Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier: DlGa5IwiTD0+k2iJB3JS5zkhg9UrojuZSxJM45YkINY=
Subject key identifier: 4E:27:A0:21:0C:8A:ED:10:79:B1:27:4C:52:87:16:C3:AD:69:EC:57
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 0194BC3BDAECD79C019F6FF23C4C34B711D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number: 0475
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: iSCo8zQN8ZEzGmQ9jr0gTjPKLvNjbQCZzMFDfvXl8nw=)
2: pQYq5-XOE0GW9VIQWVVOezj_vPI.roa (hash: sNewpRG7jeaOoWjw5BgvEQfR5LfaUDIuU0tjDK4Ljq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:ec:d7:9c:01:9f:6f:f2:3c:4c:34:b7:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=4e27a0210c8aed1079b1274c528716c3ad69ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:bc:1f:1f:f8:6a:0b:b6:6b:e7:a3:23:89:
21:0f:ce:bb:0d:d1:d6:06:3f:b8:cb:9e:70:2c:8c:
96:bb:08:d7:b1:fc:45:3a:46:e6:ce:79:77:8f:85:
74:41:df:c8:23:eb:85:08:f0:f4:96:66:9c:9a:bc:
9e:56:0f:67:3f:ef:c8:d2:20:e6:57:41:b2:eb:7f:
aa:d2:1b:48:cb:3b:7b:84:ab:8e:55:56:25:0b:db:
64:14:51:88:d9:ac:53:e1:62:d6:17:c9:88:c0:43:
46:42:7f:a6:a0:32:fa:1d:ed:62:c3:e8:37:c3:54:
aa:d9:ee:48:18:f6:12:bd:e3:fb:a3:c8:b9:69:a9:
63:17:3e:48:40:8e:5e:dd:09:39:14:56:cc:11:92:
88:08:e9:6d:20:7e:b0:46:52:2e:de:64:42:77:65:
c1:bf:f6:75:0c:eb:17:d5:6c:7b:ad:0b:03:fe:90:
28:2d:ee:7f:02:7d:b2:90:6b:4e:94:5c:2e:15:91:
87:6f:1e:d6:7f:54:b7:34:d3:30:fa:76:bb:6b:e9:
fd:08:20:2b:a4:42:00:3a:c0:db:c8:3e:67:8c:c8:
92:e6:e1:60:ec:08:ef:88:23:66:c3:45:86:14:a8:
a1:cf:64:64:ba:c6:80:16:3c:1c:3d:78:0c:58:3b:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:A0:21:0C:8A:ED:10:79:B1:27:4C:52:87:16:C3:AD:69:EC:57
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:3d:27:2f:82:4b:0a:56:95:10:ed:98:0c:ed:87:81:67:
98:2e:29:50:a8:46:a8:86:35:0b:b1:34:dd:df:e6:d7:22:74:
d8:83:fe:3e:2e:b6:a6:04:f7:74:8a:be:19:40:86:d3:e4:7b:
0f:c4:ca:87:2b:d9:4b:da:49:aa:84:c2:4d:3d:47:92:62:9e:
32:d6:e4:8b:08:22:10:01:a3:87:78:63:00:77:a3:64:f1:b2:
f8:98:71:60:d8:cd:4b:cc:ff:0e:e8:1b:ef:39:aa:ae:bd:d4:
b1:55:e3:2e:e0:6f:bf:00:cc:9e:3b:16:6b:45:60:5e:3d:b9:
ce:76:6c:db:bd:b3:c7:9e:30:67:77:b5:02:3f:19:55:aa:60:
3e:d8:2b:16:e5:66:d9:1c:db:4c:6f:79:98:08:54:ad:56:cf:
5d:fe:98:89:1f:95:75:3e:fc:6f:3b:9d:bd:20:e1:72:b3:99:
2e:4e:53:86:bf:c7:4e:56:33:98:c4:c5:86:98:4c:98:1d:6c:
34:0c:5f:44:1c:6d:12:36:f0:b3:f9:16:9b:63:52:71:4f:1b:
2b:db:b6:a9:bc:c9:b2:4a:93:b6:46:5e:b1:73:b6:20:fe:4a:
96:3b:2c:6e:d7:ad:0a:4d:82:6e:79:de:c0:68:96:1b:11:c8:
dc:86:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:58:12 2025 by rpki-client