Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: Y7fjmjZ9Q3jzFO8pu7RyCU/xO3PZyQ0dUpBDuPp9C2s=
Subject key identifier: 38:94:C1:AC:89:74:56:BC:71:80:35:46:4B:50:85:36:C8:3C:74:31
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 0194BD4EA123C4521FDF50B699E21E978681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: T41cmaaqx9StJ5s6cCNvelB5qyBOtQE3gZj5ZmoR2U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:23:c4:52:1f:df:50:b6:99:e2:1e:97:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=3894c1ac897456bc718035464b508536c83c7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:48:0a:ec:e0:8b:66:cb:28:80:b3:68:df:
f9:61:ef:27:7b:dc:76:bb:e0:d6:5f:f2:ab:a7:89:
b9:cc:60:dc:4d:43:d9:52:48:50:ff:b9:b6:c3:c8:
47:d4:1a:fb:f5:2c:9d:5e:e2:e6:7a:fc:30:66:be:
46:bd:1b:f5:de:59:e1:ad:20:64:96:1a:cc:c4:0d:
51:2b:99:1a:52:64:fb:04:8d:52:59:72:79:6f:b1:
15:57:db:34:f0:71:3b:cf:a7:f3:58:98:fa:7a:af:
70:65:7d:0e:fe:79:ba:d2:5a:2b:7f:47:f9:c4:7a:
11:06:87:01:e3:1b:f1:81:1f:ac:5f:85:3b:fe:02:
fe:df:76:cc:59:e0:fa:c2:c3:bf:37:1d:db:57:1f:
3e:57:9e:7e:bf:95:f6:a9:38:63:5a:46:a8:b3:0c:
25:2f:fa:ba:f8:f6:42:e0:37:a0:19:16:1b:6f:1a:
ad:8a:6d:73:f5:90:d2:48:22:6c:7e:f9:b0:84:fa:
f3:d1:f5:35:93:30:2f:53:06:44:26:f3:d3:8e:c2:
2e:34:ad:ef:0c:88:31:b2:00:7e:2f:e3:f9:72:c0:
0c:93:28:ec:de:cb:cb:76:76:1e:6f:2f:62:a4:6e:
50:8e:83:3e:a4:fb:77:01:54:4a:d5:5d:b6:e8:e2:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:C1:AC:89:74:56:BC:71:80:35:46:4B:50:85:36:C8:3C:74:31
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:43:a3:e0:6f:5e:c2:95:7b:2b:16:b9:12:82:5f:fd:f4:
21:e1:e6:0b:cc:6b:4d:ab:13:40:59:0b:6b:d2:11:f1:7b:ce:
55:43:46:82:9d:6e:7c:f0:05:2c:88:2e:b5:e7:71:1e:2f:f1:
9c:d0:b4:ac:8a:43:5f:53:1b:d4:a1:c8:04:48:17:74:f1:c2:
b8:56:0f:42:03:0d:72:44:11:e2:8a:3a:71:33:fc:4c:52:b2:
3c:31:2d:98:18:76:91:ff:87:86:00:bd:fb:1f:68:c1:e5:7c:
19:d9:34:91:e2:b7:97:bb:6e:8e:63:e4:fa:70:5a:cc:94:07:
74:a3:b7:ff:e9:3b:10:1e:fa:7b:61:4c:db:dd:d3:56:12:59:
0e:35:44:ce:7e:d2:dd:ec:24:95:f7:a6:2f:03:c8:5e:c6:74:
b6:92:30:b1:71:af:5e:e5:0c:2f:09:bb:4b:e6:cb:80:e7:6e:
06:65:c1:0d:28:18:a3:30:95:ed:12:a6:d2:c5:4f:cf:15:80:
fe:38:fd:54:35:00:f1:a9:ca:a1:7a:f9:b0:b7:96:2e:50:c5:
fd:0b:bc:f0:61:c5:61:3e:d0:2f:cb:55:0e:1b:40:25:b3:7b:
8e:1b:2d:11:d0:af:0b:60:43:31:8b:25:cb:09:18:dc:90:17:
d8:60:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:25 2025 by rpki-client