Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: SE2VcackAFFwvLM9KC/Ok9zxRoL1Gzpw9A91AzEYu5Q=
Subject key identifier: BB:E7:34:F0:EB:80:2A:1D:40:AD:56:DA:10:9E:AA:04:64:E9:9C:99
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 0194BCE0F1EB1E7B8E88C7E260C763B93A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0B91
Signing time: Fri 31 Jan 2025 15:00:46 +0000
Manifest this update: Fri 31 Jan 2025 15:00:46 +0000
Manifest next update: Sat 01 Feb 2025 15:00:46 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: J1Hncvq92gzQvki5u0ghl2xYQJkicBTO560RJKXQ/AY=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:f1:eb:1e:7b:8e:88:c7:e2:60:c7:63:b9:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jan 31 15:00:46 2025 GMT
Not After : Feb 1 15:00:46 2025 GMT
Subject: CN=bbe734f0eb802a1d40ad56da109eaa0464e99c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:13:db:69:21:4e:31:94:e0:fb:5a:e8:09:
23:f8:a0:00:70:bb:af:65:d3:a1:21:8b:21:93:b0:
32:bb:a0:36:e2:ec:bf:e4:53:94:33:08:2b:9f:a6:
77:c7:c3:c5:d1:1c:f9:2a:75:6b:df:46:da:4e:3b:
ce:15:c1:e3:84:18:8a:41:23:fa:eb:5e:57:14:c1:
54:fe:58:85:9c:b1:58:04:82:68:87:6d:2d:02:57:
32:9c:96:4b:c3:22:30:c0:ea:0c:da:71:cc:99:01:
08:85:26:fa:fd:28:cf:14:7a:9d:09:76:ed:4b:dc:
86:ad:7f:bb:15:cc:15:2a:28:d6:7b:ef:80:1e:13:
6d:71:cf:be:ab:12:27:a5:de:27:e9:ad:af:24:b1:
5e:46:92:98:ed:85:dd:5c:64:f5:7c:f4:ca:27:80:
2c:fa:dc:50:c8:e1:c9:72:e9:fb:8e:d8:10:67:59:
a4:b7:20:56:16:4d:4e:49:fe:83:a4:5a:fa:a9:cd:
a9:09:73:55:5d:a6:1b:7d:42:83:c9:8e:1a:72:3d:
3a:98:98:de:fc:ff:85:d8:4c:37:9c:28:62:a3:04:
b3:36:12:e3:0f:e9:21:bd:46:ea:e9:63:48:14:6f:
07:bd:30:2a:89:6a:37:b6:ed:2d:49:e9:c3:23:38:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:34:F0:EB:80:2A:1D:40:AD:56:DA:10:9E:AA:04:64:E9:9C:99
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ac:d9:39:34:54:4f:51:b4:cf:63:b0:aa:66:35:6e:8d:9c:
a5:28:5a:c7:e7:af:b0:d5:4d:11:03:03:d1:89:0b:b4:9b:6c:
6c:89:23:12:5c:8f:c3:b1:79:bd:0a:03:d0:2f:4f:04:fd:2f:
4b:2f:23:2d:82:de:b6:00:d5:77:67:6f:31:08:d0:a6:39:ea:
c8:19:5e:94:57:63:7c:b4:41:dc:e4:6e:70:2c:91:6f:6e:c9:
23:2c:7b:a3:6c:1b:8b:8b:6c:ce:6d:13:00:22:45:39:c6:1d:
71:b7:9e:82:fb:c0:35:d9:d6:dc:73:ee:26:2a:e8:f1:e9:c2:
ce:36:bd:3c:9f:a3:b4:a8:a7:cb:7f:b0:f7:8c:58:85:20:c0:
cd:5d:80:54:64:ae:8a:9d:63:06:fa:52:6b:1e:c5:26:4c:55:
12:25:5c:a9:0f:ae:a2:46:65:29:c5:a6:59:4d:a8:4e:71:8a:
19:0b:55:b2:9c:33:b2:4e:89:27:0e:a2:55:96:2c:d2:c3:bd:
ee:b0:c3:43:fa:d2:a3:a3:3b:60:6a:d5:96:89:bf:80:61:5f:
0a:1d:d6:ad:dc:bc:04:16:cf:98:f9:d5:36:01:7b:19:b9:61:
3a:c2:f7:54:28:19:5c:2b:07:c3:29:2e:d1:8a:a0:39:01:46:
72:4b:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:39 2025 by rpki-client