Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
File: U6hLUj3-Mriom5zdMKn4cRAH_bk.mft (raw, json)
Hash identifier: G3vGPAclbSzTZqfNQ1mKhzIq4wLmcydnHkMR/0rMcAQ=
Subject key identifier: F8:08:0B:C1:82:52:DC:C7:F2:6A:C4:DF:98:0C:8B:89:EC:4E:B8:89
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 0194BD4EB915DCBA6376FD38B35B3F5F33F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: GZldOEJkrutoTjn3MQnXcf09taM.roa (hash: vlltg4veeHpXkbEneS2WFuhIZv9HwJeSmQM3GzCbD1k=)
2: U6hLUj3-Mriom5zdMKn4cRAH_bk.crl (hash: nG+s6M0jweYiXn2GalfO9zhWAqyGXfsCg5AjigQduqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b9:15:dc:ba:63:76:fd:38:b3:5b:3f:5f:33:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=f8080bc18252dcc7f26ac4df980c8b89ec4eb889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:c3:85:47:8b:ed:cf:17:3c:d2:92:eb:31:
5d:35:b5:48:a9:27:0d:37:f7:89:6e:31:79:de:af:
5a:d9:a2:b5:3b:aa:cf:70:80:ce:d0:a1:b6:85:ae:
7e:7e:88:f7:e7:01:09:16:9e:2c:89:5f:47:4a:87:
f8:c8:34:59:cf:6b:9b:16:d4:5b:05:a5:21:5c:41:
03:bf:40:e7:52:1e:0e:0c:40:35:c8:34:10:0a:77:
a5:50:cb:11:3c:db:63:1b:b2:ad:e6:31:c5:3c:62:
4b:80:c6:5a:03:bf:32:c0:99:bd:db:3e:a4:57:c3:
4d:b7:71:86:5d:af:20:f5:b8:80:92:95:81:6b:57:
57:7b:aa:65:50:8c:26:9e:f7:00:47:ab:ba:5e:04:
2c:62:e5:5f:d3:7b:26:03:15:35:31:0f:01:cd:14:
6d:48:9a:4b:e7:12:92:93:21:93:8e:18:4a:fd:de:
0f:73:37:bf:97:6e:f2:ad:ba:f7:94:08:1a:e2:18:
48:a3:37:e5:d9:3c:32:9f:4a:ed:af:b8:00:dd:54:
ac:00:78:2a:b5:de:d7:9a:42:b7:c5:42:d6:bd:95:
7c:7f:34:1e:ff:0a:b3:46:44:24:fe:56:b7:83:34:
fd:a5:7a:f5:68:e2:9f:88:40:10:3e:a3:ff:b6:c0:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:08:0B:C1:82:52:DC:C7:F2:6A:C4:DF:98:0C:8B:89:EC:4E:B8:89
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a7:27:cf:9a:d5:a9:53:7f:fd:1e:27:ba:f4:d8:12:8f:4d:
2f:9a:34:de:ce:f8:a1:1b:dd:85:85:a7:4f:dd:f8:81:b6:83:
f1:84:c6:88:17:bf:4b:57:96:e5:64:ab:f9:c8:a7:66:71:0d:
5c:64:3a:b3:ef:65:9a:81:e0:41:19:1e:92:f5:2c:4f:5a:1c:
43:75:60:00:1c:6c:5e:52:c8:1d:37:23:04:26:b8:0a:13:48:
c0:c3:ba:9f:7c:7e:8c:b3:e5:9f:40:30:78:09:a0:cd:d7:07:
a9:d4:55:fb:e9:8a:5b:13:cb:ff:49:f2:1a:28:cf:a0:f3:a1:
f2:af:59:f3:d7:c8:04:50:b9:1f:62:b6:e3:de:d2:ea:26:92:
8a:a9:d8:23:bb:7b:b0:28:6a:fd:7e:ed:f7:47:ae:3c:31:4f:
03:40:08:1e:cb:05:7b:da:87:0e:2e:9a:e1:72:39:18:2b:1e:
98:11:66:72:95:1f:29:d3:28:50:09:a3:3a:76:68:32:7f:47:
d0:dc:01:6a:3e:b7:f7:77:51:6d:3c:76:25:4f:72:10:d6:f2:
37:92:e5:c5:fc:4a:fb:31:aa:af:26:08:34:9d:bd:dc:e5:f9:
6c:37:36:e4:ce:63:24:2f:f7:86:1d:98:7e:d6:c1:29:df:35:
c2:6b:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:41 2025 by rpki-client