Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: Lwufd+VuEglZUOvyTrvbQrOLQxsDdSSa0gAQFs6oEkc=
Subject key identifier: C1:DE:E3:DD:88:00:FE:14:BD:5C:6D:86:3F:F6:B9:A8:B9:08:4F:1C
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 0194BD4EB763D34ACF63DD30FC6C093D3438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0271
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: fVA+i2E5ufb255k7ZTrbdbZUcdc7s8AoEZ3Ntva0BBY=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:63:d3:4a:cf:63:dd:30:fc:6c:09:3d:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=c1dee3dd8800fe14bd5c6d863ff6b9a8b9084f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:d1:e6:ea:1c:57:f6:c5:e8:bc:70:46:93:
11:8c:fd:6e:b9:29:00:3f:b8:ec:2e:4b:fe:2a:97:
55:f6:56:75:62:e1:d4:1a:95:b1:ce:6f:77:be:46:
f8:b8:89:22:f4:4b:cb:66:3c:fd:7b:0f:2d:f8:ec:
26:fe:2b:d5:f4:42:0d:46:13:5d:fe:a7:39:c3:ab:
a1:a6:c5:63:ad:48:4e:d9:b2:52:cf:26:d3:ae:c2:
c0:2d:81:1a:db:af:85:ee:22:d4:4a:67:e2:74:39:
d8:58:70:f1:71:16:7e:1b:9a:5d:0d:cd:a7:cc:2a:
bd:9b:6b:32:39:07:b7:99:50:93:b0:eb:0d:43:ee:
db:ad:2d:b7:25:bd:49:2d:c1:e3:68:f6:9c:90:7d:
22:ff:e3:70:70:8f:38:b8:80:fc:a9:b7:1f:dc:60:
d6:99:cb:9f:89:74:ba:0f:46:be:35:49:d4:3a:71:
0e:76:e8:2d:43:7a:c7:80:69:d1:0f:e6:dc:f2:68:
df:3c:69:09:3b:d9:28:cd:1c:de:2d:b6:e3:d0:53:
ea:b1:04:7c:e5:db:a7:f0:a0:c5:4d:04:ec:45:38:
03:48:ee:25:53:8e:94:cf:bd:37:72:5b:f3:0f:37:
a6:c9:a2:a9:0d:45:13:ff:0a:2e:b2:6c:e9:01:50:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:E3:DD:88:00:FE:14:BD:5C:6D:86:3F:F6:B9:A8:B9:08:4F:1C
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:66:b6:d0:b1:f5:32:81:af:57:a7:62:54:54:69:e2:18:39:
e2:98:97:7e:a1:5d:20:0b:f2:65:7e:b6:8d:44:77:a4:52:88:
a5:3a:58:b7:4c:b1:7c:51:16:19:1e:b5:f4:aa:b0:5d:9a:95:
27:bf:fd:89:8c:06:73:91:11:24:4a:80:4b:f0:31:36:9b:68:
93:cf:72:df:9b:99:89:2f:f7:28:35:f5:87:ad:ec:28:68:1e:
e3:18:4a:3b:b5:91:67:8b:4a:4e:be:2f:64:5c:21:c2:6a:89:
8b:cf:4e:31:5a:95:2b:d9:02:4f:44:ed:2e:bf:dd:bc:df:08:
f6:7d:54:6e:cd:9b:cc:00:75:53:df:48:90:b1:33:4d:de:ed:
84:78:ad:e2:d1:d3:e5:ec:56:7f:e1:d3:6a:7d:91:14:70:e6:
0e:76:7f:ed:de:6a:fa:6d:86:3c:86:8f:7a:1c:80:23:91:1b:
b4:cc:00:91:6b:8f:5b:de:94:e7:b8:a2:11:99:cd:9c:c1:aa:
a5:4f:dc:53:62:ac:56:be:82:e6:be:d0:cf:82:4f:f8:0a:60:
b4:75:e9:c6:fc:f4:27:5b:4c:3d:6c:04:4d:bf:cc:ef:ff:4a:
d3:44:d5:d6:47:94:12:b5:93:af:b5:b7:72:bc:03:99:03:f3:
fe:8b:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:46 2025 by rpki-client