Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: IKuQSphTjYPslZgfNYXcDaxdjyPkbjbbmfZ5LLu7src=
Subject key identifier: C7:C9:D3:F9:4B:3C:2C:B1:DE:17:9D:06:0D:5C:C0:3A:DD:BE:92:FB
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 0195E0B4841BC675C56DA5502C730E2C737A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0C1C
Signing time: Sat 29 Mar 2025 07:01:21 +0000
Manifest this update: Sat 29 Mar 2025 07:01:21 +0000
Manifest next update: Sun 30 Mar 2025 07:01:21 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: c0qF9L8gs5/ipQXqJYjJUDxHvlvInhIhH0f+SIDCOEY=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:84:1b:c6:75:c5:6d:a5:50:2c:73:0e:2c:73:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Mar 29 07:01:21 2025 GMT
Not After : Mar 30 07:01:21 2025 GMT
Subject: CN=c7c9d3f94b3c2cb1de179d060d5cc03addbe92fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:e9:4e:05:64:00:ff:29:55:d9:c1:4c:45:
cb:6a:e1:e3:2e:8f:a1:9d:a2:6a:9a:bc:d1:d7:db:
fa:c5:ae:af:ea:31:11:fa:7f:40:b8:e5:8a:d8:1a:
3c:30:50:fd:29:1e:99:f2:d2:8a:70:b5:89:56:61:
09:67:31:e3:54:f1:5e:13:8a:bc:bf:b9:8b:17:10:
41:57:7c:04:ee:24:5e:b4:55:ab:47:75:39:ab:0b:
75:00:87:20:2e:2b:30:aa:6e:11:ad:9a:01:95:82:
17:45:20:27:88:ac:f3:a5:43:9c:53:06:de:94:48:
2f:1b:c7:9c:9b:27:25:39:44:41:ad:bf:16:c4:b6:
ab:1e:12:b2:77:ef:83:f4:77:31:06:5a:dc:1a:ad:
3e:3d:4c:bf:aa:82:ac:fc:98:54:e6:3d:04:a4:9e:
40:7d:a5:95:f1:6d:02:d1:29:12:8f:89:33:ce:ab:
da:d7:81:ba:d3:2f:dc:41:9e:86:da:f4:e2:15:c9:
7b:09:4e:4b:16:44:48:7d:f7:e6:02:b1:4d:65:93:
4f:2e:d9:74:03:79:49:fc:aa:de:98:8b:3e:5d:14:
1b:36:b6:c7:cd:6e:36:41:a8:fb:0e:14:14:76:07:
e5:e9:c5:92:3a:b0:12:2c:9f:16:9b:e4:bf:28:8f:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C9:D3:F9:4B:3C:2C:B1:DE:17:9D:06:0D:5C:C0:3A:DD:BE:92:FB
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b8:4c:1e:20:ea:70:6d:b0:1a:9d:28:1b:7d:e4:c6:4e:98:
fb:b4:9c:ed:e6:86:a0:54:2f:c4:1b:45:c5:80:e5:d6:fd:d4:
cd:13:6c:14:42:67:e2:8e:39:f7:a8:45:e0:84:d4:90:f7:43:
d0:b2:a8:84:4f:b8:25:27:f2:06:36:0d:9c:3c:35:50:00:f4:
76:81:ed:26:a8:06:81:ff:ba:70:35:00:52:dc:76:0b:11:99:
23:79:1b:9f:60:ee:b5:ea:43:70:27:27:95:57:5c:0d:a9:29:
cb:0c:06:8b:fa:b9:8c:89:51:c1:2d:4c:0f:f9:99:f4:57:8c:
98:b1:0f:c8:51:7f:d3:70:cb:07:a9:43:26:06:b5:88:7d:8d:
90:43:27:f9:6a:e9:f8:ac:0a:95:1e:e4:ad:02:ed:76:b2:00:
f1:5a:21:ff:5d:5a:66:03:df:06:be:6b:59:6b:e8:a7:d8:bd:
f5:12:bf:e1:e0:02:a2:e2:9a:f4:e5:db:63:bb:7c:3a:e7:53:
f8:bf:32:6b:93:a4:56:1f:0d:8b:9c:2e:e6:6d:f7:86:57:f3:
93:4b:0a:74:09:74:63:72:e5:0f:68:0f:b8:94:6c:0b:d6:21:
eb:a5:2a:ac:2a:92:e1:f2:2d:6c:d9:be:5d:df:79:36:ae:7a:
6f:93:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:07 2025 by rpki-client