Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
File: UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft (raw, json)
Hash identifier: hwux09QIzu3eHhPKmSB5JifoJ2KOMa7IMNQf5l52pZA=
Subject key identifier: 5F:FD:11:4E:80:0A:3F:F5:19:3E:E6:D3:C6:F5:E4:BA:FE:41:E6:E7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A9246A4FB1892F2863EFF5165B81AA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
Manifest number: 37BE
Signing time: Tue 18 Mar 2025 12:04:49 +0000
Manifest this update: Tue 18 Mar 2025 12:04:49 +0000
Manifest next update: Wed 19 Mar 2025 12:04:49 +0000
Files and hashes: 1: 1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa (hash: PupEsIXHB6rGqEymngMsBPy2Wh8A195/YgvNAUoFwO4=)
2: 6QplZ_NEAclj2Ixf79V9cPZ1awg.roa (hash: syL5DsSMPybDIIyggtYqdoPTKl1kWTZJKT6VPE9+jzc=)
3: UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl (hash: bndU4ykd59brO2PjE2OhsOzbd+72oQ54pZFms8iLw2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:24:6a:4f:b1:89:2f:28:63:ef:f5:16:5b:81:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 18 12:04:49 2025 GMT
Not After : Mar 19 12:04:49 2025 GMT
Subject: CN=5ffd114e800a3ff5193ee6d3c6f5e4bafe41e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:f8:15:86:c1:9f:ee:bb:66:34:6a:fc:ce:
fc:5e:c3:4f:c4:99:61:5d:0c:73:0c:69:f6:a9:42:
48:e6:18:c4:02:fc:c1:d7:2c:f0:2d:57:24:b8:1b:
46:5f:a1:ac:d5:31:83:d6:15:ee:6a:76:f0:53:1e:
1d:f6:80:9e:5f:74:3f:9e:c9:7e:4d:d6:79:d3:19:
07:62:1f:4f:63:f8:ea:24:bb:23:ce:25:37:a3:fa:
1c:21:8c:28:68:88:55:52:0c:18:de:65:8f:f1:17:
bb:23:b4:e3:c0:d9:39:d0:11:de:f7:af:57:d2:10:
dc:0b:e7:67:81:45:a7:51:0d:8b:96:87:7f:e1:53:
5d:aa:c3:e4:db:47:83:ec:72:cd:79:f9:53:83:27:
60:b2:46:3a:2e:f3:45:aa:05:e8:ee:a1:8f:41:ee:
76:9a:ab:fc:76:4c:83:66:42:62:97:5e:be:83:ad:
a5:24:b4:0e:a7:f6:8f:16:5c:6c:b5:73:78:2d:dc:
81:81:77:4f:ec:58:7a:6a:b6:f4:2f:ce:2d:c5:35:
38:a8:fa:be:e9:79:46:3a:5f:08:d1:bb:c2:85:03:
b4:30:fe:45:65:24:a7:4b:ae:74:23:8a:49:ed:03:
6d:9a:a5:55:cc:53:98:66:29:7a:bf:49:70:49:b0:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FD:11:4E:80:0A:3F:F5:19:3E:E6:D3:C6:F5:E4:BA:FE:41:E6:E7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:ec:41:3d:ff:22:b1:82:0e:be:7c:c5:52:70:af:44:23:
4d:e2:3c:20:d8:8a:88:d1:15:b9:72:eb:64:8a:dd:f6:f5:f4:
59:e5:83:fa:48:28:51:6c:1a:b6:23:f4:b9:8a:e4:91:54:7b:
d4:25:aa:d0:5e:7e:47:54:05:1f:69:e6:17:4e:ed:3b:dc:1b:
55:59:f7:13:85:97:e5:57:55:ad:75:e6:db:2f:f2:26:b0:32:
6a:7f:58:64:c7:3d:85:d7:b6:01:fd:dc:50:5c:ef:58:d1:4d:
32:7a:36:75:d8:c6:87:00:2f:c2:73:19:a8:08:dc:0a:db:5c:
fb:29:8d:a3:c6:65:48:bd:a4:38:9a:3a:78:37:41:76:37:58:
1b:3a:02:f0:0a:aa:b4:67:d0:de:99:43:05:dc:cc:63:75:66:
76:ed:72:d4:af:9d:3b:2a:b3:53:80:19:fa:14:c4:2e:c6:1e:
d6:15:74:5f:39:de:d4:dd:9e:d6:0c:45:d5:a0:c7:fc:58:52:
9a:8f:7b:7a:06:24:8b:93:86:a0:a1:47:d4:ad:d9:fe:96:e6:
87:dd:ce:89:f8:92:a3:db:fc:19:8c:26:a4:de:be:75:e9:4b:
f1:52:a8:44:76:fc:61:bf:fe:42:e7:fa:63:ea:d7:9b:df:be:
1d:56:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:29 2025 by rpki-client