Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: t5Q/HcM7QFdT9ziliDYvKUzZDsj1l6uPlIAX1mkrTXI=
Subject key identifier: 87:C9:14:FF:45:4F:9D:85:6D:72:5A:BB:39:39:C0:A7:C0:49:77:15
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 0194BBCEB6770059DE30627664D7F51E26BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: YxUNaivHNg+L2Z0N6Ces5KgFsq9YYta+dsDt+sJ87YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:77:00:59:de:30:62:76:64:d7:f5:1e:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=87c914ff454f9d856d725abb3939c0a7c0497715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:17:68:a7:3c:81:50:65:6f:b3:d1:3f:98:
d2:4f:19:8e:60:97:63:fa:45:6a:b9:59:09:43:58:
f6:8c:ac:96:7b:3c:c8:53:e2:6a:67:86:08:9f:73:
b9:18:bc:bd:a4:d6:5f:ee:70:d4:77:2d:8a:5b:31:
c4:6b:dc:c5:c4:dd:4d:9f:53:9f:de:42:81:e0:5c:
6c:1a:01:5d:f6:18:ea:93:5d:17:a5:c7:d5:f5:a4:
85:97:4e:47:3f:35:be:7b:2a:60:d5:ee:05:9a:9e:
2b:05:a4:38:bd:bd:2f:5e:7c:d8:e0:ca:47:6c:ca:
31:72:53:cf:69:ee:dc:24:91:83:ac:b7:f1:35:a3:
96:58:67:7e:05:b9:e6:bf:86:6f:4d:3e:1d:af:a7:
18:ba:1b:32:a2:12:86:f0:41:7f:9c:a7:dd:d6:b6:
7b:7a:36:bb:12:38:52:1c:ea:8d:01:6e:f6:dc:34:
d5:f7:56:56:77:2a:43:02:b4:3c:7d:eb:5f:f7:d3:
c5:d4:2f:61:08:a9:9b:b5:5a:42:67:b1:fc:76:f8:
97:e4:36:79:38:3c:b1:17:d8:3e:93:bb:1e:7f:a0:
5c:55:30:81:ef:68:05:b5:3a:15:3b:66:4a:db:fd:
f7:47:f4:3d:42:3a:80:db:6a:01:bf:0d:e4:89:de:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:14:FF:45:4F:9D:85:6D:72:5A:BB:39:39:C0:A7:C0:49:77:15
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:af:e4:0d:9a:ff:bf:55:aa:43:d2:aa:e1:79:18:01:f2:af:
60:3e:04:6d:38:06:ee:5b:f9:be:c5:b4:ce:6f:13:61:c9:32:
e6:ed:4d:1a:5a:6f:a6:ed:27:82:54:47:79:9f:06:af:a2:39:
98:23:9c:a6:bc:8d:13:3b:1f:cd:a2:b9:bd:0e:c3:4a:50:e9:
83:fd:f5:67:5d:34:dd:71:71:0c:9a:b2:89:ac:62:a0:44:21:
35:4a:98:a7:1d:71:f5:e0:e4:b8:79:a9:39:2d:02:3b:b8:7b:
05:d2:97:87:fd:db:6d:fc:0d:ab:86:aa:20:9e:27:f6:46:36:
41:82:3e:41:7e:e7:ee:67:5f:85:7f:4e:7b:0b:0c:75:20:23:
cd:ec:34:4a:48:a0:7b:de:f1:2e:f6:0e:35:bc:5a:6a:fd:58:
93:01:af:d4:cc:61:6c:de:b4:cb:23:6b:53:e2:fd:eb:53:d2:
42:8b:ff:bf:1e:08:74:4f:6a:a9:c4:19:b1:07:01:1c:94:e6:
0f:83:ec:c8:e1:a1:8d:80:dd:c2:e0:bd:b7:08:7e:2c:36:44:
34:7d:4d:00:e4:c6:a5:f5:19:9d:9c:f1:e0:d4:4d:c3:bb:83:
3d:44:fc:f5:ee:fe:ca:ad:2b:f8:6e:83:75:bb:6e:1a:2f:72:
39:81:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:55 2025 by rpki-client