Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
File: uquipWoMMP2vWTSvh2XB_9E1ekg.mft (raw, json)
Hash identifier: CYEgfgbbxibLrX/DZ/okYRMMoDD8y0JxDmnvxM9cMbE=
Subject key identifier: B5:5F:86:82:13:D5:86:59:8E:AA:7B:56:9B:1E:C4:46:B9:EF:EF:3F
Authority key identifier: BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
Certificate issuer: /CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Certificate serial: 0194BCAA2658360FCC5AFCB6C0DC131B655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: a8-LoFpzpvju-2XWs2Ak1Mj-svc.roa (hash: wRN7eTSTbn3kvEiQSolKkMG8ZX0jIhoh/J7KJ9xpJnI=)
2: uquipWoMMP2vWTSvh2XB_9E1ekg.crl (hash: E/pLfT6Mxp+lXmEgpSMOqj/9oRaihTPl+ly5crSJFDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:58:36:0f:cc:5a:fc:b6:c0:dc:13:1b:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaba2a56a0c30fdaf5934af8765c1ffd1357a48
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=b55f868213d586598eaa7b569b1ec446b9efef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:9d:90:fb:e1:8d:b9:af:60:16:65:72:f2:
d9:94:d8:b8:34:a5:c9:5c:9e:cb:a7:c4:2a:2a:90:
2a:7c:3b:43:0f:c7:3b:bc:e9:3e:dd:ee:c0:dc:d3:
5b:65:fa:84:d0:83:50:6d:f6:a8:78:5a:e4:ce:95:
3f:ec:d6:69:37:f6:20:fb:e9:5d:7c:c1:73:32:54:
27:c6:cd:d4:f4:0b:7e:ef:dc:13:e2:a0:b0:3a:60:
42:98:8d:b7:ea:3d:76:c4:e5:57:6d:32:e3:d8:0e:
05:1b:50:f4:a1:c2:bf:a7:22:29:0e:5b:6d:a9:09:
f5:82:28:7c:29:70:44:15:ab:89:41:b5:f0:25:72:
5b:42:b7:55:bc:17:c4:b0:65:c0:17:d7:87:cb:bf:
4e:f2:d2:b3:46:ef:f5:e2:d7:4f:b2:bc:fa:8e:b3:
14:a0:ee:63:cc:7b:65:f0:ff:d6:27:de:9a:17:d5:
b0:6f:a4:ee:f5:f4:eb:5f:0c:df:22:1b:2b:31:f1:
9e:e1:13:fd:df:2d:59:7d:2a:3a:7e:b2:dd:83:26:
26:fa:d3:82:19:3a:a5:2f:34:61:72:8d:f0:a8:06:
c0:ac:89:2f:be:23:14:17:46:db:db:0e:cf:08:63:
e3:a0:38:9b:2d:ee:b2:1b:42:fc:c1:2e:88:22:77:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:86:82:13:D5:86:59:8E:AA:7B:56:9B:1E:C4:46:B9:EF:EF:3F
X509v3 Authority Key Identifier:
keyid:BA:AB:A2:A5:6A:0C:30:FD:AF:59:34:AF:87:65:C1:FF:D1:35:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uquipWoMMP2vWTSvh2XB_9E1ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/1954a6-da23-4952-9c09-024868ffd315/1/uquipWoMMP2vWTSvh2XB_9E1ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:a8:05:d0:ea:86:83:b0:c0:4a:1e:f6:d1:16:a3:64:5a:
cd:d7:54:aa:9f:5a:0d:3e:96:0b:91:c8:36:a6:2b:ce:b3:28:
82:5e:49:e6:5e:c1:20:30:c8:97:2a:5a:9e:50:42:b3:23:c3:
8a:3e:74:24:90:df:12:14:f7:bb:7b:62:24:b1:6a:a1:77:e9:
76:47:09:1c:e5:e1:db:4f:91:c0:68:51:cb:57:89:8f:40:27:
0c:11:47:58:96:2c:e7:2d:1d:d3:20:d5:82:88:56:d0:21:da:
ed:79:2b:d4:1e:9a:51:02:d1:29:d0:c6:95:86:66:26:e5:9b:
ff:0c:de:c3:bd:8b:e7:7d:07:26:06:72:49:71:e4:2e:96:1d:
15:6e:10:39:19:b8:04:39:9d:0a:62:5a:15:82:92:62:6b:12:
b9:74:31:cf:e5:85:39:b5:ec:9c:b6:3c:23:b9:31:3e:e4:f6:
41:46:4a:00:0a:10:68:7e:2c:27:33:c7:fd:28:2f:2b:3c:5a:
e5:2e:3e:43:b7:7e:c2:42:27:37:73:09:78:8c:6c:fb:88:44:
cf:b0:79:d0:d6:26:d3:05:a8:39:1d:c7:5b:2f:8f:0f:57:71:
49:df:fc:2b:22:ac:58:dd:01:eb:bb:cb:ef:76:0e:2e:8a:fe:
2f:9c:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:58 2025 by rpki-client