Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier: 9YG5gUKPWFPuUkr4yPUs3eC8c/t8Mgc1YZf/jvRVgE8=
Subject key identifier: 17:8F:3C:6E:B4:9F:65:22:6B:FF:83:20:5A:BA:1B:FF:84:3A:22:F0
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 0194BCE0CC9F780BB90CECCDD3751CDF85AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number: 0970
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: GoiZfyB81lKATNd_KFA7YnPWFpM.roa (hash: YbMwTV3MQ9D3n56EjVHhkL6PRU8hYP51h8oBrPXUcjo=)
2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: 7i8iQE9q3EoeAMT81nBGrmQ7KSdNGL4eCZrGp2/ty5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cc:9f:78:0b:b9:0c:ec:cd:d3:75:1c:df:85:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=178f3c6eb49f65226bff83205aba1bff843a22f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:c8:a4:a3:20:f8:af:8b:24:30:09:97:08:
a5:94:e0:97:bf:5e:64:e7:e7:e6:f8:c1:37:f3:c7:
94:a4:f9:c5:98:91:b6:ba:36:2f:0f:ec:f0:f4:d1:
3e:81:4e:32:ac:d3:8c:67:d0:56:09:05:7e:e9:0a:
18:e4:52:f7:1b:ed:24:b3:ff:76:7c:6c:95:c7:93:
6f:18:8a:aa:e6:13:64:02:a1:0f:f5:33:07:32:e3:
01:f9:ce:8c:73:d6:76:57:ab:5f:41:ba:79:42:ba:
ea:92:4c:fb:37:48:77:c2:e2:cf:71:bf:65:d2:53:
16:b4:b2:80:5a:68:e6:a4:f2:7c:9e:b1:0c:0e:2c:
c5:ea:85:86:b0:13:9c:a1:83:8e:b6:aa:90:e6:d4:
f7:c1:8f:53:ea:55:d1:62:dd:91:7e:09:e1:54:30:
50:f0:a8:d2:ca:ff:18:e1:b7:31:f0:0c:9d:ba:ac:
4c:39:95:a4:55:b7:3e:d8:61:dc:f7:d9:31:c6:ab:
5b:4b:0f:38:1a:13:17:5a:a1:5d:a5:68:dd:35:13:
b1:87:9f:8f:2f:d2:f1:74:c6:ba:09:2c:72:90:23:
04:2e:32:27:0f:45:58:bd:b7:b4:00:15:e6:15:eb:
1a:79:a5:f2:60:33:54:4b:1d:f4:6d:56:44:bc:95:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8F:3C:6E:B4:9F:65:22:6B:FF:83:20:5A:BA:1B:FF:84:3A:22:F0
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:57:6c:99:e1:3c:45:ca:f3:a1:6e:e6:76:cb:1f:5c:a1:
3b:a3:dd:a4:c1:63:aa:5a:96:c6:11:14:38:5f:77:ad:3b:ad:
e3:43:8e:ba:80:4a:e1:bb:6a:dd:90:6e:02:31:6b:2c:7b:70:
99:92:4f:89:58:2a:d1:36:6a:6b:d4:cc:d5:aa:dc:9d:92:87:
8f:32:82:1b:4d:a9:58:00:33:40:ee:a9:67:d3:96:31:2b:2a:
91:0a:4a:64:8e:f0:81:dd:21:8a:e0:10:db:e8:a9:55:d6:dc:
31:98:32:56:d6:bb:3e:8e:0d:c0:2f:9c:3b:43:e0:71:8d:63:
a2:31:ba:da:89:1c:64:fb:ac:db:7d:05:30:8a:af:cc:18:38:
e2:1a:c2:12:df:46:9b:f9:ef:dc:a4:8a:12:4d:03:fd:9e:52:
ba:81:48:98:67:01:79:be:64:58:dc:fa:f6:fd:b6:79:e9:76:
81:90:61:62:31:9e:b9:8c:65:03:51:c4:bb:97:1b:35:17:00:
f7:29:77:24:f4:5d:74:3d:1f:63:9e:b2:73:7a:6d:ab:27:dd:
ea:e7:4c:3e:47:43:69:37:94:68:16:36:98:6a:59:1e:ea:ad:
69:7e:48:9b:c4:77:cd:ea:76:87:af:e2:4a:19:4d:b3:8f:ef:
ba:90:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:43 2025 by rpki-client