Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: aAc7w/ASl4u4rISZ1og5yFsWOqzXI65yAbZV2lzZOgQ=
Subject key identifier: 8C:54:B8:EF:07:52:BF:21:29:9C:AC:E0:B1:F6:CA:A0:91:F2:72:CD
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 0194BC0523310AC860B7DFD04CDCAEF96649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 0CC7
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: Vevc9vrQGyVF5o4NzN0QFHnZAiA.roa (hash: AOWcNE88wNCBWfSzm2+MmaRV4c7usJ5kQGrhyE8Gj6M=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: 4mz9VE325VN0qdoYy9OPMlq8+WSRbgAR8k1hKkM9lfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:31:0a:c8:60:b7:df:d0:4c:dc:ae:f9:66:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=8c54b8ef0752bf21299cace0b1f6caa091f272cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:7e:2b:1c:af:86:ef:15:7c:ac:e7:93:83:
09:9b:f4:e3:9c:b5:da:5c:2f:c1:31:62:61:76:a0:
60:72:be:99:16:8e:73:17:7c:c3:77:10:f7:a7:ca:
b5:b0:aa:74:7b:80:11:28:ef:b9:b5:cd:9e:63:96:
b1:43:fb:ff:e0:1d:95:e3:cc:1e:ac:28:ae:00:24:
08:f0:6a:c4:bb:fc:5b:be:a0:67:a0:ee:4b:57:da:
d7:fa:df:12:4c:19:65:7c:bd:0b:90:3d:78:d7:b1:
ac:cc:8a:a0:f4:2a:bf:0b:73:93:e5:8d:e8:d4:9f:
06:cb:ed:63:1d:ff:67:91:3c:0b:b0:99:2f:78:0d:
9e:2f:00:47:5b:75:7f:0b:26:da:e3:89:28:c2:f9:
61:74:03:79:c0:25:e1:a6:5b:ea:32:11:02:89:cb:
de:2a:b0:de:27:ea:99:b8:0a:5c:e1:f8:34:cd:9f:
29:52:ce:9e:7b:a5:d6:c8:40:43:a1:40:d5:c2:b2:
f4:8e:25:7e:d9:09:27:8a:b7:31:87:92:85:ca:fe:
95:ae:95:16:3d:f1:1a:db:21:0d:c7:96:33:9a:25:
19:d2:b7:97:02:c4:13:4a:fb:51:c2:fe:2d:44:14:
bd:68:59:f3:f3:2c:3e:98:65:ff:af:9b:0c:0c:06:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:B8:EF:07:52:BF:21:29:9C:AC:E0:B1:F6:CA:A0:91:F2:72:CD
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4a:67:0c:d6:51:45:6e:f8:7d:d2:28:38:c3:f4:72:47:47:
6c:49:25:61:9d:2c:4c:64:f0:9a:b6:9a:55:dc:92:83:58:54:
06:08:d7:b6:32:23:58:0e:b5:63:2d:c3:cc:8e:71:31:a3:df:
fd:fe:10:a3:22:77:96:84:e3:8c:11:ad:75:37:0a:f6:20:b7:
41:03:8c:42:1d:58:56:4b:f1:b6:77:41:52:bd:81:c9:00:96:
b9:44:18:7e:37:e1:fd:ea:1d:7e:d0:8e:1a:c7:e6:a3:a6:33:
eb:9a:3e:09:6e:4a:03:05:0e:60:78:f2:ce:6b:91:61:56:f6:
f0:62:72:7c:f2:70:6c:e5:3d:e5:da:76:6e:12:44:d1:8f:03:
f3:1c:de:fd:e1:00:98:26:7f:22:81:54:2b:01:fe:13:9b:a3:
3a:fa:33:7a:55:02:00:fb:9a:0f:a5:4e:84:9b:6f:3c:a1:61:
03:2c:80:11:d9:c9:5e:48:9a:b8:54:e0:1b:e3:73:3a:97:69:
31:13:8d:62:a3:66:25:1f:fb:08:32:30:01:b7:96:b1:42:93:
ed:bc:9a:3a:a7:93:96:88:9d:35:d6:bf:30:a4:ed:16:38:dc:
1e:de:88:80:fa:3e:b2:1c:ce:97:5a:93:d4:7b:81:7f:8a:d6:
37:b6:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:31 2025 by rpki-client