Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.mft
File: ufUFYV3kC7UawzYmyjY34rX_jKU.mft (raw, json)
Hash identifier: Q18N4GN8EOHIC8dbbzAdI4poQiDX5+Px0eHAvvfkh1k=
Subject key identifier: 49:50:B6:34:0D:49:58:5F:57:D8:08:25:5A:3C:C4:85:3D:90:24:3D
Authority key identifier: B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
Certificate issuer: /CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Certificate serial: 018F1935B1E77D663362AA73E72E7B372B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.mft
Manifest number: 06E8
Signing time: Fri 26 Apr 2024 07:01:40 +0000
Manifest this update: Fri 26 Apr 2024 07:01:40 +0000
Manifest next update: Sat 27 Apr 2024 07:01:40 +0000
Files and hashes: 1: 1OeiRMZ2CJxcqzlooGhqq1qF7ZY.roa (hash: /B+ZbJ8P9jqtrXhLIbljFFVExkw/8zb4dBYp30a9Gyo=)
2: ufUFYV3kC7UawzYmyjY34rX_jKU.crl (hash: lLkDwoau+n0Pdhetk2z46hX6MwYjNQ8ayy+5g53G8is=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:35:b1:e7:7d:66:33:62:aa:73:e7:2e:7b:37:2b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Validity
Not Before: Apr 26 07:01:40 2024 GMT
Not After : Apr 27 07:01:40 2024 GMT
Subject: CN=4950b6340d49585f57d808255a3cc4853d90243d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:b6:bf:3c:c5:93:0d:da:d6:bb:c7:0f:26:
99:64:af:96:e8:11:63:72:cb:51:87:38:3f:59:1b:
63:30:b5:25:1e:e0:31:d4:83:34:2b:93:78:ea:29:
fa:b8:18:ac:fb:d6:ae:8b:6b:54:75:4a:f1:c6:81:
fe:1e:f4:ce:7b:15:9e:41:33:eb:f6:6c:af:73:dc:
23:2d:72:95:4f:c7:ea:75:0f:b4:36:31:19:8a:80:
14:6a:32:d5:46:7f:03:58:7c:09:5e:f8:85:9b:b7:
d8:30:6c:e6:19:20:48:ef:7b:a0:7f:0c:d7:82:87:
c3:b2:25:dd:9a:f6:aa:b5:89:9b:84:3c:ea:bb:d1:
5d:01:43:bd:f9:9e:2f:a1:53:21:f8:50:61:47:b0:
84:98:17:95:df:99:d0:b0:29:45:e1:89:9b:37:fa:
d9:88:00:9c:4c:0c:34:06:ef:f6:a8:48:70:2e:11:
02:62:d9:5c:4b:42:5b:27:54:ad:c0:c5:4a:08:37:
cd:f8:7b:10:54:c0:8d:01:1f:74:26:70:20:8c:fe:
f6:2e:89:f6:20:c3:a3:ec:ec:c1:76:6b:87:89:da:
01:2c:7b:0f:1d:c2:cd:a0:b7:06:8a:da:1b:b9:88:
37:aa:fe:03:0b:70:17:3a:a2:06:79:a3:8d:23:32:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:50:B6:34:0D:49:58:5F:57:D8:08:25:5A:3C:C4:85:3D:90:24:3D
X509v3 Authority Key Identifier:
keyid:B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ae:da:80:ae:3f:1a:a0:cc:71:cd:49:f8:1a:ca:6a:6c:7f:
ed:62:40:07:8c:5d:e1:3a:e1:76:c5:64:78:b8:b9:01:35:6c:
91:a0:fa:3a:d7:c6:e3:cb:9b:3e:8f:dc:ba:b9:d5:76:ac:be:
a3:20:79:ae:db:8d:9f:8c:28:8d:0a:6e:02:d8:b2:29:1a:1d:
54:08:96:00:81:7e:4c:9d:dc:0b:94:18:20:1a:fd:d2:3d:5f:
1d:38:51:03:4d:bb:8c:5f:be:6b:10:f3:22:91:c4:33:21:bd:
ce:d9:69:23:56:46:d3:af:91:b3:d4:21:e0:0c:47:71:76:d7:
58:b1:01:3d:a7:6f:7e:15:e6:2b:bf:c9:f2:5b:ad:9e:69:8b:
86:76:9f:3f:42:e4:10:7f:5b:88:9d:41:0b:59:04:58:92:51:
d4:1a:6f:42:e6:1c:97:85:cd:0a:61:70:2f:e6:7c:ea:a0:24:
23:b3:36:f6:d3:1d:dc:f5:86:32:3c:b1:d1:50:b5:de:82:87:
e1:1f:49:6f:21:d0:76:13:73:36:9d:bd:09:92:5c:38:33:2b:
f6:2b:9e:39:17:f1:a3:f7:06:7e:93:68:17:1a:f4:51:a5:77:
4e:5f:60:f3:5f:c0:8e:37:6c:fc:7e:df:9b:a0:4c:83:5a:c5:
21:4a:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:42:57 2025 by rpki-client