Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 2T30o0NCycH67+cJLQCQYUr3gVkSQOwtTzXJxUD1uM0=
Subject key identifier: 98:F5:55:7E:49:33:BB:85:D7:7D:8B:AD:F7:28:1D:EC:15:F2:74:06
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0195E0EB4BD70853279B8D94352B2373DF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0C06
Signing time: Sat 29 Mar 2025 08:01:11 +0000
Manifest this update: Sat 29 Mar 2025 08:01:11 +0000
Manifest next update: Sun 30 Mar 2025 08:01:11 +0000
Files and hashes: 1: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
2: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: BiFVTilQ65oEw2NOORJJd8Nqo0dZ9mzFi5xz4JK3DgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:4b:d7:08:53:27:9b:8d:94:35:2b:23:73:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Mar 29 08:01:11 2025 GMT
Not After : Mar 30 08:01:11 2025 GMT
Subject: CN=98f5557e4933bb85d77d8badf7281dec15f27406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:e8:84:56:30:59:f0:cd:42:8e:01:99:bf:
05:05:ec:bb:6b:9b:8b:6d:00:9a:b9:e6:bc:5d:42:
b0:ce:e9:f2:23:00:74:19:00:75:f2:c9:39:bb:cd:
66:10:01:8b:93:b5:fc:a6:d7:8f:74:31:ed:e8:c6:
0b:ba:35:98:65:c7:99:a6:f9:d3:1c:82:6e:0b:8e:
47:bb:e1:71:95:36:12:1f:d6:60:81:4e:24:44:01:
db:e6:be:47:0a:3b:69:8f:62:4a:9a:ef:f8:9a:fc:
4c:b8:b7:49:4d:c6:8d:db:99:ed:84:93:30:78:37:
e3:88:1d:55:04:a1:33:b4:54:2f:cd:08:21:fd:e9:
40:4e:1d:97:90:08:f0:e7:04:1e:17:65:cd:1e:c8:
83:0d:10:17:fe:15:ab:5f:69:8e:d2:ce:2f:bf:56:
a9:68:cb:26:6a:96:ff:72:6d:b4:9c:53:38:82:2b:
a1:29:7d:16:fe:e1:53:fc:e1:27:1a:4b:96:fb:75:
0f:49:ae:7a:8d:5a:a2:ef:02:63:9b:e4:32:d3:c4:
b6:7b:00:ab:f0:76:61:5d:e4:40:78:dd:b2:b6:f4:
09:14:89:d0:da:b7:df:cd:a4:e2:3a:f3:9d:4f:f6:
2b:95:37:12:91:50:82:9a:56:ae:af:fc:a1:9c:be:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:55:7E:49:33:BB:85:D7:7D:8B:AD:F7:28:1D:EC:15:F2:74:06
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6f:23:cd:e2:9a:63:a0:80:38:d4:b3:72:a5:5d:0c:2e:f4:
3b:25:06:f6:2d:c0:76:e7:a8:a6:1f:2e:ab:d4:6c:c1:e8:ae:
b7:ea:3b:b3:a0:20:b8:23:65:3d:3f:dd:4e:e4:c5:a6:b2:9f:
33:5f:b2:af:15:16:04:41:c4:f3:93:a8:85:3d:6f:bc:97:81:
3b:e9:71:c5:8d:d4:e8:05:bc:34:90:af:92:be:33:16:2f:3e:
7a:e8:89:70:9b:2b:59:b9:2e:ab:80:1e:ff:25:92:59:c1:d1:
16:a6:9f:36:67:3c:a1:51:f8:12:92:ec:ca:f1:86:1a:42:66:
f9:3b:a6:50:ec:8c:d7:2f:db:d7:1f:77:c6:de:c4:6f:cf:99:
e3:17:68:23:75:1c:12:67:ff:76:2b:64:7b:bf:2f:eb:65:46:
af:20:31:de:b3:c0:03:ae:40:ab:d5:42:ab:9a:0d:b1:ea:e3:
df:23:44:d0:3b:16:a9:4c:d6:04:0c:29:3a:da:cd:7a:57:fa:
c2:bf:da:e3:62:29:5c:af:22:43:83:fa:8e:be:02:4c:58:aa:
e2:50:84:bf:14:51:19:35:d2:43:37:e5:ce:af:59:54:d3:33:
7f:de:c8:cf:97:67:46:b4:61:68:81:cd:74:50:a4:25:17:68:
9a:6b:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:49 2025 by rpki-client