Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: 6A+dXCy2fmMeLuqWY9YEaK+o9gkKGxeW2cJ93ZhVmsk=
Subject key identifier: 00:B3:1E:37:72:CD:D0:5C:65:D0:AA:18:C2:72:2B:18:91:79:29:5E
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 0195E00FF464F84C8ADD522C257551914D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 123A
Signing time: Sat 29 Mar 2025 04:01:36 +0000
Manifest this update: Sat 29 Mar 2025 04:01:36 +0000
Manifest next update: Sun 30 Mar 2025 04:01:36 +0000
Files and hashes: 1: Rhvq-3I2JQodRxI7VKRql93OJ3M.roa (hash: oIzcs0BJKAmA6GOFglDXu3e6/Eh1xz9z150djcj0rbQ=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: F6CgPWdj6vfYWEvmcfhGnWVTmZYQQ277xrWS7uglg/Q=)
3: wXoIWeTQJHkXu9XoUihBMthRkSA.roa (hash: CounkqLJLR1NgaMlvIjAZph0Mee7Au4wuj3jTinKD8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:f4:64:f8:4c:8a:dd:52:2c:25:75:51:91:4d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Mar 29 04:01:36 2025 GMT
Not After : Mar 30 04:01:36 2025 GMT
Subject: CN=00b31e3772cdd05c65d0aa18c2722b189179295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a4:43:9d:ad:db:19:6d:e3:60:3c:78:8a:e6:
27:c9:9e:56:cc:57:95:c2:23:1a:b2:70:3f:df:2b:
f5:5d:b8:6b:88:a8:80:19:d2:7e:86:9d:e1:ab:45:
ef:19:12:ef:ae:a7:a7:bf:84:5b:c9:d8:c8:5c:4b:
7a:af:fb:c7:e8:61:fd:0b:50:86:52:3d:48:64:74:
d8:4a:42:0d:16:9a:1d:0d:cd:c3:8e:6b:bf:94:12:
5a:12:13:f6:5e:6e:c7:e8:2b:cd:80:03:6a:54:1a:
63:d9:1a:a6:25:0a:89:6e:0c:ab:a4:bd:44:75:7b:
a6:5e:ad:12:93:b4:48:ae:89:19:e7:40:3a:ea:1c:
34:4d:8a:d5:49:37:b6:5a:61:2f:e6:48:c0:61:4b:
ed:17:74:07:03:71:0d:89:04:f1:88:93:0c:75:8d:
f7:b5:eb:a6:7d:80:f9:6b:7f:91:db:f9:b4:3c:30:
4c:ab:b9:bd:90:1f:f6:ee:da:2b:54:83:ec:64:0c:
8a:ef:76:f9:3e:fd:84:34:11:50:e5:b1:81:c2:3a:
90:57:42:2f:ff:dd:59:cf:87:e4:4f:7c:d9:ce:b3:
00:e1:e4:3f:d6:cc:ac:59:b8:cc:c7:7b:a1:5c:43:
98:b5:d0:7b:cd:90:8c:73:94:c7:9c:43:09:61:f9:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:1E:37:72:CD:D0:5C:65:D0:AA:18:C2:72:2B:18:91:79:29:5E
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6c:01:13:a8:7f:38:33:55:c9:89:ba:c7:67:a9:69:bf:65:
82:a7:71:ef:90:ac:13:e8:32:38:2c:3e:7a:a3:f2:25:a9:96:
5b:b2:73:fa:9e:8b:0c:3b:26:92:96:36:b9:18:d6:26:5d:7f:
66:57:2d:87:c9:d1:b9:dc:05:8d:75:37:7d:7c:62:57:61:8d:
a5:a4:ea:bd:38:45:c0:7c:5c:11:e5:35:89:63:d8:01:15:e6:
1c:7d:f0:a2:8b:83:6d:33:88:dc:5e:03:4d:6b:12:0d:53:fe:
94:7a:23:8b:d7:e2:30:da:55:c6:d9:d3:a3:f3:7a:e8:79:85:
33:e2:61:79:9e:7e:03:bb:f4:68:c7:df:8d:c6:9d:9d:74:23:
2c:43:02:90:1f:8e:55:3c:98:71:fd:e9:56:53:87:9b:d5:34:
01:2c:33:3e:7f:45:bb:90:a2:d5:ae:1a:f7:72:3e:2b:82:b3:
98:f9:8f:c0:d3:19:71:f8:ff:b9:9c:a0:e9:57:60:16:af:d5:
b5:69:35:8b:e3:1a:02:5e:06:43:10:8a:b5:7c:0f:39:e7:e6:
4e:1f:88:7e:0a:51:68:62:b9:03:a0:27:0c:7d:ee:f8:8a:f2:
7f:a8:ec:c4:79:8f:9e:5f:89:ba:be:65:63:bc:f1:06:92:5a:
c4:3f:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:15:50 2025 by rpki-client