Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: 4Ms9YCf34ivBE24V/8Hy+tSlWqCIZMdlOvChAHtUSTQ=
Subject key identifier: 35:FA:58:45:BF:1C:17:73:54:55:46:1A:5E:23:65:F2:6F:0C:B8:6D
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0195E00FEF33A4F1D816BB9BA6BA42ECC584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 02B0
Signing time: Sat 29 Mar 2025 04:01:35 +0000
Manifest this update: Sat 29 Mar 2025 04:01:35 +0000
Manifest next update: Sun 30 Mar 2025 04:01:35 +0000
Files and hashes: 1: 9uAJrIJKgOtOq3ATLuk4JEqJnwE.roa (hash: ps7+JDVzTyszBozCz4/MWq6V+oPhM0t6V9fw2FhYV+o=)
2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: 5I622tkcQ/hKJiGgDEyaCyiBuuJQCYDqrPDcxY8L1hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ef:33:a4:f1:d8:16:bb:9b:a6:ba:42:ec:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Mar 29 04:01:35 2025 GMT
Not After : Mar 30 04:01:35 2025 GMT
Subject: CN=35fa5845bf1c17735455461a5e2365f26f0cb86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:63:17:e6:ca:f8:1f:ea:0c:93:ed:18:5d:
fa:6e:b7:96:8c:44:9b:fd:e4:b7:2f:da:5a:88:db:
85:86:31:c5:b0:de:bc:9e:20:99:63:f8:1f:b2:fd:
f3:ed:72:27:f8:cc:b1:7d:c7:aa:fa:d0:91:94:f2:
e5:d6:3b:03:cf:15:b2:bb:a5:a3:34:fc:ce:24:49:
dd:48:be:bc:e8:5a:3d:79:d7:79:e4:a3:eb:23:31:
10:8c:60:68:97:cf:c3:56:23:b8:08:7a:ff:bc:8e:
6a:be:26:7e:f8:13:1e:9e:6f:2e:02:3b:7f:32:90:
e0:68:d3:9c:ea:65:d6:75:71:6f:1b:c5:3a:ee:dc:
82:03:14:3f:aa:13:fb:3c:d8:07:82:58:74:b4:d0:
f6:e8:8a:b4:4b:3f:e8:9e:63:dc:75:ac:a5:3b:13:
2f:5d:de:d7:13:e7:97:40:71:8e:0d:84:ab:f4:d4:
d8:5e:0e:c8:0a:85:b5:a9:97:a6:71:88:12:e0:b5:
1f:7a:cf:2c:d6:83:3f:8b:71:90:1b:f1:ff:0c:84:
13:b8:48:bd:a9:27:3d:e2:46:6b:d2:fe:28:a6:c5:
9e:cd:6e:85:90:a1:37:05:95:c0:0f:34:74:ba:de:
42:41:e1:b1:4e:01:3d:f8:4a:26:c1:f3:65:85:bb:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FA:58:45:BF:1C:17:73:54:55:46:1A:5E:23:65:F2:6F:0C:B8:6D
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:29:2e:05:0e:8d:7c:be:d2:ce:a1:a5:a1:27:bc:d6:5d:09:
50:75:fd:6b:94:3d:16:7b:70:97:c0:ef:11:07:f5:8d:7e:5a:
c7:b6:bc:9a:c4:76:e7:c1:94:ac:b1:e3:04:cc:a0:c8:22:35:
9b:d2:79:b0:59:04:f0:d2:ca:0f:2f:97:74:c3:8b:e5:ab:eb:
fc:79:69:17:e7:c3:77:ce:e1:04:68:e3:1e:c8:b0:11:1b:3e:
52:b0:04:7a:31:0c:f8:0b:14:79:2c:a1:4d:4f:cf:71:4b:22:
6a:54:cc:8c:b7:1a:7f:73:0e:d2:bd:79:f5:fc:fa:7f:88:fa:
50:3e:7b:75:89:0f:a3:61:73:cb:e0:3d:b9:c2:15:e8:c4:40:
dc:83:10:ad:d8:f6:c7:8a:67:ed:42:b1:3c:d2:0f:01:82:12:
27:09:08:d9:1c:1e:59:64:1a:ab:ea:65:c3:d1:c1:ab:42:e8:
14:36:f3:51:fc:c9:8f:51:cf:46:9c:c1:b6:5a:b7:57:86:b8:
e4:3c:87:6e:df:01:bc:7c:a4:d4:76:78:d8:0f:51:84:e8:2c:
55:ba:85:88:70:e7:5c:d0:3d:36:ae:25:ff:d0:60:28:94:d6:
97:87:a1:77:7a:02:4e:6d:0f:3e:fd:4f:e8:ea:6a:e5:25:dd:
c1:3c:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:55 2025 by rpki-client