Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier: bSlxoJAYzZUKkpWRXwGXGfPHaaO9yV8kNeUrqlDrQI4=
Subject key identifier: D1:64:DA:D3:A5:CB:D2:CD:41:9D:3B:5F:99:73:F6:C2:CF:A7:D0:84
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 0194BBCDDD601B1306394FB45987426E8E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: uzliyVNZiRVmpCcxWraxllSXgP8EZMccya9Xv1y0mHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dd:60:1b:13:06:39:4f:b4:59:87:42:6e:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=d164dad3a5cbd2cd419d3b5f9973f6c2cfa7d084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:74:b4:82:9a:57:d6:b7:94:1b:f2:e0:df:
86:fc:a6:cb:7f:2e:c2:a1:7b:7a:28:3d:72:d9:1a:
0b:ef:49:aa:ba:e7:bd:46:e7:54:5e:b6:45:70:4e:
70:20:39:e1:32:a2:85:36:9d:70:e9:2a:04:23:ce:
09:39:7b:1f:b6:02:bd:08:43:8f:1d:a6:a0:50:d5:
6d:cc:58:c4:67:8b:e9:bf:ec:be:a8:b9:8a:d2:c3:
24:d7:97:5d:d8:19:c6:46:ff:e7:f4:cf:e1:56:f7:
83:a4:8d:c6:85:fb:d1:f3:cc:1b:76:40:ee:ac:f6:
36:a0:83:bf:bc:1e:42:2f:97:fa:3e:3f:56:b6:49:
67:c0:36:5b:d1:15:28:80:26:88:5d:3d:a5:74:27:
7f:c8:12:0e:d2:2c:30:ab:cb:95:96:80:9a:92:3d:
0e:a7:4e:da:ca:d4:1c:e8:95:84:38:a0:2d:d3:b5:
06:59:c8:4e:c8:6c:73:76:f7:6c:f1:84:25:65:f5:
3a:79:b0:f4:45:69:34:cb:c6:c4:3d:d3:5d:4d:86:
40:36:10:44:00:82:80:c0:fd:04:cf:52:2a:ed:87:
49:4d:5f:1f:5d:d7:8f:b2:95:ff:6e:f2:83:40:9f:
27:89:46:e8:4d:60:49:7b:cc:fe:cb:be:c6:a2:78:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:DA:D3:A5:CB:D2:CD:41:9D:3B:5F:99:73:F6:C2:CF:A7:D0:84
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e8:c8:70:15:46:37:2b:67:c7:e6:0c:24:ca:8e:5d:c3:a0:
5c:fc:89:89:cd:92:fa:2a:eb:84:da:df:6a:0c:3c:5f:36:fe:
67:f1:e4:81:2b:d4:c3:31:5a:81:0e:a5:c2:6c:cc:a0:30:ee:
a5:1e:3c:10:81:cc:ed:7f:a4:e8:81:fd:ff:b9:d7:91:47:29:
20:aa:26:ae:59:75:65:66:8f:a8:15:c8:64:e6:bd:90:f9:47:
91:ca:70:f5:70:62:4a:52:b1:01:1c:92:fa:b2:58:79:79:88:
6e:6a:9f:21:13:70:a0:a5:99:7a:82:0a:05:77:4a:04:43:fa:
5a:5a:f8:3a:a1:ca:a8:00:3c:01:13:62:83:31:55:77:5a:27:
91:35:ee:a2:c7:19:7e:85:b4:9e:18:8c:d1:01:d4:3d:6d:54:
d1:c6:15:67:3d:3e:38:72:79:ab:62:5d:fe:07:24:a3:37:a6:
4b:f5:27:1e:ac:53:37:42:24:fd:3b:42:34:18:cb:39:18:07:
4f:3c:19:ec:ec:08:7b:1e:31:32:88:08:47:d4:3f:f2:ac:89:
50:d5:9b:a4:ba:96:da:bf:91:1a:3e:f9:8b:f4:ae:70:c1:29:
49:47:23:fb:c9:05:01:31:6e:66:f6:35:e9:b4:00:53:3d:d9:
30:b2:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client