Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: BUcxEeybIHf75CCLbW9l/S1+sZAUEIcpogCQaL0rybo=
Subject key identifier: C3:CA:02:1E:89:AE:B5:1F:15:CB:14:45:9F:88:1F:4F:1F:2B:9A:F3
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0194BC04E0D3B09FA170E045E6F98C496166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0AE3
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: Mx9S0GZcayCyQgqi6mhMepQFS9bVD1dcRavqhus1B9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:d3:b0:9f:a1:70:e0:45:e6:f9:8c:49:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=c3ca021e89aeb51f15cb14459f881f4f1f2b9af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:76:53:ed:5d:5f:9e:1b:0d:69:b2:1a:2e:
26:e7:b4:ae:0b:7a:e3:40:86:40:f2:62:ed:2c:6f:
ff:08:40:7f:bd:85:c0:fb:69:9a:77:29:5a:9e:5a:
5e:f1:c1:47:80:0b:10:47:c1:07:7c:0a:89:3a:23:
c0:4e:2c:56:fd:a3:1b:4d:00:dc:a4:f4:db:84:d1:
c4:ab:c4:af:4b:d8:ad:ef:4f:be:2f:36:ab:be:5e:
4c:c2:91:98:ee:66:28:84:dc:a8:8d:64:11:5c:a2:
7e:e8:d4:11:99:fe:5e:dd:13:23:f0:1e:da:cf:58:
52:bd:83:b8:05:04:a2:b7:b2:50:a1:cd:e5:71:40:
fb:71:a5:a6:70:f1:db:a0:3a:0b:60:61:27:c8:4c:
d2:45:06:10:de:ab:c6:aa:cf:31:36:20:a7:99:19:
7f:45:d4:b8:cd:d9:1b:74:bc:01:57:d2:5d:fb:6d:
4f:90:9f:ad:48:c4:6d:3f:1f:ba:5c:f9:8c:9b:27:
d4:dd:b8:cd:24:7a:00:1d:5d:e5:d5:b6:29:dc:9d:
aa:9d:2b:8b:e9:ac:86:3e:c4:cc:8d:b8:02:f3:9e:
48:55:0d:f0:ed:4b:ad:3a:ef:37:87:72:b7:de:23:
5a:e1:7d:f6:30:91:31:3c:36:be:a0:40:df:64:4d:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:02:1E:89:AE:B5:1F:15:CB:14:45:9F:88:1F:4F:1F:2B:9A:F3
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c8:7d:d1:f8:b9:1e:ae:e0:0f:0d:fd:f9:51:ee:9b:f2:42:
69:89:cf:d7:d7:4e:f3:62:40:1b:39:c8:23:0e:83:54:59:a9:
bd:1f:1f:e0:c0:ca:00:b9:23:44:c2:d2:51:2c:8a:0f:da:db:
90:bc:a2:98:9b:b2:50:c4:07:b5:ed:ab:7b:97:15:5a:57:99:
a7:af:a6:c9:15:bf:6c:23:df:3f:78:69:9c:db:b2:b0:8c:44:
a3:8c:54:66:5f:a6:ce:a2:25:82:80:0a:f7:f0:06:98:4e:e5:
b1:6c:c1:9a:02:e3:ce:fe:63:7f:f3:cf:fa:a1:00:f5:85:20:
82:a7:8a:09:b2:f7:03:eb:2a:c4:e3:8d:c7:ff:33:1e:9c:c8:
69:56:b6:de:a8:28:b7:31:15:8e:44:fe:44:22:e2:c8:c4:b3:
58:b3:0d:d1:b1:dc:ac:15:ab:00:1a:e3:10:7a:5d:10:a5:40:
23:22:9b:1a:c4:7d:2b:06:a4:64:da:0d:1b:24:b2:15:6f:d3:
d1:1a:65:80:bf:1e:36:d1:5c:06:27:82:06:68:ef:b6:7f:4d:
c2:00:9a:b7:b4:79:2f:11:77:37:c1:68:98:23:b5:63:6c:65:
c4:53:35:80:7e:ca:54:8d:9b:ff:83:b3:82:85:79:15:a3:74:
6d:53:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:08 2025 by rpki-client