Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: 417CYfJrPDA1phcDkPAmD0wvCA9PgctMaYmJhL+O89o=
Subject key identifier: C1:3F:87:26:B8:E0:F5:55:A8:2F:FF:36:8A:47:3C:2A:E8:77:03:05
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 0195DFD8FF5D76A3FD20D7F8C389D9B1B8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 14CE
Signing time: Sat 29 Mar 2025 03:01:35 +0000
Manifest this update: Sat 29 Mar 2025 03:01:35 +0000
Manifest next update: Sun 30 Mar 2025 03:01:35 +0000
Files and hashes: 1: 3BGSsazfJf8DV-j0E3wTBcOWujk.roa (hash: PB1pHmSm/Egpw9UdFofIpc3WMt/5B941IfxXaR4CROY=)
2: DFgAMB_c4WeZyOx-eglKZBMeXuM.roa (hash: X7EnRSIwEjRtkMbUxZKI4C9GzuFGjpE6JJQKft4XunM=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: v0Gylsn+UMB2vYCfJeC/bmXlWTjge2dwod5ygLibI4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:ff:5d:76:a3:fd:20:d7:f8:c3:89:d9:b1:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Mar 29 03:01:35 2025 GMT
Not After : Mar 30 03:01:35 2025 GMT
Subject: CN=c13f8726b8e0f555a82fff368a473c2ae8770305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:2e:b5:82:4b:e9:38:84:7d:d9:dd:fe:ab:
00:7a:37:e1:7b:9e:87:94:2c:81:2f:17:47:3b:a5:
e9:be:88:c0:3c:0a:7c:b9:08:35:0f:7f:21:84:4e:
ed:07:dd:83:40:9f:b8:b8:7c:6f:a6:55:31:4b:75:
4b:f6:04:8c:f8:cc:22:a4:f7:42:ed:89:f5:03:14:
dc:11:3a:b4:fe:2b:66:c8:85:e0:56:5b:c0:54:01:
96:3c:f0:78:2d:3e:6a:6b:bf:33:06:24:ed:a2:4e:
52:73:3b:4f:ad:5c:7f:f2:9b:54:e3:f9:41:75:1e:
8a:a5:40:a4:dd:31:f1:33:34:a0:d8:38:07:5d:3f:
f4:07:2f:15:d5:32:4e:57:94:c7:03:3e:43:b9:72:
0e:4f:99:01:b2:2b:79:b5:99:20:ea:83:d0:f1:97:
71:d4:24:76:47:52:0a:1b:7d:45:90:71:8b:f3:87:
5a:dc:1c:66:62:20:b3:f0:49:c3:c5:22:21:d4:d3:
fa:ae:da:e6:68:a0:d7:7c:a0:7a:9e:30:f5:99:9b:
d3:2d:01:9d:42:0c:4f:44:69:2b:ba:23:2a:3b:5b:
05:77:93:5a:6c:2b:bd:d2:71:59:03:d0:63:8a:53:
b5:d8:4b:8d:18:35:2d:f5:ad:2e:07:3f:c7:aa:91:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3F:87:26:B8:E0:F5:55:A8:2F:FF:36:8A:47:3C:2A:E8:77:03:05
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:16:2c:52:4f:e2:43:c2:79:04:98:3d:80:36:61:ee:13:0f:
f6:0e:4e:1f:ae:bc:5f:9f:ea:63:a8:23:1e:09:06:b9:26:5c:
e8:7c:be:52:43:ce:cb:20:e6:ae:da:9f:13:be:a1:17:9c:95:
22:52:3a:75:d8:e1:54:33:d9:69:f0:99:56:d5:44:28:33:7e:
f7:95:bf:df:1b:e7:16:fe:0f:dc:29:2c:3a:95:01:00:b1:52:
d1:ae:7e:e0:3f:a7:eb:21:48:7a:d8:87:5b:bd:1f:17:d0:90:
cf:1c:14:8e:b5:cc:c2:0b:84:eb:1d:4e:73:7d:71:6d:87:71:
14:1a:20:46:16:d0:03:4c:24:10:fd:0e:6b:97:79:b0:cc:a7:
22:3f:3a:ad:a5:c3:25:b0:87:d9:d5:62:ce:c4:09:d0:33:b8:
49:b4:91:58:03:01:4e:da:b9:3f:b8:71:a8:37:cd:87:7f:4f:
cc:cd:6f:52:b0:41:a7:39:ea:d4:a1:a0:8d:00:11:87:78:06:
c9:8e:ca:d5:d2:f8:e2:b4:bb:45:a8:6a:f0:de:bb:43:da:aa:
99:63:c8:d2:19:7d:43:16:1a:b2:61:77:c1:ab:27:5b:ed:23:
9e:03:07:4f:e8:47:73:b0:89:a2:ca:26:84:53:fa:14:58:a9:
a9:d7:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:04:22 2025 by rpki-client