Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: LeP1/6+TdyeNtO1Jo9IPdwFP/qfwzFbM6CuTtSAaPgg=
Subject key identifier: AA:F1:D6:92:75:6F:A2:36:52:BC:D2:A0:81:A1:D0:D5:C5:07:09:F1
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 0194BBCE77C484752194134DCF12A97FC067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: mUwmm6+09RCrvEfg1ehFO5DKBoz8Yy82s0dLW0gAr08=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:c4:84:75:21:94:13:4d:cf:12:a9:7f:c0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=aaf1d692756fa23652bcd2a081a1d0d5c50709f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:c4:78:ba:ce:cf:ce:91:94:55:1f:4b:9b:
96:8e:94:96:f8:20:53:d2:25:04:1a:03:23:0c:64:
a4:dd:3f:c9:18:4c:00:57:95:95:1f:38:36:c2:73:
0a:6a:d7:1c:d3:39:7a:08:c5:c3:31:3c:70:ee:25:
19:4e:5f:c9:b0:5e:1a:4a:47:b7:47:39:6e:b1:70:
4f:19:b7:62:22:18:87:e8:01:5e:7b:9c:1a:86:ac:
fd:da:33:8b:b4:97:80:74:0a:f5:d1:36:ad:ed:72:
4a:5c:3e:c1:58:53:90:a6:90:2d:f3:17:39:10:a2:
8d:22:2e:07:9a:b2:08:6d:61:50:19:8d:0f:d3:08:
70:a0:0a:cc:6d:2e:90:cd:57:33:8e:c0:88:11:b3:
af:37:9e:2b:d2:f3:c2:16:67:20:2f:20:61:04:66:
61:4a:6e:95:a1:51:71:b7:85:51:84:8b:ac:9c:ae:
cf:0e:cd:16:46:cf:99:db:ba:22:93:ae:4b:84:ba:
c4:83:43:1a:50:9c:dc:02:c9:d9:6a:11:b8:1f:b9:
00:a8:0e:ea:6a:9b:53:db:d5:d6:34:6b:f1:42:91:
a5:08:7b:10:4f:73:24:f3:1d:5e:30:b8:15:a6:50:
ac:65:19:b3:49:29:1b:55:08:e7:25:e7:a8:35:10:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:D6:92:75:6F:A2:36:52:BC:D2:A0:81:A1:D0:D5:C5:07:09:F1
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0a:19:31:06:6b:59:a1:66:4a:f8:c0:61:5c:45:5d:37:7a:
e7:85:b5:6d:54:d4:0e:bb:81:27:f9:df:e5:ee:0c:8e:05:0e:
7a:e6:82:78:4e:28:78:4e:9f:05:f2:10:5e:93:bb:81:f2:d2:
6e:dd:65:ca:09:0f:e6:66:dc:3c:46:f0:3d:20:ba:b5:d5:64:
77:e9:96:77:db:bc:5d:af:61:ad:90:b5:3b:fb:93:c3:48:9d:
5f:2d:18:b7:dc:26:ad:d7:56:d7:ac:44:99:59:be:6a:3b:67:
c6:7d:c6:70:ec:4e:95:58:50:63:b0:80:9a:f2:a0:2d:df:56:
34:43:30:10:e7:a9:e5:3b:72:28:54:c9:b5:92:5f:4d:c2:4d:
b5:35:46:cb:b9:58:9e:d2:53:d4:5f:ae:3b:a5:df:25:10:19:
46:c1:aa:08:88:fa:5d:d4:b5:07:3a:f6:93:38:a6:3e:cb:62:
1d:e9:4d:ad:77:db:0d:60:07:33:9c:5a:49:4a:cc:d8:dc:17:
d6:8e:4e:1b:5e:a1:ad:b8:84:94:5b:9b:b8:f5:88:03:c5:85:
06:96:f7:f3:80:64:86:cd:0a:36:18:f2:fe:ff:52:f9:9b:13:
18:33:c4:7b:14:0b:5e:3d:6f:65:72:a4:a2:78:8b:84:8f:19:
ae:2a:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:20 2025 by rpki-client