Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft
File: UGF1T3aJFp9qFQZQlUcmcrorRYk.mft (raw, json)
Hash identifier: R3xpudFr+E9v5nFRH3zeWyg5+b7f4WN/yXy6lgfdenE=
Subject key identifier: 94:ED:54:24:98:D9:31:23:B3:F6:14:22:5C:B6:1F:15:24:8D:1A:15
Authority key identifier: 50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
Certificate issuer: /CN=5061754f7689169f6a15065095472672ba2b4589
Certificate serial: 0194BC72F64F9A7FF0838F0FF8E3CCAA165D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft
Manifest number: 0B9E
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: UGF1T3aJFp9qFQZQlUcmcrorRYk.crl (hash: Ts1IWb9wjWusHVgb7sKyzlf0hWaRsu/3jjYbxLPsr2M=)
2: yiSfs72_nEyzYSAodCILSS2FNUg.roa (hash: S9gHpNvUCJD2H4bcxuT5WWB4Uck7rHXNRIxCLUlb2hE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:4f:9a:7f:f0:83:8f:0f:f8:e3:cc:aa:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5061754f7689169f6a15065095472672ba2b4589
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=94ed542498d93123b3f614225cb61f15248d1a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:17:39:d0:2f:ba:a1:d8:a4:ad:de:b2:ff:
dd:7e:41:fb:02:2b:2d:45:56:4c:a1:24:3c:a7:ec:
ff:b7:40:7a:3c:c7:a4:0f:fc:9e:5e:aa:ed:17:b3:
c0:22:86:2d:52:46:e4:f3:11:e8:84:8e:9c:66:ec:
35:91:2f:c2:7a:d8:34:60:ba:2e:8a:0b:fe:59:f4:
70:74:e0:4c:13:a4:87:83:4a:a8:7f:c1:96:1d:c9:
3f:6f:29:9e:ca:4e:b8:1a:8a:ce:d4:ca:20:2d:38:
2b:c0:2d:f0:f6:cf:0e:43:f9:09:f2:b7:13:cb:3d:
5c:69:56:1e:ac:0e:74:06:07:ad:20:98:57:91:9e:
5d:f3:cf:b9:27:a5:5f:a4:f7:6f:60:0d:a6:96:68:
94:a6:59:9c:59:9e:88:a9:50:5f:6d:63:e6:3f:d9:
67:be:3d:46:5e:16:bf:48:26:52:eb:2f:8f:5f:9a:
dc:74:cf:82:f2:04:89:ba:51:3a:ad:90:b2:6c:1e:
68:42:4a:1b:84:70:b8:40:4e:da:14:30:4f:09:ae:
11:d7:c3:45:93:c8:36:90:09:f0:b3:40:ed:42:59:
5c:25:2e:60:4f:c1:f8:50:dc:d6:9e:80:14:d5:3c:
59:f2:ed:f9:88:51:9f:3c:7f:70:53:b4:7e:d6:bd:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:54:24:98:D9:31:23:B3:F6:14:22:5C:B6:1F:15:24:8D:1A:15
X509v3 Authority Key Identifier:
keyid:50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:64:91:1e:4f:e2:93:93:1f:b5:40:8a:5c:18:62:dc:c8:6a:
02:21:0e:be:09:50:2f:f0:76:9f:79:25:b2:fc:4c:91:1c:8f:
69:4e:1c:bf:b2:a2:fb:9c:df:d0:46:c5:f6:32:28:c3:ed:ca:
ec:56:01:76:e2:88:5b:59:9e:3f:a5:8b:ed:61:91:ec:8f:15:
e7:b3:48:c2:d7:50:7f:36:bd:24:63:0c:f2:35:30:18:d9:3b:
60:7e:9d:98:d9:db:7b:f0:2f:d9:ec:59:10:95:1d:54:bb:94:
df:27:40:53:44:4b:c9:42:55:6d:3a:98:6f:af:d0:eb:60:ca:
48:23:3f:1a:2f:55:41:69:71:d4:d4:e4:03:da:1b:6e:54:c5:
36:21:d7:fe:f0:29:08:d5:82:85:09:14:50:4d:44:6c:c9:34:
c0:ce:2d:56:9c:3d:bc:d8:e2:65:9a:93:f8:d8:f5:67:d8:5c:
52:d5:bf:cf:75:e0:a5:7a:da:a4:24:05:1d:11:0c:04:d8:19:
9f:73:a7:30:66:a7:5a:76:69:6b:20:f9:ac:3e:a7:62:5e:36:
80:d9:f9:fc:c7:df:ee:60:fc:b9:ea:34:a2:78:96:68:8e:14:
ea:68:c2:ad:8a:ab:34:fa:bf:fe:fe:55:f7:83:d7:18:5a:61:
e1:1e:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:41 2025 by rpki-client