Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: DSJi4RuoINMWSiYRCHrurf/M4N2HFUgb2UwuDXjWIQc=
Subject key identifier: AE:88:32:8D:6E:6B:43:87:D6:05:8D:6F:27:0D:EA:40:FA:5B:4A:B4
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 0194BD1798E75E1268947D839D8ADDFD1AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 143D
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: ZvMO8ayYa/JxCCTT22KuKa3Jv65xAPf91fLte5mXRUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:98:e7:5e:12:68:94:7d:83:9d:8a:dd:fd:1a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=ae88328d6e6b4387d6058d6f270dea40fa5b4ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:d7:55:23:bf:50:9f:a5:a8:8e:6c:11:a4:
22:1c:61:de:c2:3d:f7:47:43:49:7b:80:94:a1:db:
5f:91:e9:30:ae:81:92:39:eb:4c:4f:2e:41:52:c1:
88:1d:ca:eb:c5:be:64:68:de:3f:d4:13:d3:b1:8b:
e7:77:0b:ed:6a:10:dc:f3:2a:27:a1:03:7a:a0:bc:
94:4f:f7:cf:7f:88:44:14:01:a0:de:a6:fc:96:49:
24:cd:ea:7f:3e:ba:13:0e:fc:ab:83:d6:c7:3c:39:
46:69:b6:15:b9:ef:7d:fd:75:3c:9b:a1:83:c5:43:
67:ce:6b:56:a3:d8:26:a6:09:8d:0b:ee:40:43:ee:
92:82:0f:59:ef:ad:66:a8:e9:97:02:77:d5:4e:5e:
be:d5:18:1d:68:83:54:9a:85:f1:6d:6b:d2:90:be:
40:96:80:14:ae:99:78:a8:94:cf:58:cf:96:2a:7f:
1f:f4:2d:51:03:f3:ae:b3:48:f0:38:e2:ac:c5:68:
a2:2a:59:ae:6f:d3:cd:fa:e7:e4:f0:e5:89:c6:7c:
19:49:6f:92:35:b4:55:83:f5:00:02:20:d9:04:49:
ad:58:52:86:ff:76:4d:f0:db:fd:84:50:df:cb:81:
e9:d0:81:e4:74:56:c8:39:ce:58:0c:3e:ba:db:2f:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:32:8D:6E:6B:43:87:D6:05:8D:6F:27:0D:EA:40:FA:5B:4A:B4
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ba:c4:8a:9f:51:85:01:fa:6e:7a:6a:15:fc:0e:d4:eb:c3:
8d:7d:90:71:0d:64:88:cc:b1:27:7d:c4:45:ad:78:04:9c:a3:
1a:6e:22:d9:45:d4:5b:21:a2:81:b0:d9:44:82:32:5b:f2:21:
16:ec:c1:a0:d4:65:aa:da:cb:7e:de:46:8d:8a:fd:2d:ca:84:
71:97:48:12:73:9d:a4:e8:a8:0d:d8:81:fa:f7:f2:00:fe:70:
fa:ea:aa:09:fe:6f:87:c0:d0:7e:c9:a3:3a:db:cb:78:41:2f:
5f:15:44:fd:bc:11:98:18:85:41:a7:5a:10:9e:54:c4:9b:61:
ec:1b:66:3a:29:e7:91:53:99:02:45:1d:f6:be:1b:33:f1:37:
0f:88:32:28:a2:a5:62:26:90:b8:f1:f1:d3:ce:70:b0:76:87:
7c:98:72:44:b7:9f:96:dd:08:0f:77:2c:26:30:cb:07:f6:4e:
ba:a8:6b:b0:9e:bc:50:62:29:cf:ba:ff:04:9c:65:5d:b4:8a:
d0:53:29:c5:4f:59:14:79:87:fe:ba:88:ac:31:d9:aa:4f:df:
b5:0d:b5:3e:03:2e:a3:89:6d:e4:b4:9f:cb:22:e2:3e:5e:c4:
ef:1a:02:1b:7f:65:11:40:00:72:85:54:1a:44:17:77:56:db:
1e:74:bb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client