Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: a/9mxBnGYik5yVREmu6sFkzYbZ6xVS1N5Rlh4WrTh3w=
Subject key identifier: D0:FA:38:AD:01:FE:7C:21:A7:68:2F:21:3F:59:51:FF:7C:83:6F:22
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 0194BD4EBD8511E8DC90AF6EDB42F49CDB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0CA9
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: uEe3MC0qTIHihbD0vnidKVLe/Ky0gg5MaUuei3gWt64=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:85:11:e8:dc:90:af:6e:db:42:f4:9c:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=d0fa38ad01fe7c21a7682f213f5951ff7c836f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:96:0f:9f:da:05:d1:4a:10:90:25:c6:5d:
a0:2f:7c:96:34:eb:71:ac:9e:c0:a6:47:96:67:82:
2f:48:fb:a9:60:30:a8:41:09:35:ff:52:22:b4:af:
ab:e7:e1:6c:70:3e:43:98:f3:40:10:88:d7:3f:31:
a9:91:fa:94:9e:60:6a:8e:b4:08:89:2e:2a:7d:20:
67:1f:62:83:59:ef:b4:cd:12:ef:3f:c0:95:07:92:
c2:3d:72:04:0b:27:ef:69:09:6c:36:99:c3:db:35:
01:d3:4f:e7:47:1b:a8:7a:11:ca:76:cb:a1:16:57:
59:93:e2:79:70:f2:9c:07:fb:94:28:62:05:83:a7:
26:0d:a7:ee:29:21:a1:0a:ee:3a:6c:86:0e:3e:0a:
05:a6:f4:17:d4:30:06:05:b3:d9:a5:05:aa:ce:1c:
14:54:05:24:72:39:7a:d9:82:91:5b:5f:dc:ac:de:
b4:cd:16:af:49:f4:27:9b:2f:84:8c:92:2b:cc:c9:
04:7b:e1:b8:ea:85:0e:de:42:3f:60:64:9c:e4:19:
34:5c:3b:be:5a:2d:f0:99:72:df:df:10:15:72:38:
c3:fd:ef:6d:5f:c6:4e:15:c0:ab:b1:c3:fd:bd:38:
48:0d:ab:60:40:e4:7b:e6:5a:00:ce:62:83:70:0d:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:38:AD:01:FE:7C:21:A7:68:2F:21:3F:59:51:FF:7C:83:6F:22
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5a:1b:fd:5b:ea:71:de:56:1e:2d:05:d9:4b:2e:2d:50:96:
a4:28:ae:82:00:00:75:de:c2:6f:39:ad:c9:dd:8b:f5:9a:5a:
0b:07:16:be:2f:ce:41:04:f5:06:b3:53:13:27:32:e0:c0:f6:
c6:81:42:e2:4c:d6:b2:56:2c:21:0a:30:ee:61:54:44:a1:44:
f8:95:94:44:6b:b1:d9:40:be:bf:dd:9d:6f:30:54:d0:08:f2:
55:62:dc:aa:d1:a8:67:12:d0:09:d0:90:69:a3:ec:af:65:f3:
0b:b3:e5:5d:3d:4a:bc:dc:90:8c:6b:b1:11:25:89:01:8f:e7:
aa:95:55:84:4e:b7:b0:6a:e4:81:89:fe:d3:8c:2b:95:7f:d4:
50:c2:da:08:f2:0a:63:71:b2:87:82:d7:ba:68:a7:45:bc:d4:
9f:d6:91:c7:8c:8b:af:97:38:ce:51:ef:4a:ae:74:58:12:13:
e8:ce:fe:52:48:f5:d7:9a:45:47:2d:a6:59:98:1f:2d:fb:65:
ed:3a:0c:e9:ef:e8:84:cb:57:f5:9f:62:30:1c:db:00:98:db:
b3:5a:fd:74:ab:d0:fc:a1:3e:07:3f:12:53:4e:7b:ce:6a:8b:
aa:5e:7b:63:e7:7e:55:f7:68:30:3d:6f:5e:d9:d3:d3:1d:d3:
62:bc:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client