Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: jvzilCkUWijjQGRiV1iTP7ae1R/wpmg6CzTnK2WuqwQ=
Subject key identifier: D0:12:F5:0D:50:F2:30:09:42:70:2A:F3:09:4C:92:B3:42:72:70:44
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 0194BC72EDAE6D786699828FE173720BAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 13A0
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: yk9dv4nn5bbk+DvN2qSXz6bZo7NaFPMC7hydI/nqncY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:ae:6d:78:66:99:82:8f:e1:73:72:0b:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=d012f50d50f2300942702af3094c92b342727044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:30:4d:be:98:33:88:11:f9:8e:58:4e:b0:
0b:9a:a0:6e:af:41:53:9c:1d:4f:66:a0:27:85:92:
8e:e0:c5:6c:d9:ad:74:09:5d:ee:78:8e:b5:26:25:
10:7c:5e:98:20:85:08:66:e7:8d:41:f5:76:be:08:
3f:bb:52:e3:42:6a:b7:ee:9e:ef:e2:9e:78:b2:9f:
0c:2d:4b:97:05:d4:30:bd:9b:d6:c8:c5:05:66:53:
ba:f6:79:e2:b2:f4:84:a2:ae:01:78:3c:12:86:6d:
00:eb:fa:7f:16:bf:7e:85:9a:7a:87:67:1f:43:3f:
6a:50:45:4c:38:4c:a9:a2:ff:75:9f:8e:f8:61:4c:
81:b5:f8:f7:49:fc:6b:bb:0c:89:1f:df:c7:28:a3:
20:ef:9d:dd:ca:46:f9:fc:48:c2:60:4d:01:93:39:
6d:03:e7:ad:c7:d1:57:88:f2:9c:2b:eb:e1:15:b8:
7b:01:91:2c:4a:93:30:12:24:b6:3b:67:2b:bb:94:
93:4a:37:8d:c2:4a:d4:2e:7b:24:a3:82:6a:cb:11:
cf:4a:61:93:c6:f1:cf:ad:8c:cd:07:20:92:59:b6:
59:ec:90:fe:5d:3b:0d:b6:39:55:29:be:ed:6b:20:
be:af:0d:11:a6:97:27:d3:52:6a:d6:8d:82:d6:40:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:F5:0D:50:F2:30:09:42:70:2A:F3:09:4C:92:B3:42:72:70:44
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:70:c5:1a:f1:3e:b2:63:f3:bb:42:16:5b:c1:d8:be:05:
a1:c2:60:04:63:f0:6f:b0:40:f9:04:5d:ee:51:a6:cf:78:73:
55:59:73:78:96:80:7b:1a:cc:23:3c:c3:43:42:4a:88:79:28:
82:0f:80:0e:0e:65:5c:0f:d7:ad:00:e6:01:22:cd:fd:35:ea:
85:c9:eb:8c:d8:6c:46:64:17:24:c9:5a:aa:69:12:ce:57:b6:
ba:c2:f3:34:19:47:40:db:06:99:30:9e:57:22:46:5a:53:7a:
8f:91:c1:e6:bc:00:1c:b0:3e:fe:90:b3:bf:94:95:64:25:0d:
9f:e6:87:d2:10:f0:5d:c4:83:a4:3d:80:72:05:a1:ad:da:25:
a3:fa:8e:47:d6:5a:c5:7e:91:17:99:1f:c2:15:37:1d:12:27:
8d:1f:f0:64:c1:3f:6d:18:3f:0d:b8:3c:45:fd:16:77:75:0d:
93:39:61:a9:46:e1:5a:7c:18:7b:68:f7:a6:08:b7:cb:48:b9:
bb:af:05:15:ad:a3:c2:83:50:21:be:08:e7:77:40:99:14:df:
95:60:5f:86:89:1a:b9:48:68:23:fd:f3:b3:df:2c:09:21:eb:
c0:3a:cc:58:4f:56:b2:4d:7f:ce:a0:02:38:97:45:2e:70:43:
b7:a3:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:25 2025 by rpki-client