Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: uOS1VHUriM2mS59SAOLzluztcQqnLy81CdDEAYLFh1Y=
Subject key identifier: BE:98:92:2C:78:87:12:41:23:DB:AB:BE:5C:4E:43:88:D3:FA:D2:A8
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0195E190965214602C4254B3D3AF3AF72416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 139E
Signing time: Sat 29 Mar 2025 11:01:44 +0000
Manifest this update: Sat 29 Mar 2025 11:01:44 +0000
Manifest next update: Sun 30 Mar 2025 11:01:44 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: 25UeAN9Qv7gZuWgsoMAnAKGeVdA2SyZJGlpdJbpzX7E=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:96:52:14:60:2c:42:54:b3:d3:af:3a:f7:24:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Mar 29 11:01:44 2025 GMT
Not After : Mar 30 11:01:44 2025 GMT
Subject: CN=be98922c7887124123dbabbe5c4e4388d3fad2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:7c:a4:70:9d:26:07:be:5d:2e:6a:bf:4f:
29:be:3e:55:f5:16:22:4e:f0:a4:80:3e:1e:bd:7f:
b5:85:f1:5c:c3:b6:7a:d9:3f:ed:a3:62:fa:7b:fd:
b5:0e:1f:62:96:bf:31:c6:fc:23:a0:47:0b:b3:73:
49:5a:6b:79:f6:5c:50:b8:ed:5a:8f:8b:c6:f6:78:
4a:2b:97:a3:0f:e5:6b:02:3e:09:67:28:4e:c9:c5:
46:24:0a:e7:e0:61:ee:30:68:86:39:5c:7e:2c:45:
e1:a3:47:d2:98:9f:8c:28:aa:0f:60:3a:0a:ac:83:
b0:11:d1:ee:70:99:0b:54:0f:83:68:f7:5f:37:f0:
2f:4f:f9:be:99:c9:73:2e:e1:a8:47:a0:64:82:ce:
8f:e2:bb:73:c5:59:b9:95:ae:c6:69:61:d8:9e:18:
d1:0d:0f:f3:f7:94:37:57:81:c3:d9:df:5e:cf:4d:
05:2a:4c:a1:b2:db:53:49:f5:07:4d:a8:20:04:ec:
da:d7:34:8c:c3:c9:fa:3d:06:c4:0f:24:81:8f:3e:
3d:88:4c:f4:7a:8f:b4:5e:3e:f9:15:5c:4d:04:cc:
b3:0b:77:b9:ca:f1:26:22:91:f9:ee:ab:61:1e:ce:
dc:b6:2f:79:e2:02:f2:89:b7:ce:6b:70:89:0c:58:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:92:2C:78:87:12:41:23:DB:AB:BE:5C:4E:43:88:D3:FA:D2:A8
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:44:19:77:34:11:51:83:30:50:7a:58:7c:58:b5:3d:10:1d:
8c:64:27:d2:82:ae:5a:c0:3e:22:c9:86:fe:c1:66:67:9a:cf:
06:d8:9f:53:dc:3c:9e:70:5f:91:cb:da:03:fa:e0:f5:c2:64:
a4:57:5a:ec:62:29:fb:c0:85:85:ed:9a:d7:0e:35:86:8b:ab:
a0:97:62:34:ef:b2:52:ca:80:a1:42:5f:ca:65:16:cb:e1:6a:
07:f1:87:cc:ea:18:f5:38:30:ab:20:29:30:89:36:83:01:d0:
85:e9:c4:fe:e5:f7:48:75:8e:64:88:b2:2a:6b:e7:a1:8e:24:
a8:46:1b:70:a3:9e:2a:68:a4:87:3d:fe:50:bf:4e:08:bc:c0:
1c:2f:b5:16:86:49:f4:0b:ac:7e:93:43:0a:7c:cb:bf:a0:8e:
6e:eb:8a:43:d4:53:de:55:46:88:80:e6:c4:6e:28:c2:b1:f6:
93:b9:94:3a:09:e9:e8:46:f1:14:70:72:c1:5a:b3:57:7b:5c:
1c:ad:28:b7:32:ae:b0:cc:30:14:66:fa:26:09:bf:fb:70:e1:
d2:c3:66:50:37:82:02:94:cc:5f:eb:ef:75:61:dd:13:e7:0c:
18:b9:f1:7d:f0:58:d3:7d:73:5a:05:64:36:0a:a4:8b:7f:3d:
ae:b2:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:08 2025 by rpki-client