Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: M9nqmbjPtIMv8TePZB+5woundjIKj/xZ0bhu3RBhNi0=
Subject key identifier: C3:6F:3E:CA:81:D4:98:AC:3F:2F:60:CC:72:B8:C3:E1:02:A3:80:4A
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 0194BC04B05BC7998D88398F6253DE9C5AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 04B3
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: PG74xG1DOs3LN7x6WIVOClJeoqCn5ZlZs65eI1ZI/Rw=)
2: iF93w_kO_x0TrENOc4gmI6-EtJ0.roa (hash: 5zJM9jO9AIiHF5QxYe/wtht+xZaOBv518vzoLVEf1p4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b0:5b:c7:99:8d:88:39:8f:62:53:de:9c:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=c36f3eca81d498ac3f2f60cc72b8c3e102a3804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:19:db:d1:90:7d:4c:c3:7e:d8:d6:83:53:
f4:8b:5f:61:09:40:c3:c4:e4:64:ac:cc:fa:23:cf:
60:70:b6:9f:a0:79:6b:b6:75:34:38:5d:84:cb:8d:
a8:59:26:28:30:89:bf:41:0a:1b:5c:a4:63:70:fd:
64:26:36:37:6f:99:54:5a:b7:66:1a:22:a3:ad:3a:
71:51:a8:08:16:58:bb:16:82:74:bf:1b:d8:a0:b6:
29:ce:5a:e7:0d:b4:bc:8b:2f:fc:0a:25:7d:be:d8:
3a:4e:be:99:14:97:4c:d9:e9:9e:6d:2c:62:54:f7:
31:97:3e:34:77:b8:e6:23:fb:2b:52:d7:d8:7b:9b:
32:2f:b2:01:4c:3d:88:92:9e:48:af:1b:35:f4:cf:
bb:ae:10:0a:80:77:e8:b2:fa:8f:5b:93:16:5d:5c:
d2:c1:20:14:52:4c:c9:63:b1:6d:79:8f:c7:35:ad:
86:c1:18:23:19:b5:13:d2:7c:0c:d3:24:5d:31:43:
4c:ec:43:f8:1c:00:cf:76:31:82:94:d4:14:67:86:
37:d4:41:81:d5:57:a1:f8:c3:76:5d:de:e2:c3:67:
ca:a4:58:a8:05:71:27:24:96:8a:d8:fc:bb:34:08:
94:86:36:84:40:2b:a1:18:80:86:ca:87:10:e7:a2:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6F:3E:CA:81:D4:98:AC:3F:2F:60:CC:72:B8:C3:E1:02:A3:80:4A
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1b:de:43:ca:ef:98:02:a1:aa:7b:2b:ff:be:b0:84:83:a4:
f8:03:57:69:2e:02:dd:42:8c:03:21:a4:02:ba:2d:0f:51:6a:
4e:9f:76:ae:56:19:9c:e1:69:bc:e4:de:fd:5d:2a:3b:ce:81:
99:2a:55:e4:37:ee:c4:1a:c5:69:7e:ae:67:4f:9b:9d:f7:32:
b4:b8:8f:be:e2:ea:b0:a9:0b:ec:6b:d0:25:b1:4d:5d:8f:22:
11:b4:f7:8b:92:c2:5a:4e:78:ba:80:a2:e7:ca:47:e0:93:7a:
6a:40:df:b1:49:87:41:91:19:e0:05:80:05:27:a0:6b:62:ca:
5b:c2:f5:e8:e9:f7:3c:fe:b0:6b:b7:54:eb:f9:5f:af:00:23:
ac:39:85:49:b6:77:c4:bc:11:ac:91:85:5d:64:72:11:44:e6:
8b:39:b3:79:1d:0b:61:12:b6:a3:ae:98:1c:dc:e5:6f:69:71:
ee:f8:97:bf:ad:b2:ad:13:9c:a0:2f:90:3c:4d:75:93:ac:ad:
c2:9e:cd:65:70:c8:69:24:f2:7d:c7:9f:9d:b8:b7:a9:d4:f8:
6e:65:75:40:25:95:7d:25:01:95:80:15:a6:ea:66:8e:c2:1f:
7b:3c:35:0c:d0:ca:83:f7:da:01:af:9b:3c:68:4c:d9:77:ee:
2d:df:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:14 2025 by rpki-client