Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: NviZnTx8tekRoSbpWSbVxlj4DitJiifOscED/S+fmAk=
Subject key identifier: FD:64:EB:68:7C:09:9A:AF:FD:C5:BE:35:39:FA:5F:F3:02:B8:9E:D6
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 0194BBCE8BEEA8DB411FD33DD17E1C59CD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: 1Q9hGrtzPT7iVb93B4wCITs2QuBrRBp4TkskBwzOx9M=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8b:ee:a8:db:41:1f:d3:3d:d1:7e:1c:59:cd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=fd64eb687c099aaffdc5be3539fa5ff302b89ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:ea:6f:93:8d:73:0b:2a:30:b4:e1:8b:4f:
02:06:85:c4:bd:00:53:aa:cc:12:b9:da:0d:dd:b6:
5b:60:7c:f1:02:23:d5:28:33:04:60:41:e9:59:9c:
4e:b1:e5:37:29:66:55:10:1f:40:f7:7b:a3:ad:f6:
49:fc:5e:dd:82:e2:ef:c5:37:c3:6a:9f:8f:e3:fd:
63:fa:52:08:3e:7f:a3:c8:36:60:fa:50:90:6f:3b:
0c:d8:72:d6:cd:43:99:55:8f:ef:e0:48:13:7b:a6:
b3:d3:67:2a:30:59:fb:9f:e6:9a:93:13:75:31:89:
9f:39:98:59:f2:43:7e:93:a5:5e:17:ac:84:a5:b0:
4a:98:d7:b4:8d:7d:c1:32:a3:ea:33:dc:18:ae:87:
2c:10:24:56:18:21:73:e6:be:da:56:f8:fe:33:7c:
b2:1f:a3:86:cf:20:88:f2:ee:cc:29:1e:62:53:b2:
17:3f:91:f0:e2:2a:a6:e9:be:cc:c1:60:1a:72:86:
c1:64:1b:c2:b6:ce:6b:d7:a2:24:06:4e:10:6d:3d:
d0:00:48:69:bd:5e:ff:9f:20:cb:c8:b3:5a:f2:31:
3c:b9:09:63:96:16:68:65:a5:73:dd:98:d9:22:ed:
23:eb:0d:be:88:88:df:47:46:57:4f:0b:44:c0:6a:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:EB:68:7C:09:9A:AF:FD:C5:BE:35:39:FA:5F:F3:02:B8:9E:D6
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b3:dd:88:33:b2:59:03:43:a4:83:c0:c7:6b:86:88:b8:c8:
be:29:37:19:27:b8:d6:c5:7e:c6:62:88:34:ea:c1:97:c9:03:
04:06:49:3b:9d:99:de:e9:03:a3:96:4e:e7:db:38:e5:1e:22:
c7:45:94:af:f9:c6:e8:8e:ad:3f:9b:0c:9e:11:84:13:85:39:
ac:64:5d:cd:64:30:87:0b:e4:7b:b2:4c:19:82:5e:40:78:10:
9d:fe:28:76:29:35:59:4d:63:cf:03:b5:e4:08:17:69:8c:c3:
a4:89:67:29:2a:96:2f:cd:28:ca:67:67:f4:8a:c0:e1:a8:d7:
5c:59:21:82:19:28:8e:f6:25:e7:dd:ca:31:a1:6d:13:2c:9e:
b7:37:05:a9:bc:f8:57:0a:7d:f3:a3:e9:b4:37:49:72:32:02:
37:8f:eb:a2:53:48:63:9f:d8:48:67:13:64:84:e9:47:98:3a:
b7:24:24:c4:dc:8a:e8:7d:b4:94:af:f9:e4:a9:45:73:a9:9e:
09:3c:35:27:1d:39:b7:2b:dd:56:27:4e:6e:15:c2:08:d6:d9:
27:c8:20:ac:c4:52:f2:8e:d4:58:2e:de:b0:90:64:e9:ab:3a:
1a:1f:2d:92:85:0e:8b:57:3d:d3:50:1a:83:10:66:95:f7:57:
73:57:5f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:32 2025 by rpki-client