Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: 96WCl7MfTb37sGKU+rxkoLieqIMX/CZord8EUMQ04RA=
Subject key identifier: 91:AB:92:71:42:B4:C8:DD:4A:B8:0F:06:7D:C2:C9:A9:3A:8A:00:F5
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 0194BC04A4A328EDBF9615A2252BFD09E687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 12F4
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: lAUoG6ERQJT0mt18/XeifEldnacOUwCaJg7vCJ+Wm9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a4:a3:28:ed:bf:96:15:a2:25:2b:fd:09:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=91ab927142b4c8dd4ab80f067dc2c9a93a8a00f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:95:0b:65:85:5e:f7:a3:b6:21:75:59:03:
1a:6c:8a:1f:78:83:0d:fc:e5:4f:03:d4:eb:51:d5:
71:45:bc:3c:4d:68:99:0c:29:ae:10:15:d9:f7:e2:
d9:2a:1d:ee:28:c2:6c:91:d8:aa:6f:b9:ce:bf:50:
77:af:e5:2d:49:e8:82:23:e3:49:23:0d:cc:a1:df:
4f:ab:d3:e9:fb:ed:7d:65:3f:c7:b5:3b:8b:da:74:
c7:7b:34:8d:b2:48:3e:a2:7d:50:03:de:7b:5b:3a:
62:ca:63:dd:c7:1c:9c:b7:99:0e:02:17:e8:04:38:
67:e6:ae:42:ef:eb:8c:34:50:ec:da:46:74:5c:df:
1e:4b:e7:cf:17:fb:68:aa:05:fa:07:ee:09:cd:09:
25:5c:c4:e7:b6:52:87:ad:77:6c:a0:2f:30:23:cf:
6b:a6:0e:6d:a4:42:7d:06:27:29:7b:0f:91:e4:07:
ef:3c:df:bb:7e:eb:cd:ce:4f:92:81:06:4d:2b:d2:
6a:50:80:c8:fa:8c:c4:f1:8c:61:45:c9:86:a8:ce:
63:1f:f3:41:77:a9:21:17:46:e0:7b:39:e9:5b:8b:
90:a3:f8:d8:21:18:5b:0b:a3:7f:b8:71:5a:a8:f3:
e6:38:5a:88:d2:8d:09:08:a9:0a:84:05:dc:9a:b7:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:92:71:42:B4:C8:DD:4A:B8:0F:06:7D:C2:C9:A9:3A:8A:00:F5
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:45:c5:58:39:03:d2:0a:1b:54:21:58:ce:29:3e:82:fc:da:
72:09:94:db:ad:97:7b:7a:b1:cd:64:5f:7d:d7:71:5d:70:d0:
1d:9f:0f:e3:1c:23:49:0c:48:b1:77:35:9b:69:67:50:09:9b:
54:95:f0:c8:46:2f:0b:64:95:06:2c:e2:ee:75:4a:35:7d:8b:
86:25:f3:d6:b7:d8:70:9e:c7:b3:89:33:21:4c:1a:d3:7b:f5:
93:98:65:cf:2d:84:1d:a0:f7:9d:b4:78:fb:f7:d1:75:08:49:
c1:d1:59:b8:d8:37:31:75:0a:31:29:ef:dc:b8:3c:e7:78:e0:
12:7a:89:a3:19:19:3f:9a:da:57:5d:4c:8d:e7:21:3d:93:e5:
0d:c9:9a:42:bf:ec:cf:7d:0d:1e:08:34:d9:37:a5:f4:82:70:
d1:ff:2a:94:cc:4e:af:9b:dd:cb:2a:c8:b9:23:d9:07:85:45:
f2:a5:96:4c:f0:98:a5:0a:87:4c:7c:f3:43:e2:cd:31:78:c9:
da:87:bb:41:d4:71:f4:98:47:f1:af:86:5b:c4:04:e9:55:d1:
14:94:5b:23:99:66:2d:c0:d6:ee:3b:7c:d9:ff:37:e5:7d:ab:
ba:a9:aa:0e:54:08:97:89:be:b2:75:60:d7:c9:9e:32:06:6a:
63:a5:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:18 2025 by rpki-client