Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: xwxeCr9BuL6Cy2bFaSNgUKhrWs17MF6xqRRnW2X9mjA=
Subject key identifier: DD:08:91:12:48:82:FD:A0:9C:26:9A:CF:48:D1:D6:49:DA:B9:BB:97
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0194BBCE7B3221E38D6B8D33FFCBE9C0ABB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 07F0
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: qz7DVoiVFPMg+pZIw+Rqh3DRYP35mMshovejb3EVCKw=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:32:21:e3:8d:6b:8d:33:ff:cb:e9:c0:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=dd0891124882fda09c269acf48d1d649dab9bb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:b4:a0:d7:0b:1c:ff:b1:84:60:3b:5e:40:
1f:3d:3d:2f:51:02:7f:55:71:7b:58:1a:ed:dc:f0:
95:84:ed:4b:b9:2d:39:cf:a7:5f:61:b2:d4:9c:d8:
d2:92:da:fd:c6:9b:75:3e:a3:c7:d0:96:70:b5:ba:
84:a2:0d:f7:e6:c3:db:03:6a:ea:34:5f:51:7e:0b:
5d:e8:b4:10:5b:59:9f:fd:2d:4e:3d:53:5b:40:0a:
a7:4b:33:0a:a2:43:09:eb:be:47:0e:fe:58:d0:82:
7c:eb:90:a7:d6:d0:a4:a0:f4:92:5d:a0:5e:29:f1:
d8:92:af:9c:81:92:67:9a:6f:a9:53:d3:fb:e9:48:
84:cf:b0:b2:b1:71:4d:f1:6a:aa:28:fd:75:fe:92:
17:e7:aa:3a:60:a5:50:8a:0b:1a:a5:b7:2c:8b:37:
8a:b9:a3:7e:57:95:7e:90:68:82:ff:ae:ac:57:12:
2c:07:1c:bf:d0:56:33:5b:d3:94:9e:89:e3:fe:74:
c4:02:1a:99:08:84:1d:f4:10:ee:b4:28:d2:40:5a:
e6:57:cc:26:a6:8d:91:de:25:17:0b:8c:70:5d:a5:
86:43:60:c9:a2:28:81:59:17:4d:98:10:a2:9b:12:
d0:90:67:b1:32:09:0c:f1:69:e3:f9:0f:60:68:b1:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:91:12:48:82:FD:A0:9C:26:9A:CF:48:D1:D6:49:DA:B9:BB:97
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:ca:51:11:19:1b:35:90:bd:af:e3:55:70:f6:d2:59:7a:
ce:b5:21:79:e3:c2:9e:fa:2f:d9:00:cf:5c:a1:93:50:bc:cf:
59:9a:b3:d6:47:ab:e7:82:36:d3:b3:61:b3:e2:02:7e:4c:e3:
38:5d:03:c3:59:7e:ed:a4:9f:17:e0:42:31:e7:bc:d0:68:0a:
d3:63:ac:6b:41:a2:a6:10:b2:61:f0:ca:0d:b7:97:52:da:b9:
e9:76:f2:0c:00:35:cc:22:fd:76:cf:31:40:49:e1:01:56:4f:
f4:7c:c6:d2:48:ba:11:67:ed:67:d0:c0:dd:fb:96:14:97:3e:
cb:56:1e:20:94:bc:3c:ef:a4:bd:a3:94:5d:1a:98:5f:13:89:
ae:9d:f1:75:a2:86:6f:cc:45:f9:2e:ff:72:12:67:14:13:32:
a6:b6:c6:40:bb:a6:11:5b:6a:fd:27:14:87:d7:9e:7b:7d:ee:
e2:02:f2:09:31:4c:1a:3f:b2:76:5a:95:fe:65:28:06:7d:13:
84:c8:70:df:b5:d6:e5:a7:07:3d:bf:72:60:07:c1:33:d2:57:
85:60:c1:96:88:01:b8:0b:c8:e4:f2:81:8d:30:b0:08:5a:67:
e9:3f:13:da:a0:1e:04:51:0c:0c:1d:68:f2:91:e5:62:65:e8:
c0:84:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:52 2025 by rpki-client