Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: RbxGlPJ7HU0Sz2wh0XeV2WO/5gpPKmPPUaUVeEIUoZU=
Subject key identifier: 9C:D7:60:91:AE:68:98:F9:EE:59:98:F9:7E:A8:A0:88:8D:FF:3B:1D
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 0194BD17B497FBB4D4B4B229CE4DDBBCC04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 8n66jbpw-c2Aqy4SU3OEjHIQ8Ng.roa (hash: 5aUols723XY3S6GAB1kKE/l7w8plVtAbUtwN3H30tYU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: LVjdoRYOsoajUTymAkjilz9IDfzmQxyl5fsC29lar4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b4:97:fb:b4:d4:b4:b2:29:ce:4d:db:bc:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=9cd76091ae6898f9ee5998f97ea8a0888dff3b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:31:95:88:79:d0:65:9b:e5:a2:82:81:e0:
b3:fe:60:6a:5e:f0:8c:01:4a:b0:87:f8:60:b8:76:
ce:a9:05:22:79:32:88:53:bb:78:95:fa:66:df:05:
90:ee:ca:66:ce:46:f5:f7:3e:b3:da:7a:b8:42:e9:
8f:ff:3a:40:30:11:0e:48:06:81:86:cb:29:5c:92:
97:68:76:37:a4:f1:e1:fd:95:69:e7:e1:3e:c2:23:
d1:57:99:3e:72:ba:d2:7a:da:ed:6a:fb:06:f8:84:
e8:70:d9:40:ab:df:79:68:bf:60:43:ce:94:5e:cc:
7c:46:27:a9:22:fd:95:30:4c:f2:a2:3a:71:fb:53:
1c:6e:c9:58:3d:58:2d:99:95:1f:f7:dc:6b:a4:65:
02:96:e7:62:54:dc:94:b8:75:a3:3e:7e:28:47:b6:
91:bf:ea:7f:4a:7d:1c:da:ca:5d:af:6f:a4:43:d9:
68:35:47:2b:8a:01:0f:49:6c:3c:0c:fe:53:29:46:
60:8a:d7:c6:03:cb:4a:ef:4e:e3:e9:44:62:94:54:
61:4d:77:f6:6a:41:db:8f:b3:1c:a7:bc:2e:e1:7f:
b9:5a:b1:ef:82:c1:fa:a2:a2:7a:68:34:5e:93:29:
9a:79:5a:27:90:c8:9c:30:8c:89:7f:62:2b:24:f9:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:60:91:AE:68:98:F9:EE:59:98:F9:7E:A8:A0:88:8D:FF:3B:1D
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d5:77:eb:1a:fa:41:6a:8e:6b:66:af:27:5d:fc:fa:8d:65:
95:0c:17:a2:f8:f6:86:6d:72:09:92:91:9c:21:3b:bd:6d:65:
9d:18:58:42:81:74:97:96:ee:b1:ec:78:80:f2:fa:ba:6e:81:
b4:3a:ce:ee:9e:18:60:30:01:87:6d:b6:53:c0:e6:26:75:3b:
5b:e6:05:9b:92:65:af:31:21:8f:9d:b7:98:85:28:ee:15:9e:
9f:ee:3a:fc:9e:17:02:c4:06:1b:f8:28:d6:e8:e1:f1:cd:a9:
52:a1:0d:16:10:95:26:7e:e3:be:bf:b3:29:cc:ef:09:95:49:
3e:6f:a6:5d:11:19:43:2f:da:d3:16:7f:fb:a5:ce:40:88:ea:
46:47:f0:74:55:b9:75:b8:6c:d4:64:40:54:1c:3b:bc:03:43:
16:2f:c7:9a:07:7d:9f:ba:de:82:30:9a:cc:eb:49:8c:4b:e8:
9d:fb:3c:34:14:54:48:b0:be:17:5c:59:69:08:af:20:30:bc:
fc:fb:d2:b1:78:7b:5d:63:8a:cf:1c:0e:1b:ae:2b:11:b9:9a:
26:1b:a0:10:b3:97:b2:42:06:df:c6:35:7b:fc:8d:d5:b9:fa:
48:88:12:9a:da:1a:a0:0c:b5:90:0f:cc:e9:2b:c5:bb:a0:64:
d4:2e:31:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:46 2025 by rpki-client