Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
File: uEDbhrmLXLMnCkjPf6AjyHrKucU.mft (raw, json)
Hash identifier: RJRelA2fnfhpJ5TtrVu84yzJk116i7ftoUiNj0Yub9o=
Subject key identifier: 19:B6:A2:32:A8:66:BB:AA:CC:82:63:0E:68:48:C1:BE:B1:31:BE:D7
Authority key identifier: B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
Certificate issuer: /CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Certificate serial: 0194BD17A35E80E4CEAF0A0B9B70CAC1254D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
Manifest number: 03C2
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: FxFAHCh-xR5SmE47a0ARTd4GkRw.roa (hash: slz/fDlVOpfItIULaAZ74wfhbWz9EKShd3tsnurJfb0=)
2: uEDbhrmLXLMnCkjPf6AjyHrKucU.crl (hash: jrISsywGiEhHitt8gxVfvg3UNwHW+z3wOoEVbrHk8sk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:5e:80:e4:ce:af:0a:0b:9b:70:ca:c1:25:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b840db86b98b5cb3270a48cf7fa023c87acab9c5
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=19b6a232a866bbaacc82630e6848c1beb131bed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:1e:4d:a8:d3:09:07:ee:13:26:35:d9:43:
72:d6:29:5b:3a:40:02:cb:99:cd:9a:7b:c8:46:a6:
05:8c:c5:b6:16:d6:d2:9d:33:ea:c9:3d:38:71:49:
81:c6:67:1c:7d:17:b2:cc:9b:c8:17:e3:1f:d5:dc:
fe:8e:57:22:b7:24:e3:79:86:d9:a0:31:68:b0:50:
ce:f2:36:b0:4b:59:55:7f:97:22:b2:fa:c9:ec:59:
e9:39:aa:37:3c:6e:df:7f:2e:42:cb:39:2a:a0:5b:
91:29:d7:be:6c:45:34:e7:da:37:81:97:67:ca:5d:
1d:68:e8:3c:ed:de:17:5f:1a:d6:19:88:2d:07:79:
a0:5b:af:f1:bd:47:d3:3a:27:f6:07:76:eb:99:6c:
11:2f:ce:fb:a1:52:d7:52:43:6e:1e:06:59:d9:11:
9b:7e:46:71:f7:c8:64:cb:98:eb:0e:4e:d4:8c:d3:
76:7f:e4:73:54:bc:f5:48:96:41:13:15:8a:a0:35:
b5:5a:63:a8:24:8f:d1:03:cb:43:05:88:d7:57:36:
78:e8:73:e5:a7:52:37:15:25:c4:2e:82:cd:96:9e:
87:b4:6c:0a:4a:4d:64:d0:91:bb:42:3b:a3:4f:33:
eb:64:44:a1:a7:66:4a:b1:58:08:50:a6:19:6a:7b:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:A2:32:A8:66:BB:AA:CC:82:63:0E:68:48:C1:BE:B1:31:BE:D7
X509v3 Authority Key Identifier:
keyid:B8:40:DB:86:B9:8B:5C:B3:27:0A:48:CF:7F:A0:23:C8:7A:CA:B9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEDbhrmLXLMnCkjPf6AjyHrKucU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/11ffbe-379f-4fde-a84a-c7bd6c263744/1/uEDbhrmLXLMnCkjPf6AjyHrKucU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:fc:6e:12:ac:15:09:69:0e:25:f1:d7:3d:d0:e3:54:9b:
60:34:d9:74:c0:c0:87:b2:4c:45:d2:bf:f5:05:07:b4:e9:e2:
4c:f8:a7:00:72:9a:bc:a8:b9:70:e0:f4:ad:3c:c6:85:02:ac:
ff:fe:35:6a:6d:52:bd:ea:4e:e2:51:da:87:4c:cb:aa:87:3c:
88:16:73:93:7b:98:dc:a0:bf:a2:52:fe:e5:bb:57:34:16:e7:
90:d6:75:d2:44:aa:28:ca:71:98:31:f5:2b:40:9b:ab:7a:50:
fa:cc:fe:5d:56:d7:49:42:98:94:f0:b1:bc:7d:58:87:f9:08:
97:30:a2:17:7b:4e:2b:e4:b3:2e:88:ad:4a:e4:66:60:68:e0:
d5:27:94:f1:7d:a0:8d:ff:99:27:56:3c:50:26:dc:0e:ac:45:
ce:6a:40:35:ff:5f:41:d1:3b:17:32:a9:58:c1:53:1c:df:e3:
ff:16:28:9c:b8:d8:69:02:65:72:30:4a:41:9c:52:7a:1d:e8:
eb:dc:5b:56:6c:22:1d:71:8d:d1:1e:b9:fc:23:f7:e5:12:01:
46:d9:88:8b:23:09:ec:10:1f:5f:d4:15:fe:16:cb:91:1c:d8:
5a:6f:ee:a3:e0:b7:e7:72:a7:43:36:66:ce:fc:1d:38:c7:15:
8a:6d:12:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:29:10 2025 by rpki-client