Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: 2TgCVs8PctgzbuzPspa8R+fFLQP15DfL+olWlyzEW1o=
Subject key identifier: 0E:4E:C9:7C:1D:06:A6:83:16:51:8A:7F:6F:5D:B6:C9:9F:68:E9:06
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 0194BBCDCED01F220F820A1FC3A66E3F54DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: jNO+zX/DMZDvt+I4Ui9SwDhglkVviPAsSTMZDyy9jlM=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:d0:1f:22:0f:82:0a:1f:c3:a6:6e:3f:54:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=0e4ec97c1d06a68316518a7f6f5db6c99f68e906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:9f:a1:c2:63:ae:3a:19:dd:d3:7f:97:43:
8e:c5:e4:1f:32:18:00:34:50:17:18:ee:a6:37:2f:
f4:f8:13:97:9c:4a:30:fe:6e:c6:b3:f8:a7:32:87:
74:bd:1a:87:8f:95:bf:1e:70:b1:ab:c6:8b:7c:b7:
eb:4e:c8:a6:55:0e:5f:52:dd:79:33:ed:ba:b0:7e:
18:d1:99:3f:8b:13:d1:38:b5:d6:83:0a:c9:73:66:
ce:24:b4:e9:64:61:ee:97:e4:79:d8:20:f0:6a:37:
d9:4c:03:d4:e8:86:d7:72:78:82:af:ca:7b:ad:f8:
f2:06:ff:33:38:16:01:4c:dd:59:2e:c5:c5:92:aa:
9a:2d:d1:77:05:c5:34:b2:cb:2d:c2:73:ff:b2:ba:
55:c6:ca:ac:e7:75:d7:09:30:d9:72:dc:e1:61:a4:
d2:90:fc:21:91:7c:9d:e6:80:1b:77:99:fc:2e:0a:
e7:ef:28:72:55:01:1a:87:75:98:fc:a6:9a:fb:6b:
66:e9:e3:2a:fa:75:22:64:f4:ad:70:bb:85:80:08:
78:3d:5c:ac:d2:2f:59:c7:67:d8:59:13:ce:37:54:
42:2b:fd:52:95:95:be:68:2c:51:c1:64:39:ab:89:
b1:cc:c1:fc:a7:46:ad:68:64:d8:05:fe:9b:1e:6c:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4E:C9:7C:1D:06:A6:83:16:51:8A:7F:6F:5D:B6:C9:9F:68:E9:06
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:21:52:69:51:c2:57:21:7f:03:01:0d:18:d4:cb:cf:49:d7:
9d:d0:a5:84:3c:ec:1a:92:b5:f5:6d:71:de:f6:f1:7b:1d:d9:
41:b7:6a:45:fa:e4:ba:06:9f:57:2f:ea:4a:c8:eb:48:a2:cc:
af:ea:87:3a:ca:24:a9:e6:6e:22:ce:6c:56:fe:52:1b:c0:ba:
dd:3d:9a:eb:c9:4e:01:b2:d0:4b:d7:27:56:22:4d:31:22:71:
14:36:d8:8a:30:25:f1:9a:2f:df:1d:ef:b1:aa:4e:6b:d8:b0:
5a:77:86:3a:6a:11:61:81:b0:bd:3c:74:de:cc:49:6a:df:9c:
0c:2b:2c:6f:a1:8d:ed:d0:77:6a:b8:82:30:be:61:e0:b1:4a:
12:25:52:6b:db:97:d2:98:e7:4c:4f:0d:e8:3c:5c:03:0c:d3:
c2:8a:00:8b:a7:9e:1d:54:68:5e:90:32:3f:a3:91:11:01:39:
9e:58:19:54:43:d0:1b:ba:70:91:92:9f:d2:41:d4:e6:02:53:
ef:49:9c:33:fd:2b:1f:43:36:91:86:54:a5:79:dc:2d:fc:8b:
2e:c6:4b:35:00:a3:ef:88:91:b4:e9:c4:db:ca:5f:b6:63:62:
0e:19:a9:68:c6:8a:bf:7b:68:1b:e3:b3:dc:02:1f:1b:57:4e:
38:6f:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:08 2025 by rpki-client