Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: 6q84ubqAcn01S3Ub7h/0cAQRd+T615yPUmN3rs9nAk0=
Subject key identifier: 12:0A:51:95:DD:96:08:D5:8E:D7:40:A7:A2:B2:8D:C5:0A:41:4B:C1
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 0194BC04D3D1C5E35D560761B27E7C3CF5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0A94
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: hjvA7BmxxRzorNpAq9ILRWS9QuyiN+HsiYA3pOVTeD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:d1:c5:e3:5d:56:07:61:b2:7e:7c:3c:f5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=120a5195dd9608d58ed740a7a2b28dc50a414bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:d8:2d:dd:34:46:5a:19:a9:43:6c:6e:e3:
9a:46:31:68:1c:77:87:98:5c:8c:f3:d1:5e:93:1e:
0f:ec:7f:0f:8c:9a:60:2c:c1:c8:fd:ee:98:2a:53:
3a:3a:04:ef:05:68:46:76:6b:f5:3b:68:eb:99:56:
54:9a:f3:bf:af:a7:2f:ce:4b:d2:09:e6:41:a0:bf:
99:63:f8:fd:69:68:bd:a8:1e:52:5a:48:3e:45:57:
4d:76:a1:c5:70:15:cc:bd:16:b9:8f:f2:48:31:c4:
95:7b:17:0b:e9:4d:d2:e8:c4:64:34:a8:91:c8:a6:
20:30:5c:40:e0:05:5c:27:d9:46:aa:46:82:6b:a9:
60:cd:64:d4:f2:38:35:1e:9b:9c:03:6c:3c:c6:06:
0f:9d:16:c5:2b:78:77:0c:b5:bc:ca:aa:b0:ab:19:
08:7b:b1:b1:9b:d1:a6:56:e3:ac:b1:29:b7:69:57:
dd:f7:42:5a:01:33:25:1f:f7:e8:d9:ee:41:5f:d2:
70:17:f1:12:f4:e4:b2:96:b5:56:82:74:11:5a:81:
70:a3:13:72:ea:98:ae:d8:b3:5c:7d:77:8c:4d:55:
60:21:aa:ee:49:0a:00:78:ae:4d:35:b5:c8:65:e6:
cd:ca:08:3e:1e:d0:61:9b:89:d3:26:b9:a3:69:a5:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0A:51:95:DD:96:08:D5:8E:D7:40:A7:A2:B2:8D:C5:0A:41:4B:C1
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:98:1d:bf:5e:e3:ba:ae:51:ae:bd:46:52:a3:3e:e2:96:72:
7a:ce:46:68:be:c4:f5:c1:b0:14:0e:a5:f4:14:ff:f1:7b:7e:
39:60:5c:1c:a3:a5:02:1e:ff:b6:01:f2:c7:43:b5:bc:14:d7:
6d:d8:4d:b5:bd:90:ca:75:53:cf:f0:f1:30:6a:9a:3a:ac:1b:
a1:f3:18:2f:31:3d:80:54:c8:2b:e6:61:b4:e2:b1:22:23:85:
16:65:5e:79:7d:11:57:b3:37:b6:62:54:cc:56:b6:b6:16:02:
5e:5f:db:49:b2:6b:7f:a6:32:f5:a4:e0:92:34:aa:fc:bf:78:
68:b8:1c:08:49:2e:1c:fe:1a:90:89:cd:4b:1b:74:46:d2:2b:
71:cb:7f:b1:10:ea:d1:e5:7c:b4:48:e9:41:36:60:2f:36:8a:
d5:6c:5d:21:f8:fe:60:98:73:02:3b:09:c1:34:6e:29:cb:91:
b1:06:46:f6:b8:a9:9e:f1:a3:6c:16:d0:79:b7:2c:24:00:58:
ad:f9:e1:52:12:3d:02:52:ae:e1:cb:ce:06:63:46:69:30:9f:
15:bf:c4:ed:6f:32:7d:1a:52:e5:31:06:53:97:8f:43:9d:3c:
c9:a2:33:63:44:d6:23:49:62:d5:7a:80:a3:e5:6a:92:38:5f:
0c:f5:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:41 2025 by rpki-client