Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: JvkTeKAlKimoemwxjxewM/o7XEJO7pdpTy6H4FZy4X4=
Subject key identifier: F4:4A:53:46:2B:94:74:EF:E4:04:42:F0:B8:5B:46:5D:18:76:64:94
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0195E0B4ACEF291C9448E97B1A6844686E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1372
Signing time: Sat 29 Mar 2025 07:01:31 +0000
Manifest this update: Sat 29 Mar 2025 07:01:31 +0000
Manifest next update: Sun 30 Mar 2025 07:01:31 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: /ytHMpjzePdX4VPNf5l/Azcsttw49j+JbJnh7SjC1vM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:ac:ef:29:1c:94:48:e9:7b:1a:68:44:68:6e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Mar 29 07:01:31 2025 GMT
Not After : Mar 30 07:01:31 2025 GMT
Subject: CN=f44a53462b9474efe40442f0b85b465d18766494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:3d:01:1b:e8:a7:5e:b4:28:aa:8c:9c:75:
21:01:5e:db:9a:9d:2b:82:34:e4:86:4f:f2:6f:70:
6d:6b:25:01:c0:14:91:4f:76:97:a9:5c:3d:11:87:
67:d5:99:85:cb:82:9b:35:62:65:98:1a:3a:19:d2:
2f:25:10:89:19:2b:ae:fe:cf:2b:92:23:99:2c:fd:
74:9d:f0:63:53:f1:52:bf:08:68:e4:11:c2:70:46:
aa:03:26:b9:7d:91:b8:5d:d6:9f:88:2d:29:5e:c0:
e4:a5:00:ea:ce:5d:bd:91:53:9a:57:20:d7:86:4c:
af:f6:da:05:3c:b1:ca:ca:39:6c:7b:b7:cb:d4:e2:
1b:02:4e:c0:d3:ea:15:22:92:44:7e:a8:be:79:f7:
de:db:7d:8d:18:19:bb:4e:67:23:ab:90:b6:a7:e2:
67:d2:9a:70:43:4b:b9:38:00:bd:32:54:33:50:4d:
d5:6b:58:57:73:41:ab:2c:74:e8:6a:c3:1f:8c:62:
ae:3f:55:ca:b9:96:a9:42:c4:a1:38:75:01:d4:a8:
f6:1a:8e:79:10:4c:80:39:11:f9:36:0c:fd:4c:b1:
66:e3:92:d9:58:c0:35:72:97:f1:d9:17:82:99:f5:
0f:a1:69:b6:ea:7b:41:ea:6c:c5:a4:a2:ce:94:f5:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4A:53:46:2B:94:74:EF:E4:04:42:F0:B8:5B:46:5D:18:76:64:94
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:8e:82:42:b6:10:c0:f7:4f:fd:b0:29:76:38:4a:f6:d9:
e7:a3:fe:33:65:34:8c:72:82:e7:b9:ba:ec:95:d8:a3:e0:11:
33:dd:3a:7b:89:55:f2:21:5e:9b:40:00:64:15:48:1b:8e:75:
42:6a:fd:99:95:b3:91:e3:1c:74:9e:97:b2:e7:76:36:65:ab:
cd:6b:75:95:d2:c1:e1:44:f0:b6:e5:72:67:6f:78:fe:28:1a:
d7:76:ca:e9:4a:65:13:21:fd:20:23:d1:0d:c7:47:3a:2a:c9:
e7:0e:52:fc:af:9e:3f:15:e5:e7:4a:52:bd:97:a8:77:bb:81:
11:86:39:54:72:8d:cd:1a:03:68:35:fa:ce:83:f7:de:54:62:
52:93:f9:93:28:34:4d:30:2d:7b:b5:71:71:b7:e8:a6:1b:4a:
58:9a:77:b9:f5:a3:8f:eb:48:49:bd:d2:74:c2:15:be:f4:e2:
9f:70:66:74:01:81:78:1c:25:b1:bc:bd:db:e4:03:6a:bc:fd:
40:9f:55:57:36:38:f6:4c:69:00:83:1c:cb:9b:5a:92:39:e2:
27:56:85:c6:24:45:32:f4:38:c8:1e:22:3f:c9:d2:1f:21:03:
0f:e0:14:e7:9e:f9:03:d4:11:e7:ef:c9:c0:32:2a:50:ba:ac:
9b:95:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:58 2025 by rpki-client