Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: oekOju1mkecZ6+/gKjbwHDYya3Ya/CGwv4wamJ95JAY=
Subject key identifier: 62:6D:90:0A:9B:63:2A:F4:4A:6C:0E:76:6C:D5:22:49:B3:57:BF:B8
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 0194BCAA2C2525240BBFED2444960D4E3FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: nqNQGiX4/GlBFdIHDoYba1xPnDQXrZAd5Xhe9viaktU=)
2: aGUQW-NVaHMBg-4QWkhklY8KGK0.roa (hash: bPMaS2I+pHesJBg7bFG+Rdvd7OKl0tnIQrQv2QCj1ts=)
3: rVWQvLYGP2S2DxwegJIuD9LE0zc.roa (hash: YYoqsH7NIJbf4ECO6jy2JznJQ6ZNNE1bY9thHu8to+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:25:25:24:0b:bf:ed:24:44:96:0d:4e:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=626d900a9b632af44a6c0e766cd52249b357bfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:f6:65:35:cf:a7:6c:c0:d7:c8:1d:dd:99:
15:ca:eb:40:8a:13:d9:31:10:c7:99:d2:50:35:6d:
1b:e9:53:1b:f6:f2:1f:82:b3:9a:64:00:ea:a9:06:
5b:f0:ac:ce:d9:a6:2d:9c:9a:0f:cd:95:45:d1:8e:
3e:6f:4a:2c:ac:db:61:eb:3d:de:00:e1:03:41:6c:
8e:27:49:83:a8:f8:8c:ae:20:5c:b1:c7:73:24:90:
1e:80:1b:6a:e5:34:2f:a7:df:60:5e:92:d9:c4:14:
c9:5a:9b:ba:36:5b:ce:7c:a3:3d:06:af:b3:b9:28:
fe:13:a2:66:47:21:d4:e6:0b:d9:b2:9b:bf:68:8f:
9d:7d:98:94:f5:d1:bf:0b:2f:fa:aa:a6:bc:ba:6f:
aa:7d:0d:c2:fc:1f:cb:f3:3d:19:9f:59:c0:97:83:
96:d7:ce:bd:e3:f8:0d:37:70:0e:fd:92:d4:b0:43:
f6:a3:c5:b8:6c:9c:17:98:a7:89:04:cd:1c:a6:d9:
19:c6:78:03:65:72:91:d2:e2:42:2a:2e:47:d7:69:
9f:d7:b8:2d:12:4a:e4:36:29:d1:d4:17:3a:0a:bc:
5e:fe:b6:19:20:e7:7f:5d:1d:11:01:59:fa:44:52:
7b:f4:46:51:65:a4:27:cc:35:7a:1d:d8:4c:e8:8c:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:90:0A:9B:63:2A:F4:4A:6C:0E:76:6C:D5:22:49:B3:57:BF:B8
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:51:ea:1a:52:6f:39:78:bb:2b:50:2d:32:e6:c2:b7:a5:ae:
d1:b0:53:d2:81:18:22:e4:62:62:1d:14:aa:9d:0e:e6:f3:f0:
fc:28:72:aa:1d:35:1f:f7:fb:df:6f:2e:66:52:21:fd:35:7c:
03:5a:d7:6c:ed:aa:d0:ac:00:51:21:83:7e:fc:7f:99:26:c2:
28:df:92:cc:66:f9:37:1c:a5:17:e0:52:ea:46:26:43:fe:af:
c2:b4:cb:8a:61:a1:f7:ab:9b:50:44:a1:b2:30:a1:c7:f6:33:
42:36:46:45:3c:17:13:8f:dd:97:48:4f:29:68:7b:48:bd:39:
d6:f0:e9:f5:36:32:cc:30:63:b7:79:03:7a:cf:08:70:90:69:
79:63:ff:23:4c:11:81:75:ff:ba:0f:6e:54:33:4a:c0:1e:a5:
54:8b:b9:e5:95:95:e0:ac:24:47:1b:87:ee:e2:d0:98:55:a2:
89:0f:99:0c:09:48:d0:fa:36:30:9f:70:6c:78:7e:fb:ce:3a:
24:eb:bd:20:8c:05:4d:70:36:65:e0:3b:a4:0a:7b:05:00:36:
56:7e:df:79:66:da:47:ac:39:83:f7:30:d6:c8:6a:a4:f9:3e:
77:d4:2d:00:35:4f:b3:8f:a0:6d:27:9d:0e:1d:4c:ea:e8:ef:
75:c4:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:07:21 2025 by rpki-client