Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
File: pUiu2QpeI7SnNpVgjztleL_exhU.mft (raw, json)
Hash identifier: TevM770zCnf+x8NZqdJEWjwUS+Z9+/8mRkadpq+oDOY=
Subject key identifier: 54:65:BB:1E:57:3A:B9:0C:4F:88:C9:92:8E:0F:5C:EB:3E:E8:C7:02
Authority key identifier: A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
Certificate issuer: /CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Certificate serial: 0194BC3C85E5E878623CEC88B7189254784A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
Manifest number: 0CF1
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: O4HPjKtfYNvc1lksPI1mIC2KoZE.roa (hash: G5jnz6Oa7fbgHp+PjYrqWRfRXq38tvNWQ9FfwitWKvo=)
2: pUiu2QpeI7SnNpVgjztleL_exhU.crl (hash: KGIBOm17bH7GtWF9XgpsTor0CRYazDs9ipyhyDYRNW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:e5:e8:78:62:3c:ec:88:b7:18:92:54:78:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a548aed90a5e23b4a73695608f3b6578bfdec615
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=5465bb1e573ab90c4f88c9928e0f5ceb3ee8c702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:6e:2a:69:84:39:23:ac:da:2d:a4:2f:cb:
98:4e:02:cd:6c:5c:64:94:de:d9:49:ca:e7:f6:fc:
38:14:bf:eb:16:9a:6a:3c:43:8f:de:34:6b:0c:1f:
4a:62:3e:e0:a3:74:61:a9:46:f5:38:14:97:a9:a3:
34:3b:94:19:92:d0:6f:04:89:fe:e0:c8:d7:f1:44:
9a:3e:54:7c:03:9b:6d:8a:49:60:7f:03:51:91:6b:
be:d0:b4:43:9b:ef:2e:b8:16:ae:c6:1d:cd:e3:40:
24:21:91:b5:55:26:33:aa:cc:dd:76:da:22:66:f5:
44:26:36:2e:59:67:e0:11:4b:13:4d:7f:7d:55:d3:
f7:17:95:d5:d5:7f:8f:cf:84:c1:23:79:78:86:6d:
2f:51:41:f2:d9:72:89:f6:22:05:c2:59:c3:67:d9:
15:6e:02:b7:31:49:f1:0a:7e:5f:0d:61:bc:6b:bc:
14:94:09:d6:62:64:ea:29:39:60:5c:ed:9a:85:43:
ff:e1:7c:59:f1:98:67:b1:14:1d:00:10:13:48:9d:
de:ea:ac:d1:15:7f:04:d1:09:eb:f8:ef:ae:fc:1a:
12:3e:93:3d:72:ae:d3:f0:33:de:1e:59:51:9b:09:
ca:e6:9a:01:1c:89:f5:83:d5:12:50:70:0a:d3:b5:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:65:BB:1E:57:3A:B9:0C:4F:88:C9:92:8E:0F:5C:EB:3E:E8:C7:02
X509v3 Authority Key Identifier:
keyid:A5:48:AE:D9:0A:5E:23:B4:A7:36:95:60:8F:3B:65:78:BF:DE:C6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUiu2QpeI7SnNpVgjztleL_exhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7466c2-56d4-494a-b267-5463b71e26de/1/pUiu2QpeI7SnNpVgjztleL_exhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:9f:60:44:12:2c:93:74:65:b4:aa:ae:63:e2:c8:d6:0b:
22:ce:8c:7e:52:e1:f9:1f:e1:13:85:24:3c:b3:65:2e:e9:6f:
ea:7d:da:1b:d5:fe:ed:88:96:d1:ad:9f:7c:65:3a:8a:39:3b:
45:0d:36:6a:e0:0e:36:88:bb:b5:cf:29:be:0b:9d:c2:fb:52:
cb:0c:12:f7:bb:d1:7f:39:7d:04:ef:5a:c2:ec:42:5c:56:99:
7e:45:2f:8f:54:52:7f:7d:94:70:66:5a:18:5d:2f:96:08:99:
f5:e6:3d:94:62:35:5a:e4:a2:65:37:ac:7b:a0:37:fe:59:96:
ca:8d:fc:de:e0:e7:e7:7b:61:4a:70:72:74:b5:96:fd:ed:6c:
ee:7a:3a:ad:4e:f7:df:02:9e:49:c3:e2:ca:c1:ae:3a:cc:8a:
9b:cd:81:84:e7:21:c7:58:fb:30:c5:6d:98:e5:c0:c7:f7:a5:
b0:5f:42:7a:70:d5:b2:ed:47:86:4c:d9:b1:f0:9f:b1:f0:da:
12:2c:49:ca:8a:bf:33:1c:56:46:c1:a6:32:e4:c3:87:15:be:
0d:45:9e:95:34:05:93:54:5b:99:cb:64:fa:20:60:af:a7:73:
d4:c3:47:ca:3e:a8:5b:43:ff:44:1f:0a:ab:54:9d:7a:92:54:
f0:bf:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:10 2025 by rpki-client