Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: rnheKQpUrFvSxd2C0NjRNJqZZw+ADMib8wi9suf27mw=
Subject key identifier: 7F:21:F6:B5:B7:02:4C:1F:A3:11:AF:11:F2:3A:9E:08:AA:B3:CD:B5
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 0194BD854EC8F4502ED98DE6D62D50C6851E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0CC3
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: nm9lf5P62ye24IeNan+//JM2JrjSBlQmuDfO6o/n5AQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:c8:f4:50:2e:d9:8d:e6:d6:2d:50:c6:85:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=7f21f6b5b7024c1fa311af11f23a9e08aab3cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:f0:42:8c:1a:ea:07:70:41:ce:93:7f:a9:
e8:b6:95:a4:38:b6:92:ac:64:3f:52:bd:ae:d3:53:
fb:6b:70:6d:0f:ff:4e:dc:01:2e:09:de:42:72:53:
c9:14:3f:97:d0:2d:41:6d:0a:24:b8:51:04:ed:ac:
45:6a:86:97:be:b7:b0:e6:83:98:d7:7b:ee:a9:8b:
8d:4a:c5:07:0b:0f:94:e9:b8:ab:c3:24:6c:cd:33:
62:3a:9d:62:03:72:16:c9:ff:a7:3b:20:8f:1b:75:
5d:e2:d0:69:d0:f5:3d:d4:cf:64:a2:25:b3:43:11:
6b:8e:ac:49:6c:c8:22:78:44:4a:34:75:53:4a:5c:
62:0d:00:b0:25:d3:e7:52:18:00:94:15:1b:c4:4d:
f6:8e:53:29:56:7d:48:76:68:e1:92:48:03:e3:d7:
58:35:49:42:78:af:61:0e:fe:d5:85:76:62:10:a6:
cd:17:32:f7:7e:4d:11:61:1c:36:5c:b9:5e:a2:f4:
90:a7:52:ef:a9:9a:61:bd:11:d1:ce:08:27:f5:4a:
ab:ce:90:1d:73:28:8a:54:ff:54:d9:78:80:6d:c5:
5d:6e:c6:20:c2:41:ec:9d:93:f9:fe:28:c2:12:b3:
b3:ee:6f:2c:4c:ee:a2:c9:be:57:46:27:c0:82:39:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:21:F6:B5:B7:02:4C:1F:A3:11:AF:11:F2:3A:9E:08:AA:B3:CD:B5
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:5e:47:c9:6d:6c:b5:41:16:d4:14:2b:4b:00:a4:aa:3e:
72:19:76:3b:ea:d4:fa:a2:33:71:12:c6:4f:00:63:c6:a0:1c:
31:1c:7b:34:08:d2:67:f2:94:08:f3:47:8b:68:80:3b:8d:f4:
c7:94:a0:dc:30:fc:d2:96:9d:16:48:5f:30:07:ee:90:0f:21:
04:59:a2:45:cc:db:36:aa:bf:ce:55:6b:09:6d:66:fd:e6:0c:
7d:e3:93:98:c2:8d:56:76:e6:de:2f:b3:e8:14:2c:ac:89:b9:
5d:3b:62:cd:90:7f:63:ec:9c:13:79:20:89:dc:2e:6f:f9:56:
60:83:9f:97:1d:e7:28:b1:ee:15:84:64:fa:c2:60:5d:fa:de:
75:29:88:64:10:3d:2e:77:96:65:28:5c:65:00:3a:0a:29:81:
a7:16:93:76:8a:80:60:48:14:90:53:f0:e2:86:60:68:eb:46:
a3:64:f7:84:55:18:c1:5b:b8:2f:6a:4c:7f:2c:08:45:0d:e6:
cc:eb:2d:35:81:e5:e7:0a:ab:9b:d9:e7:ef:04:93:25:6c:26:
3d:31:72:66:33:49:79:42:35:db:d1:1e:7f:0d:86:5b:51:41:
bb:d0:be:d1:aa:5c:7c:7d:47:12:f9:7b:f3:8a:e9:15:b1:bf:
f0:1f:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:54 2025 by rpki-client