Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: 7tg3JMVZ5hIQ5JWIz+h20TICK7mKESdVw8e5zT/WROA=
Subject key identifier: 7D:68:45:90:8B:4B:C0:4B:64:71:B6:97:50:2A:E8:BB:DA:A6:22:87
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 0194BCA9E353749F80462DFB1F5DC9CD8147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0802
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: QbJkd6GAF1mU8CE59MUcdE+dWs05HpG3UeTDXIZue9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e3:53:74:9f:80:46:2d:fb:1f:5d:c9:cd:81:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=7d6845908b4bc04b6471b697502ae8bbdaa62287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:e2:01:89:c8:79:9f:0d:87:c4:a2:b6:e4:
e2:ec:27:b6:db:73:f6:83:06:c5:5d:1f:a1:a5:1b:
97:cb:9e:1f:97:d6:fe:d0:52:1f:c2:58:19:24:e0:
9d:3f:a8:c1:3e:e7:f2:60:39:b7:98:f0:f5:e8:c4:
b8:bf:01:dc:b3:15:b7:d2:3a:a0:27:57:a6:59:97:
06:c4:70:33:37:2f:03:fc:f6:de:72:89:42:9b:2a:
a1:23:53:f1:81:4e:e2:ba:fe:04:80:61:f3:b3:81:
d9:d6:81:6f:d5:78:1e:e7:2f:d6:7e:c4:c3:1b:3a:
82:52:95:93:7f:88:43:fe:b5:e7:d1:f2:33:ce:3a:
5c:fe:48:b6:fb:a8:93:f2:81:b9:9a:dc:71:6f:24:
c3:14:c9:ba:15:44:1e:96:ec:25:2a:15:10:6d:50:
b9:30:3b:34:00:bd:85:36:0b:ca:d2:43:95:f2:69:
5f:4d:a4:65:d1:a1:c3:c3:3c:68:73:63:9e:53:c1:
6f:48:a0:95:f7:f6:23:cd:6f:9f:98:c3:3c:8b:1c:
e8:5c:22:08:ba:d5:18:75:4b:77:cf:9a:0b:ae:5f:
60:1d:04:b9:51:73:29:37:58:67:91:30:15:83:6c:
46:97:05:d0:1e:33:49:44:7b:0d:a0:43:c9:f3:ca:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:45:90:8B:4B:C0:4B:64:71:B6:97:50:2A:E8:BB:DA:A6:22:87
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a5:85:c8:eb:5d:43:45:d0:ab:b3:be:20:05:9f:e2:0e:5e:
61:71:0d:2e:ae:e4:5f:fa:72:6e:32:60:90:2c:84:6a:f6:87:
66:40:ad:0f:ba:c8:b8:6a:e6:f7:a2:4d:24:84:fe:29:1f:bd:
ed:68:f5:36:9e:3b:07:a7:96:aa:6a:c4:8c:99:86:b6:82:dd:
0e:f6:da:3e:e2:e7:b7:24:4d:9b:81:e0:14:c3:e1:46:76:01:
90:fa:80:2c:c8:1b:cd:77:cd:00:f5:84:6b:79:c4:46:72:2a:
8a:4e:99:56:a0:32:be:0d:ea:8f:74:cf:22:9f:15:74:b5:08:
96:98:23:d2:b4:85:a0:aa:6f:ef:be:a7:75:45:f1:f2:59:8b:
eb:28:c7:44:4b:66:a8:4d:47:16:c9:6a:66:7b:2e:23:f9:f8:
22:4e:cc:5d:d9:b2:3d:43:3d:f8:e6:27:03:30:d9:62:6f:9d:
17:83:71:60:e2:12:08:0f:11:d4:31:fd:42:5c:89:75:ee:53:
5e:01:6b:67:4d:fa:93:17:59:05:4a:e7:05:4c:71:ae:29:c3:
93:da:47:9a:9a:2c:55:ea:e2:30:89:e6:36:d2:dd:79:3c:ad:
b0:81:67:22:b2:d2:0e:0d:c3:bb:fd:50:4d:5d:6c:be:03:3f:
d7:85:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:59 2025 by rpki-client