Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: 6FX6LGINvbGj0oiivRzZWhhP/obqtFRe6wtW3e/RTPs=
Subject key identifier: A5:50:8B:73:82:53:6B:F7:8E:6D:F9:E8:96:08:63:F4:6F:6C:76:06
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0194BD854BCA4ABCFC38545F634C4228472C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: ohLgExgpc7qXYIMhbpyRNRlHEKpC0H/eI39d3a6aQ/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:ca:4a:bc:fc:38:54:5f:63:4c:42:28:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=a5508b7382536bf78e6df9e8960863f46f6c7606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:ce:38:90:33:5c:d7:5f:d0:11:d9:4b:cb:
db:80:0a:cc:17:16:32:25:38:e5:b6:3e:5e:5a:cf:
3a:1b:9d:5e:7e:6b:90:e2:1e:15:72:7a:cd:8e:8b:
09:c1:d0:b0:37:04:2a:c0:29:40:bf:a6:47:e3:11:
ac:3b:d9:bc:16:2d:0d:ca:31:37:36:3b:ec:5f:12:
09:67:45:f3:9b:c8:ea:a4:3c:77:da:c7:cd:54:7d:
e7:31:d4:9b:24:83:ff:5a:69:0b:e0:24:63:56:09:
42:23:08:85:db:70:86:22:dd:0f:24:40:47:cc:a8:
e7:ec:f2:78:1e:bf:c5:0e:2b:19:fd:35:fe:31:bf:
22:21:14:8e:f4:4e:f4:57:8f:2e:c2:8b:18:3a:80:
44:86:39:75:6e:d7:d8:be:3a:e0:56:3f:63:bb:00:
39:75:be:85:51:c6:c3:88:68:32:be:43:1f:44:fe:
40:db:6a:aa:69:b0:82:0d:9b:6c:da:ab:48:ff:87:
c5:1a:b1:84:ba:0d:b6:2b:c7:73:21:5c:c1:a4:02:
28:aa:99:f6:c8:af:d0:fa:33:11:62:25:31:5f:7f:
4e:2b:69:e5:7f:59:92:09:3e:6c:cd:fc:90:85:a0:
6d:f2:de:83:d9:ac:74:e3:08:24:86:a9:65:ef:d2:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:50:8B:73:82:53:6B:F7:8E:6D:F9:E8:96:08:63:F4:6F:6C:76:06
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:79:96:ea:2d:b9:3b:55:83:dc:9c:e9:83:45:f0:e7:06:
76:ed:94:59:79:fb:3c:d5:8c:71:af:b9:32:f4:48:ed:91:80:
b7:43:8e:f7:95:f5:8c:5e:2b:77:63:c5:a0:73:77:ec:13:06:
4e:b3:b5:10:d8:ce:62:c8:6c:83:c6:c7:fd:ea:cc:d8:79:9c:
71:29:5e:30:ae:d9:b6:43:cf:34:53:28:cd:e9:d6:46:32:f8:
4e:df:d6:63:b6:03:bf:0d:f4:df:7e:d7:94:8d:9e:19:f1:1d:
60:d4:70:9c:2c:bb:d3:9f:b1:86:3d:31:70:7b:5e:2c:e9:92:
52:e8:5b:8f:02:94:c7:9a:d4:ec:b1:7a:66:51:15:81:02:f3:
91:53:bd:9c:db:b4:db:cc:f6:57:61:35:fc:db:e6:b6:da:ab:
50:70:e0:b9:f7:31:34:a0:c7:64:5d:3b:42:0d:c4:17:5c:92:
d2:d6:ef:aa:c9:ce:87:26:4b:65:e6:d5:8e:2a:c2:45:1f:8d:
11:d9:fc:4a:e9:a4:97:58:60:53:68:0b:db:bd:69:47:3a:14:
e1:7f:b3:49:2d:ea:18:51:d3:15:ed:2d:bf:b3:be:df:c3:63:
29:2d:85:19:1f:02:6a:bf:35:e7:80:30:4f:87:e0:d5:9b:8c:
82:00:bd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:05 2025 by rpki-client