Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
File: uWtvuorLeLKHF9detqKSXktomhA.mft (raw, json)
Hash identifier: 66201R+OnByfd53COqO/YxbHet6W2W35fMuFtNdKE+Y=
Subject key identifier: 88:29:EB:74:C9:16:10:C6:95:26:56:A4:C1:DA:BA:D4:26:4E:73:86
Authority key identifier: B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
Certificate issuer: /CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Certificate serial: 0194BC3C2E8A63C19E908B0D701735BE8076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: b1dkMuscA36O0Qm_BgPxorZ-3GY.roa (hash: gIbSn6LNYULuz6h5L16Mv/n4jaeFLG8lgRqX0Hk7Yek=)
2: uWtvuorLeLKHF9detqKSXktomhA.crl (hash: 9oeUJsgOguQalbHOwzEG5y4cdsuwyWfMV4EaVo6gvP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2e:8a:63:c1:9e:90:8b:0d:70:17:35:be:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96b6fba8acb78b28717d75eb6a2925e4b689a10
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=8829eb74c91610c6952656a4c1dabad4264e7386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:65:77:d6:22:f9:3c:0d:4f:eb:86:da:fb:22:
1f:86:6c:76:88:d4:00:95:28:c9:2f:86:d1:62:a3:
7e:14:44:02:4b:25:28:99:fa:32:a5:19:37:32:56:
66:60:3d:65:ca:9c:81:aa:1e:aa:12:bc:f5:45:fa:
9d:38:9d:b9:a0:cc:db:8a:86:43:8a:44:10:4d:66:
6f:ed:75:cd:c9:47:28:2b:fb:74:9b:79:16:a6:36:
86:0b:77:c5:55:21:fd:92:24:3c:44:ee:0d:c9:8a:
0b:c2:dc:8d:1d:64:77:4d:d6:a7:35:dc:b6:77:9f:
bb:2f:dc:cc:a0:05:be:bf:a5:40:ab:76:cd:aa:5e:
de:09:83:62:c5:27:c5:3e:dc:b3:77:da:c9:93:32:
0b:08:24:5d:29:5e:ac:3f:32:ca:72:a0:70:af:4c:
7c:f5:c1:7a:9a:1e:6d:b9:39:de:7b:87:03:38:4a:
c3:4b:5f:2e:70:67:7f:5f:39:a1:8f:46:c6:78:d1:
4a:b2:3c:59:b5:a4:4b:7b:29:e7:4c:2d:4f:ee:6c:
b1:1e:80:18:ba:ae:3d:9e:bc:38:31:c9:99:a9:4c:
68:4d:5d:cb:c4:eb:0d:a6:e7:4d:d5:25:bb:91:92:
de:5e:76:6f:1d:5f:4d:a9:37:b5:74:c4:35:41:25:
03:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:EB:74:C9:16:10:C6:95:26:56:A4:C1:DA:BA:D4:26:4E:73:86
X509v3 Authority Key Identifier:
keyid:B9:6B:6F:BA:8A:CB:78:B2:87:17:D7:5E:B6:A2:92:5E:4B:68:9A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWtvuorLeLKHF9detqKSXktomhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb87b5-923f-4f7f-ab30-347f16db6d90/1/uWtvuorLeLKHF9detqKSXktomhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:3f:ad:fa:52:21:e7:0c:ce:d1:c5:52:30:11:2f:d9:0d:
fd:95:70:52:b5:9d:ad:0f:3c:e2:1f:74:75:ce:f9:c2:48:b6:
a6:c8:25:44:19:30:86:90:75:e1:35:60:67:61:0b:7b:b1:c6:
4f:ec:d4:e0:3c:5e:92:e7:02:ce:3c:34:6c:b9:83:8e:29:05:
f2:f1:87:99:78:e4:e0:c3:37:dd:7f:1b:32:ef:49:44:93:3c:
c3:ed:99:1b:f8:29:bc:f8:8e:ea:7b:1c:c2:a0:0e:7c:31:c4:
6f:22:04:9e:71:bc:ad:8e:d5:50:9c:ee:ac:46:ef:ee:03:0a:
5c:14:ef:65:53:10:73:98:bc:bb:e8:1d:65:c9:d5:88:99:d2:
8b:c2:d0:3f:6d:41:65:12:22:00:29:0f:a0:d6:6e:bf:1f:31:
d6:6d:40:34:ad:16:fb:83:0c:67:00:b1:c0:cd:8c:3e:4c:37:
e5:8d:a7:66:8f:4d:9d:4e:30:27:bf:e7:29:97:7f:2c:27:8f:
e8:3a:e4:ca:3e:6f:86:6e:10:59:de:7b:02:e7:37:65:9a:7f:
a4:76:23:f0:1e:eb:10:75:57:43:da:0b:86:ab:69:02:76:93:
3d:24:be:a7:4a:e2:7c:65:ab:58:55:2d:0e:5c:0d:9a:12:de:
90:c4:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:22 2025 by rpki-client