Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: L7lpTkMKSGgWmav50kyZ0Dr+woDsztZmq2ywrOexrTY=
Subject key identifier: 70:3A:BB:2D:8D:5F:25:63:2E:BA:EF:74:19:72:60:DC:1A:0F:D5:B4
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 0195E122655864001952E4BE8232B202FF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 0193
Signing time: Sat 29 Mar 2025 09:01:22 +0000
Manifest this update: Sat 29 Mar 2025 09:01:22 +0000
Manifest next update: Sun 30 Mar 2025 09:01:22 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: SKUzNXr9g22j/IQBdo2aAgXD5p8kmcwHk8u5oxAUuvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:65:58:64:00:19:52:e4:be:82:32:b2:02:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Mar 29 09:01:22 2025 GMT
Not After : Mar 30 09:01:22 2025 GMT
Subject: CN=703abb2d8d5f25632ebaef74197260dc1a0fd5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:cc:33:02:d0:ee:e6:73:1f:87:7e:3c:4b:
ac:48:21:44:df:d1:83:87:66:b2:52:99:f2:c4:95:
29:1d:b2:ed:d2:d6:c5:ba:61:a9:08:80:e6:8a:b5:
7d:b2:7d:f5:32:57:2f:1d:5f:72:b0:84:9e:8a:86:
a8:9f:95:97:df:66:67:68:85:59:fb:59:16:26:a5:
a6:a0:e3:71:33:b1:4e:69:01:de:09:87:ab:a5:0c:
6e:53:62:eb:10:a4:df:c6:81:e2:6a:17:93:4d:3a:
3c:67:66:36:70:54:c3:d3:2e:72:07:46:f1:b0:d0:
fe:d3:96:bc:17:a3:fc:88:a8:bf:8a:fc:19:62:7c:
32:96:43:a8:e9:5c:0c:b8:50:80:b5:c3:5f:cb:9b:
d7:29:07:fb:8a:f9:72:72:8f:cf:26:fe:9e:30:2a:
74:f6:3b:bb:ed:8c:fd:9f:a9:4d:5b:aa:d2:35:12:
16:04:39:50:f0:0a:d3:3e:d1:44:ac:2b:99:c7:4c:
fb:ba:7c:00:e9:37:e9:85:88:2f:93:6a:ea:6e:64:
fd:1e:2e:4b:95:d1:a6:8e:fe:80:1e:14:a0:23:ce:
53:8e:3c:7e:7f:8b:8b:98:ff:7a:83:b7:8d:03:fd:
44:98:d8:50:5c:11:25:7a:59:22:ee:e1:43:99:0c:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:BB:2D:8D:5F:25:63:2E:BA:EF:74:19:72:60:DC:1A:0F:D5:B4
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:71:e5:2d:82:84:12:c1:8a:f4:9d:86:65:ef:2e:f6:fc:2f:
76:68:33:f0:95:bb:b8:6d:98:41:65:27:80:66:8d:a9:2a:92:
c1:4f:1c:27:b1:8b:2e:dd:5c:2d:c1:df:7c:02:8e:a8:cc:11:
80:10:67:29:9f:ea:58:08:e5:2f:fc:05:44:4c:49:b4:a1:66:
30:9e:a8:d7:27:20:fe:d3:3c:b7:86:9f:39:44:64:30:38:cf:
d0:33:9a:f3:f3:87:e4:f1:e3:7b:37:53:10:32:f3:76:8f:29:
c2:c4:4c:d6:b4:be:ac:b6:ac:ae:fc:6c:ce:e0:6e:e0:1b:85:
ed:64:b4:8c:77:1f:bd:de:58:ea:75:c9:b7:af:5c:a4:37:12:
52:de:b7:a3:88:91:e3:31:40:ec:62:63:85:35:55:ad:fe:5c:
b8:9e:ea:d1:12:95:10:5e:44:b1:de:1c:9f:2c:00:a4:2c:cd:
c8:49:71:a8:b1:a9:f0:e1:81:6a:62:57:7b:0b:70:2e:52:56:
6d:ce:de:22:e2:59:cf:bc:f9:b4:e7:83:48:21:6a:a8:b8:c9:
a2:f4:73:6c:c4:00:88:22:99:a9:bf:83:2e:e5:5f:84:1d:c9:
4e:91:d8:2a:d2:08:2d:fc:0b:7f:2d:8d:8e:db:91:0a:c9:51:
5c:b9:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:16 2025 by rpki-client