:88:e9:8f:ec:34:db:35:
9a:61:4d:bd:56:5b:f6:bd:f4:47:bd:2c:81:00:b1:
a2:95:67:c8:11:84:c0:cf:80:bb:46:d0:52:12:5e:
10:77:58:79:09:30:77:85:49:36:21:9a:1a:2f:37:
41:5d:67:e4:19:83:ac:6b:75:4c:94:bf:aa:79:62:
45:05:95:f3:54:97:45:9e:f7:73:8a:9e:a1:12:23:
61:e0:62:c5:d7:57:7e:d1:18:46:50:1c:eb:7e:8f:
87:8b:ee:9d:1f:53:63:8d:4a:ea:dd:84:3b:77:0f:
b7:cd:41:21:97:3a:6f:6a:bc:d5:52:ae:fd:29:79:
5c:2b:9d:b2:60:a4:c7:1c:8a:47:d7:ec:8e:78:bb:
26:1e:b4:f3:08:2c:84:1f:74:38:19:cc:c8:99:0b:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:34:8E:89:75:84:AF:23:3F:FF:EA:99:DB:D5:EA:75:FD:A5:1D
X509v3 Authority Key Identifier:
keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:ee:19:1d:01:09:00:0d:27:df:d7:81:6b:a0:08:9f:f4:
e9:8e:d6:ae:b7:37:99:b6:37:3e:b2:55:76:5e:86:2a:69:c6:
54:15:35:a8:08:65:15:08:72:32:d6:f3:ff:3d:5d:44:c4:77:
a7:7b:b5:c5:6e:c2:85:77:1b:97:41:be:0e:cf:1a:88:29:ed:
00:4d:6c:3b:51:0d:6c:e6:0c:71:06:c2:c4:69:b8:0f:9b:d1:
95:4d:dc:cf:b7:f1:af:c0:43:9c:5b:f9:d9:14:09:e3:04:a4:
89:4c:b6:3b:c9:99:dc:27:c1:5f:1b:36:45:74:9a:c8:c3:e8:
5d:82:27:80:0a:d7:16:d4:69:60:55:1b:7f:ff:cd:34:c9:6e:
b1:fa:7d:f3:bf:63:c2:62:70:97:82:54:0f:ee:fd:1d:b2:80:
c9:ea:69:0a:66:6b:a4:8d:ae:eb:11:44:42:b1:50:71:b6:e1:
27:70:ab:71:a6:7f:55:ed:0e:f3:ab:f3:49:b2:f2:a4:4f:45:
ff:f6:64:ba:25:09:d9:c9:28:b7:7f:89:94:25:ce:46:5f:65:
91:cb:49:69:ca:75:2c:e8:e3:8b:9e:a8:e6:41:f4:b1:fa:3d:
60:44:82:27:c3:ee:1a:d5:d4:b7:10:62:5b:29:e8:9b:1f:8c:
c1:8d:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:29 2025 by rpki-client