Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
File: upnU2xLk8LAC9g6SzFM-b4gtFQg.mft (raw, json)
Hash identifier: r3134+So2gU/l3Ocj5HUcNiQlyiFl6xB2ypItEGH7NI=
Subject key identifier: AB:FC:64:6A:2C:68:0F:FB:F7:EE:6B:AC:ED:7B:2D:1A:CB:CC:12:40
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 0194BC3C3853504702F7FD9FD433E4A37F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
Manifest number: 0F31
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: 8YIAR5sWr0I8DxBlTYWLr-wehd4.roa (hash: 2GhhwLBXrsl+hdUevrhZ5dBt1jzrfau++jD+6VRkn7o=)
2: ZQgVOtlKeyFC38M2101OMHMsXQE.roa (hash: yhIhd3mmsJTwIKHcA4cRnEfn0qLPxogW2a77pLgopes=)
3: upnU2xLk8LAC9g6SzFM-b4gtFQg.crl (hash: ny7vGsyPECXNMlwRybKNFTOCjfSol3wDchBL8lLaaV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:53:50:47:02:f7:fd:9f:d4:33:e4:a3:7f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=abfc646a2c680ffbf7ee6baced7b2d1acbcc1240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:5c:ae:19:12:20:78:24:b0:55:a3:7b:8c:
22:43:2e:a3:a5:14:4d:c5:30:06:9e:8c:67:84:f6:
bd:e7:89:e8:b1:a0:82:fc:1f:e4:5a:de:8d:4c:23:
2c:da:c6:79:8d:39:09:de:02:71:e3:4d:62:c9:45:
95:ec:94:a3:4e:0a:63:eb:e9:57:bb:81:e3:3b:f8:
e5:a1:1c:ff:e9:1d:b9:70:c8:69:27:3d:b6:38:25:
0f:08:fb:3b:9a:54:5b:22:36:cf:46:a9:32:c8:ee:
c7:b7:39:d6:b5:3f:4f:bd:94:b3:e8:ef:0b:06:83:
75:55:f3:0a:54:52:10:bc:3c:fc:a8:29:a1:bf:ef:
d7:67:e3:e7:f6:81:a2:5f:3c:9c:2d:90:50:9d:ad:
6c:37:b0:45:b8:9f:05:1d:ba:fd:65:e8:21:19:62:
25:36:8c:d8:c0:6e:9e:16:f9:2e:e9:2e:f6:1f:8c:
b9:16:08:a2:e0:40:6a:19:a0:6e:e1:a2:7a:53:d1:
6f:d5:10:be:d0:62:f7:56:04:b1:24:91:34:85:b0:
b2:de:d4:2a:64:6d:ab:d5:88:f2:11:f3:fb:c7:1c:
24:42:0d:53:f6:40:b2:e2:3d:10:90:e0:97:15:1a:
4b:1d:03:d0:c2:2b:a2:eb:47:72:51:3c:04:0f:d0:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:64:6A:2C:68:0F:FB:F7:EE:6B:AC:ED:7B:2D:1A:CB:CC:12:40
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1e:9c:c4:c3:cb:8b:85:b3:2d:d2:26:68:54:66:c5:91:e3:
68:8c:f3:da:74:be:6c:ad:e5:5a:d0:58:e9:02:a5:d3:5d:11:
36:5c:f6:fe:86:1d:a4:21:57:bc:aa:8d:97:17:5b:eb:a5:1e:
e2:b2:aa:9e:d1:8e:e9:86:f1:05:cc:52:97:ee:c3:b5:a8:4f:
c0:6d:39:e6:11:bb:f5:2f:77:a4:5b:e2:e7:a6:d1:db:73:09:
24:e3:f8:4a:a2:73:59:37:6d:f2:60:a1:94:fa:aa:fb:cd:45:
29:7c:f1:ee:7b:60:4d:0c:7c:d3:71:51:1f:95:1a:c7:4b:97:
62:fa:60:6e:b6:cf:da:e3:3c:9f:ac:1e:11:99:2d:cf:7d:01:
ae:97:6c:4d:d0:36:ad:f0:d6:2d:5f:43:63:68:56:53:0a:42:
da:22:a4:f5:d2:a4:16:40:d9:6f:ea:c4:fc:f2:a8:1b:71:cf:
8a:e8:50:29:49:55:14:92:0b:83:3a:b8:49:18:3e:2d:4b:25:
79:37:82:96:9f:1e:9e:54:de:85:16:59:22:1d:1f:86:36:70:
25:6b:28:15:1c:b3:4d:b8:00:49:9e:20:26:1e:61:31:e9:0b:
67:68:49:c8:86:3d:65:84:0b:dd:b5:a7:03:c5:cd:70:bd:1a:
a1:4e:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:04 2025 by rpki-client