Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.mft
File: UXg8beKTOjB1q6oti60j8D6nnBA.mft (raw, json)
Hash identifier: EIEnWKbXV12Hu0dluaYH1xsRNHa2msQY/qDLXcYdZV0=
Subject key identifier: EC:5B:F7:57:DC:FE:BF:DC:0B:2F:1A:91:12:FE:2E:72:6F:76:57:83
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Certificate issuer: /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial: 018513B93D94FE87CFAFA5BEBD49A9A1F71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.mft
Manifest number: 058C
Signing time: Thu 15 Dec 2022 02:59:44 +0000
Manifest this update: Thu 15 Dec 2022 02:59:44 +0000
Manifest next update: Fri 16 Dec 2022 02:59:44 +0000
Files and hashes: 1: 1IdhMyG1lRI-6muzRY4aIj2IKSs.roa (hash: hA/qd2c1/eHQyYyEyM2hhNSVBfcezBgHYMbfS9rkAjA=)
2: UXg8beKTOjB1q6oti60j8D6nnBA.crl (hash: BwCul15v9nA1kQIrUcGGwDeQynMP0/O3POE8bqAn5cE=)
3: lELiFczPNbwTYzdq6m9FfjLCFU0.roa (hash: uim5rZR00wklciNSoGpPr8NHGS/NhnzwCMl1rMfcafU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:b9:3d:94:fe:87:cf:af:a5:be:bd:49:a9:a1:f7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Validity
Not Before: Dec 15 02:59:44 2022 GMT
Not After : Dec 16 02:59:44 2022 GMT
Subject: CN=ec5bf757dcfebfdc0b2f1a9112fe2e726f765783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:41:16:76:76:20:7c:37:16:6d:ae:2a:8d:
aa:20:c5:a0:c8:fa:05:12:2c:9c:6b:75:68:6d:07:
0c:0b:65:3d:0b:4b:f4:47:78:7f:9c:09:55:25:aa:
60:04:21:1c:31:16:78:5d:4b:5e:e1:85:58:86:54:
ea:68:84:b5:45:51:a7:a6:ed:2e:91:88:f8:e1:6c:
e2:8d:79:65:dd:9d:5e:e8:fb:32:be:0a:c3:40:cd:
b7:50:1c:b5:fa:27:57:00:f9:95:01:5a:dd:42:d6:
92:93:00:a3:75:3b:5e:3e:2f:9c:8d:08:85:12:cf:
a7:e3:c3:af:c5:41:5c:c5:e2:a9:0a:b6:03:91:10:
6c:1f:91:e4:e9:c8:9d:68:cf:a3:9f:4e:aa:a9:8b:
54:1d:0b:3d:7b:ed:2c:30:5a:97:13:3e:92:f1:57:
51:3f:e4:2d:8c:89:28:07:e5:dd:58:c7:94:df:14:
6d:d5:db:35:6e:82:50:27:81:d0:f3:b8:0d:df:dd:
77:a2:0c:24:dd:c7:18:97:30:13:e6:7c:26:4b:ea:
27:7b:13:f4:a7:58:ec:2c:32:4d:09:dd:ec:27:39:
67:8a:7f:63:e2:7c:8e:ea:4e:bc:90:95:5e:04:1e:
a3:a8:b1:f7:24:32:75:59:4b:7a:ae:3e:02:98:3e:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:F7:57:DC:FE:BF:DC:0B:2F:1A:91:12:FE:2E:72:6F:76:57:83
X509v3 Authority Key Identifier:
keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dd:04:a9:36:f2:86:8f:98:9a:62:35:11:dd:ab:ad:6f:76:
4d:1f:0d:f7:13:92:23:5e:55:45:f9:91:7e:4c:a4:a3:54:da:
19:d5:40:25:0f:15:4c:92:a0:3c:d3:9f:2c:38:7b:99:c9:89:
21:11:df:46:74:75:14:5b:4f:2c:ee:5b:46:75:1e:ba:4c:7d:
e7:1f:ed:93:04:f2:ac:55:23:9a:8b:a0:af:87:d7:2c:1f:ae:
7b:6c:99:b8:ad:e8:df:79:ae:23:dd:df:0a:07:db:64:90:b1:
e7:4b:55:f6:f7:2f:a5:86:46:db:3c:c4:e0:2a:d9:8e:cf:7b:
f6:2a:90:f6:01:95:3b:32:c7:f4:a5:b3:2f:4c:b0:33:a8:9d:
f0:c4:e6:95:dd:67:d7:d0:dc:c1:30:f9:20:cb:62:04:4e:c6:
50:df:ae:29:36:54:93:75:13:a8:10:d6:2c:dc:8a:3c:1d:6d:
e3:09:d9:72:c5:2b:40:b3:f3:75:77:0a:a4:27:25:26:ca:66:
06:d6:4f:75:83:90:5f:c4:0c:4a:52:50:4b:5f:db:05:95:11:
ba:e8:73:ef:96:53:af:89:de:69:28:e5:83:92:a2:d4:06:50:
d2:6f:56:99:0c:db:65:a0:7e:b4:95:94:31:e8:98:3e:a5:10:
06:f5:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:24:18 2025 by rpki-client