Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File: uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier: SWhRtOpTupRpGTYPA26v2iJb7jntvnO2l+Lpz8VNnos=
Subject key identifier: D9:58:B0:A5:73:27:E2:46:7A:B6:5B:06:21:32:62:35:06:9F:FC:A1
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 0194BC05076A0ACAC70162716BB4820A8D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: FAbnnF69oHTmqk-_EL74zctuaA4.roa (hash: fltdyHSTKiTHvNl3z1Whswl3hhYadpjXzd/kAG+oHEc=)
2: aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa (hash: RYvSIhl4EMxqFZiyrQ0zAL7ZWanzg67h6dO8KAffWY0=)
3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: FntAbSQQbPHfSpoFHPJKnNZ98EjFi8oYXGr65CKXfVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:07:6a:0a:ca:c7:01:62:71:6b:b4:82:0a:8d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=d958b0a57327e2467ab65b0621326235069ffca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:65:81:3e:cd:7c:d8:9c:72:e3:17:74:4c:
df:50:8a:14:6f:b1:fd:a8:1e:7f:f5:4c:e9:9e:dc:
09:92:02:cd:98:3a:ef:30:4b:00:3f:b3:97:65:c9:
3d:3d:03:f4:8e:f5:50:de:fb:67:7c:d5:a6:a5:af:
5f:47:1d:94:3d:91:20:9e:a5:3d:03:c4:2a:40:4a:
26:c0:a5:42:19:b3:40:89:a1:14:4d:c2:e0:30:15:
12:92:b0:bc:7a:0a:56:a9:f8:dc:c7:5d:42:f4:9f:
28:3f:ba:15:02:cd:b7:78:69:61:a6:4a:62:c2:31:
a1:8f:92:e5:7b:4a:3f:c4:d6:7f:2b:14:24:33:da:
e1:44:93:4b:71:e1:1a:a8:00:41:73:a8:f8:c8:5e:
dc:fe:8b:bd:a7:17:6d:f4:b6:87:72:2c:0a:02:e9:
20:48:50:73:f9:33:28:71:c9:44:25:d5:d7:6a:29:
fc:27:0d:12:ee:dc:9f:4f:1e:be:d5:0c:e3:00:53:
73:30:b7:9c:90:54:9f:de:37:dc:1f:af:1d:44:4c:
69:3b:d3:c9:cd:7a:22:f1:3d:18:e2:a3:c2:8e:75:
7b:ed:91:13:a9:b5:cb:05:68:c1:6d:de:cb:68:a0:
b5:37:89:e3:c6:61:c5:46:95:81:ea:42:7b:54:6a:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:58:B0:A5:73:27:E2:46:7A:B6:5B:06:21:32:62:35:06:9F:FC:A1
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bc:4b:34:c2:b3:6a:31:90:0c:90:d6:7f:56:27:0f:02:c8:
8b:e1:d8:5c:df:79:6d:26:20:fc:75:c4:ef:e9:5f:ea:e3:86:
5a:5c:50:6d:c4:97:40:1f:30:14:86:bb:a3:9c:05:52:b7:d4:
31:b0:4b:a2:93:4b:d7:68:ab:9d:21:29:4d:dc:c3:f3:6f:c5:
97:23:06:da:4d:90:28:a3:bf:c5:20:cd:26:9d:f4:ec:6b:97:
2f:c2:73:95:d4:f1:19:ae:74:80:52:1d:bd:bc:7a:98:b1:cb:
91:cd:4c:d2:77:0c:af:5a:25:b3:10:0c:30:4a:02:28:a8:4f:
be:df:92:ff:9c:c0:b7:c4:b8:80:a9:44:17:ab:f5:4c:ed:86:
59:67:1d:79:94:ce:48:fd:09:ec:e7:b6:5e:77:56:4b:30:37:
2b:0f:80:ea:9e:63:6f:db:18:86:ba:8d:4e:c9:be:65:60:a8:
6c:71:64:af:c4:d0:10:76:98:a4:ec:b9:f5:0d:95:18:9e:84:
a4:4e:92:25:8b:54:b3:48:2d:63:e4:87:4b:4c:ce:68:f0:98:
fd:89:29:2d:8e:e0:cf:45:b5:43:3e:99:bd:a0:62:ea:fb:3e:
46:5c:73:2c:a1:0a:cd:54:eb:81:b9:57:fe:3e:cb:e9:f4:18:
83:8b:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:35 2025 by rpki-client