Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.mft
File: u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.mft (raw, json)
Hash identifier: z2pMPbkFH3Ov4i1Hb8wkTzujQBQ4d7FGLVOGlykdZ4Q=
Subject key identifier: 5D:A6:C2:5C:DC:6D:FC:33:C6:3C:EC:0C:40:93:5A:34:4C:C9:FA:C0
Authority key identifier: BB:C4:39:9B:41:2A:5A:C7:26:27:FC:4B:3C:B4:F8:42:E4:41:14:54
Certificate issuer: /CN=bbc4399b412a5ac72627fc4b3cb4f842e4411454
Certificate serial: 0194BC3C52C9FEBF3236157C06C64CE80A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.mft
Manifest number: 9B
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: sKkqqVcmvKvP4zTmxEkSrIkGcYo.roa (hash: Z50zb5NNPy1eFOqJZS3mATKnSBB72UUvtSCksQ1bN4I=)
2: u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.crl (hash: T1EuF6KluN0gcnoFlRsN/e2Xkh6EiPchK6Q0i5McSJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:52:c9:fe:bf:32:36:15:7c:06:c6:4c:e8:0a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc4399b412a5ac72627fc4b3cb4f842e4411454
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=5da6c25cdc6dfc33c63cec0c40935a344cc9fac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:36:c2:1c:06:10:34:67:7f:86:63:e8:38:21:
90:e9:1d:3c:99:9a:6a:cf:c6:f1:c5:8b:52:e9:f7:
aa:3a:67:08:4f:f1:12:7b:53:cb:e0:5c:c4:84:c1:
ca:7e:1e:aa:e1:0d:2b:cb:e8:d2:3d:0c:0e:cc:8c:
7f:81:b8:a6:d2:e7:29:f7:5a:13:7b:af:17:7a:04:
5f:6e:2f:27:c6:4b:b3:28:f5:8a:7c:1d:c8:d5:4d:
49:84:10:38:56:f2:78:14:22:f8:ec:6f:37:6e:ea:
48:f6:81:4a:f2:b8:22:0b:f1:11:ec:77:24:95:ad:
5c:50:71:21:7b:b9:d4:49:9f:7b:6e:86:71:63:3d:
26:90:0d:fd:79:85:80:ff:cc:12:5f:c1:fd:dd:42:
2a:c3:90:4a:c7:06:c0:07:25:9d:cd:9e:04:ab:b1:
a8:a7:06:c7:7e:be:6b:b6:74:dd:8e:75:ae:9b:29:
69:81:46:58:2b:2b:85:2d:2a:69:8e:5f:c1:d5:c5:
b8:74:21:b2:58:7a:9b:1d:c8:d4:ed:33:fb:7c:36:
a8:48:d6:af:88:8f:37:46:05:ce:2b:09:eb:a6:1b:
6e:c1:e6:89:26:c0:5e:92:c3:ff:12:05:73:4b:34:
7b:74:3b:e8:c7:d9:bc:dd:60:02:88:e0:2e:9e:86:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:C2:5C:DC:6D:FC:33:C6:3C:EC:0C:40:93:5A:34:4C:C9:FA:C0
X509v3 Authority Key Identifier:
keyid:BB:C4:39:9B:41:2A:5A:C7:26:27:FC:4B:3C:B4:F8:42:E4:41:14:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:db:79:b2:35:d1:a9:46:fc:61:5e:4a:bc:cd:77:cb:20:e3:
77:2d:25:45:91:ed:b5:2e:67:7d:8f:0d:94:90:04:d6:8b:31:
7a:34:80:a1:89:be:14:21:a8:91:c8:94:65:25:33:88:4c:14:
78:f5:01:35:78:2d:f0:cb:74:54:7e:90:e5:1e:3b:5c:2f:e4:
05:71:7f:22:bf:78:e9:80:a8:d3:12:14:9f:db:3a:21:e2:7d:
de:5c:26:a4:b8:93:74:c4:22:7e:0e:57:8c:77:c6:16:cd:ce:
4f:74:3f:4b:bd:0f:34:27:47:e1:20:22:40:a9:b5:44:69:9c:
3a:33:9b:7c:e1:86:7e:47:cf:d6:bf:55:4f:12:74:a9:04:d0:
3a:42:5e:61:f3:96:ca:fd:31:74:51:4f:d6:c6:32:32:1b:6a:
ad:92:96:92:91:93:df:fe:a6:24:1f:bb:09:55:9b:18:55:ad:
98:52:e4:d6:8f:19:e5:30:91:0c:b4:50:a4:22:15:68:f9:cd:
56:39:cf:0d:76:c9:a6:19:31:90:97:6f:c2:bf:70:78:5f:48:
38:69:89:68:22:36:01:ca:8d:11:9a:b9:d5:b2:14:2d:05:82:
e9:d2:02:6a:99:20:58:7c:34:23:6d:1b:1b:df:ea:d2:2c:25:
73:de:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:25 2025 by rpki-client