Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: 3JeZDXzGEd453XbvvIpN8ViRD9t82/79+qVAZGWC46U=
Subject key identifier: 55:6B:93:CF:0B:A7:C9:DD:AC:62:F8:1D:0B:E1:79:FF:50:91:0D:D2
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 0194BCA9E4C1D66587D8A9A1DB8F2DB2EF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 13F9
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: p6lVFpIEQ1Qb7oGi88LSl9dHhrux3lMnUyVm8F0AgNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:c1:d6:65:87:d8:a9:a1:db:8f:2d:b2:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=556b93cf0ba7c9ddac62f81d0be179ff50910dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:60:a4:dc:d4:e7:79:9c:a1:81:1c:16:16:
cf:c3:f1:75:a0:2c:fb:a3:1f:4b:d8:e9:e1:60:f7:
3f:f3:52:f3:73:15:ef:43:ca:f7:63:a3:19:56:9c:
84:eb:a4:e1:8f:20:d6:7e:a3:6f:44:56:3e:7c:0d:
c5:03:4e:43:be:e7:79:18:6c:8a:94:f0:f1:f8:bd:
fc:f2:61:e6:fa:74:99:2c:5a:7e:cc:01:c9:c6:64:
e0:df:9a:98:0c:09:90:4f:3c:d5:6c:f7:cb:0b:ee:
64:ca:76:79:e5:53:c1:94:8a:c1:a0:a8:53:dc:84:
79:ca:20:72:13:0d:f9:f1:d9:32:8d:76:94:a4:ca:
7c:49:93:49:dd:95:c6:c8:13:d0:69:f8:05:7f:ec:
83:b1:05:6f:2b:10:5b:e0:ef:6f:4a:b8:2c:86:6e:
26:ba:81:7e:64:cc:78:fd:bd:d9:f6:23:42:e9:7b:
3a:38:b5:2a:17:c2:18:85:92:73:63:59:f3:f4:1a:
12:5a:be:c8:93:16:25:57:71:8b:12:b8:c4:79:e1:
78:7d:17:71:4f:5a:b0:99:df:c3:ca:e3:d4:f6:f9:
27:29:38:6e:a5:64:06:9c:49:ce:39:6d:69:e1:81:
df:92:75:6d:22:8f:d0:17:98:47:0c:48:d5:dd:8b:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:93:CF:0B:A7:C9:DD:AC:62:F8:1D:0B:E1:79:FF:50:91:0D:D2
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ca:ac:22:18:08:f0:09:da:37:92:44:01:08:1e:c4:e1:69:
0b:53:4f:3b:13:1f:99:e4:fc:d4:d4:9d:55:a0:73:e9:26:5f:
20:20:0e:23:8c:2b:13:53:12:36:fe:54:4c:95:0c:5a:4b:fd:
03:fa:3b:de:1a:d4:e6:e0:5b:42:5b:6e:2e:e6:8f:f2:d6:bf:
7d:5a:a9:28:29:d1:c6:d5:51:ca:29:b1:df:1b:93:e3:65:b3:
6b:7a:57:b2:ca:52:22:47:0c:76:75:d8:4d:2c:43:02:ad:24:
79:41:e3:68:08:cb:28:cb:36:78:35:af:a1:34:f8:09:bc:11:
f8:ee:17:10:42:fa:16:62:ef:c7:7c:99:6f:14:72:9f:33:21:
32:59:fd:25:e5:65:0f:3e:44:4b:2c:48:e8:5d:a4:94:36:16:
ca:af:69:0f:f5:87:ee:85:b0:7d:25:a0:01:d4:1e:8f:b7:28:
d7:7b:b7:8d:01:a8:24:7a:38:d5:72:6d:e0:52:57:04:18:69:
c1:85:eb:f2:66:5c:d5:1f:fa:4e:06:7a:f1:b4:18:12:b4:da:
b1:2a:7d:8f:6d:b3:6e:6e:b6:b4:71:95:9b:7a:c8:ca:fb:dc:
db:bf:b6:61:6d:ce:a7:14:af:fb:69:ad:c1:96:31:4f:e6:1b:
f0:d2:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:54 2025 by rpki-client