Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier: GwdDmk4q+IUrX98N70q215/n9XM0ntUSYT3Fyv4ysuk=
Subject key identifier: 93:5F:11:8D:11:E4:47:E1:D6:C7:6E:5D:06:97:65:75:BB:B6:D4:A2
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial: 0194BD17D39DE3FECBB17EC06B5A8A95EBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number: 120D
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: JVfDae6Qr0N1i8KsC5e2asEIDr7z/uPAlWw05MeNjdI=)
2: xqGa5yw14tF9pw6-eYINusEUh7E.roa (hash: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d3:9d:e3:fe:cb:b1:7e:c0:6b:5a:8a:95:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=935f118d11e447e1d6c76e5d06976575bbb6d4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:97:c5:58:cc:f4:0c:e9:5f:f9:ce:d3:65:
f9:26:19:51:98:73:09:3b:82:e5:21:e2:57:3c:22:
a9:22:7d:44:5e:cd:d2:01:3f:d0:0b:bb:ca:84:6d:
82:ad:d6:d4:97:c8:66:ba:cf:e8:ad:58:22:80:f8:
f6:1d:fe:51:11:84:31:5f:31:e1:39:79:1e:f7:d1:
88:72:a2:d3:86:76:b3:e6:7e:33:52:91:4a:6c:5e:
9a:c8:99:1a:2c:ac:dd:97:59:9e:0b:b8:04:4e:cf:
ff:3f:29:3f:2a:97:de:c7:37:ce:f5:20:3d:ac:71:
81:ec:b9:07:e5:5e:68:d9:a2:ee:e2:f2:70:d2:c1:
58:61:92:b2:69:ae:28:f4:03:76:53:db:6b:84:ce:
f7:06:09:76:92:98:26:01:37:ad:2f:21:ff:be:12:
c7:d3:85:35:ca:cc:55:05:14:43:ef:46:db:12:ef:
21:2a:20:eb:5f:bd:6f:62:76:63:9f:1b:0b:4e:00:
7c:ab:48:f0:c0:dc:1a:aa:89:14:5c:af:b9:e7:a6:
1c:93:a9:e6:54:41:b7:da:9a:c8:cd:3a:b6:bb:21:
97:58:67:49:87:e1:2d:06:fb:88:ad:ed:a2:d0:cf:
ce:c9:87:34:a0:a0:a3:a8:62:26:1a:dd:92:47:7a:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:11:8D:11:E4:47:E1:D6:C7:6E:5D:06:97:65:75:BB:B6:D4:A2
X509v3 Authority Key Identifier:
keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d9:e2:0c:15:1a:46:c4:fb:81:b1:e7:c9:c3:8f:f5:2b:7f:
ab:84:a8:e2:89:ac:e4:66:a9:58:42:24:0f:3a:8c:9c:f5:9b:
86:b5:fe:8d:c5:55:64:07:15:11:4d:c9:cc:ab:44:2d:e5:06:
38:5c:ae:f8:6c:6f:15:ac:76:40:0a:d3:cf:75:13:94:c2:3b:
43:b3:7f:e7:c5:37:15:68:97:06:1d:e6:60:0d:12:a4:36:7b:
9d:1e:34:bc:3e:dc:95:e4:15:04:6e:de:45:f8:47:d6:51:87:
57:60:ea:4c:ec:31:e2:7c:a4:bc:86:aa:3a:dc:4b:39:e5:c4:
1d:29:b1:60:e8:5a:e0:9e:06:15:44:d0:d7:b3:51:d1:e5:3e:
ef:1e:bd:af:34:18:ad:88:1a:43:7f:d6:a3:43:3f:1c:67:f6:
01:3d:85:ea:c3:9f:85:19:e1:93:ff:ab:e0:92:3b:66:f3:35:
4b:09:71:9d:05:29:80:e5:40:12:45:81:62:ea:55:6a:b6:9c:
ae:15:45:1c:38:57:52:dc:cf:a6:47:15:b5:46:8d:80:61:07:
ff:c9:3b:a6:45:76:22:a4:c2:15:e4:3b:29:2b:ec:1f:7c:20:
63:59:de:82:2c:c1:d0:6f:f7:a4:1c:40:c5:34:b3:5e:5d:92:
6b:85:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:27 2025 by rpki-client