Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: tt+cymJ9T6bHfHQKMtBS86w9KuMva9/VWN8JFMc3a1c=
Subject key identifier: 8C:69:CC:99:07:BD:FC:AD:95:12:53:C6:A3:4B:33:F5:2B:ED:1D:BB
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 0194BD4E605D35D0F939B9C8C95AC4238F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 067D
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: SMjGjyL7e71rmPNCwXK2AydYLmQ6wUbjEiWkrxX0AUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:60:5d:35:d0:f9:39:b9:c8:c9:5a:c4:23:8f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=8c69cc9907bdfcad951253c6a34b33f52bed1dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:ec:eb:28:59:b7:00:b9:55:07:72:92:a8:
97:14:98:d6:ef:71:c2:4a:54:9a:09:91:9e:81:05:
41:16:1a:4f:1a:66:6a:7b:e6:c2:aa:93:a3:2c:eb:
99:44:a3:22:f0:8c:71:35:7a:1e:b0:0c:ef:7b:a6:
bb:87:d5:cc:f4:07:90:e7:3f:a3:15:43:0c:8c:26:
d9:c2:ce:7d:3a:76:22:9c:39:fa:9c:34:6e:13:b8:
8c:ee:55:e7:7d:b0:58:3e:59:28:12:52:7b:e6:71:
78:4c:70:d0:0b:af:54:71:77:21:f4:0e:9d:ae:a4:
02:b1:c8:3c:4b:c7:77:a4:a4:1a:3a:64:11:5f:25:
bb:dc:be:ad:b3:ff:0b:a6:4e:e0:32:c9:6d:a8:fc:
77:c7:54:c8:d9:12:17:98:e1:e4:2c:b0:24:96:2d:
9b:5c:66:28:3c:70:d7:f5:1b:34:86:13:b1:7e:9b:
3a:f4:70:3b:05:53:79:00:07:4f:65:d1:44:d3:c6:
6c:ae:bc:c6:36:83:65:fb:98:b5:78:74:01:3e:ab:
d9:d9:88:28:11:49:87:d0:9a:b6:69:7f:11:b6:a1:
57:f7:2c:6e:09:93:f9:00:cb:4d:b4:28:87:04:89:
b9:bc:bd:e3:c8:f8:0b:f9:c0:2d:f8:d8:d1:00:18:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:CC:99:07:BD:FC:AD:95:12:53:C6:A3:4B:33:F5:2B:ED:1D:BB
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:23:d4:74:70:af:49:ab:f5:54:3e:4f:60:a5:c7:3b:81:
a3:71:c0:2e:55:fb:67:3b:24:4f:e2:1c:b3:ea:e1:30:a5:e4:
68:ee:6d:4b:85:86:53:c1:75:fb:15:69:2f:a0:bb:89:01:b6:
bc:77:a1:86:2d:e5:75:31:8b:d9:f4:9d:1a:76:dc:48:f1:e2:
44:db:2f:16:b4:a0:ba:13:40:ae:94:eb:df:8c:a2:6d:c7:99:
b9:ed:82:11:06:1f:a5:93:9d:5d:98:65:00:49:71:d9:f2:84:
45:f8:a0:a2:c4:6c:f4:d0:67:9b:06:37:c1:1f:63:bb:ef:e1:
8b:e6:10:5c:6c:49:fe:63:ca:46:e1:a0:8b:63:d8:25:e8:b2:
dc:b7:04:e1:b6:84:ad:f5:07:e3:b5:76:4c:af:ff:45:a5:36:
f0:f4:aa:63:d2:ef:bf:b9:0a:b7:93:47:ee:e7:08:44:12:1b:
6e:72:35:3a:bb:e0:9c:12:50:6e:c5:15:d3:94:7e:56:a4:73:
28:73:21:0a:c5:a0:60:0a:13:f0:a9:c7:c8:ab:de:77:7e:34:
af:08:de:37:31:ad:5d:36:11:fe:23:81:84:c7:6e:a7:89:8c:
87:91:5a:15:99:e6:53:75:10:03:dc:57:20:b0:e7:45:14:11:
3c:ce:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:48 2025 by rpki-client