Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
File: upnU2xLk8LAC9g6SzFM-b4gtFQg.mft (raw, json)
Hash identifier: DKab2Dq0HpGcPsEHVR5B5/n6U+TK/5NTDScCjnQjEi4=
Subject key identifier: DD:99:1E:86:2C:03:68:3E:F4:BE:D6:DA:86:EA:0A:51:86:5F:65:2D
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 0195643FE4F24889A4946F40092C82ED54BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
Manifest number: 0F88
Signing time: Wed 05 Mar 2025 03:01:03 +0000
Manifest this update: Wed 05 Mar 2025 03:01:03 +0000
Manifest next update: Thu 06 Mar 2025 03:01:03 +0000
Files and hashes: 1: 8YIAR5sWr0I8DxBlTYWLr-wehd4.roa (hash: 2GhhwLBXrsl+hdUevrhZ5dBt1jzrfau++jD+6VRkn7o=)
2: ZQgVOtlKeyFC38M2101OMHMsXQE.roa (hash: yhIhd3mmsJTwIKHcA4cRnEfn0qLPxogW2a77pLgopes=)
3: upnU2xLk8LAC9g6SzFM-b4gtFQg.crl (hash: Wu55uijknYkG6e8f1DA1BDbcj/bhNfc2pMdw21bXAAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:3f:e4:f2:48:89:a4:94:6f:40:09:2c:82:ed:54:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Mar 5 03:01:03 2025 GMT
Not After : Mar 6 03:01:03 2025 GMT
Subject: CN=dd991e862c03683ef4bed6da86ea0a51865f652d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:30:da:50:cb:70:0d:3a:74:7d:0f:41:7d:
03:97:44:89:f9:4a:35:bd:c8:02:68:67:38:61:7a:
58:ea:05:97:ec:f9:2d:cf:53:2f:2f:fc:fe:0a:8e:
f4:62:de:db:0a:84:05:e6:89:4f:dc:61:c1:2a:19:
28:a1:c5:42:86:39:07:8b:24:74:28:db:24:8b:e4:
7e:51:dd:fe:b1:cf:55:39:98:e7:a1:8e:da:96:b5:
eb:de:c7:74:ef:98:72:a0:57:53:23:b3:f7:3f:d9:
f1:e4:4c:d1:42:b3:5a:89:1b:9e:d2:a9:18:9c:0d:
b4:55:36:25:09:e2:90:ee:a2:c8:c0:e1:c5:16:7a:
3d:ae:a5:c2:21:09:42:85:18:16:69:ab:dc:ff:79:
b6:7e:67:1a:92:da:3f:c8:8b:a5:0d:7c:3b:63:2c:
9e:5d:1f:28:b4:40:1a:bc:50:6e:33:fc:29:26:11:
63:da:7d:3e:39:d2:c6:5b:e7:1e:b9:e1:5d:ea:80:
89:e3:98:7d:e5:a5:72:6f:9c:f5:a5:7e:d3:f3:9f:
33:4b:55:bc:74:7b:ad:fb:b9:dc:ab:69:50:ae:9a:
46:81:88:a6:c2:5c:3c:c9:00:b4:a6:e9:f7:fe:a1:
dc:43:86:0e:7e:4b:02:b1:55:f2:e0:ae:71:ed:87:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:1E:86:2C:03:68:3E:F4:BE:D6:DA:86:EA:0A:51:86:5F:65:2D
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:35:5f:1a:7a:ec:ec:4a:13:cd:08:2b:1c:80:d4:0c:21:
7d:00:db:f3:d2:31:91:e7:ee:9b:cc:b8:a0:18:9e:60:e1:eb:
ec:38:ac:5f:de:0d:c3:b8:12:3e:a2:be:79:4a:53:20:a4:bf:
61:e6:68:61:da:ed:1b:c9:b9:03:41:d6:f6:c4:a0:81:10:07:
32:82:da:f3:e3:ea:c7:4d:c0:eb:d2:e3:ff:cf:42:da:6c:43:
2a:52:9c:63:0b:62:85:e1:c9:17:40:11:a1:e8:57:79:c6:c0:
59:c0:0a:41:4b:16:19:45:20:8e:21:6d:23:8a:e8:fe:12:8d:
aa:b2:af:c4:9c:e6:70:28:81:9e:a8:5d:a3:ba:3a:20:50:2d:
2d:02:36:28:8e:02:03:8c:1f:8d:2f:57:df:67:c8:01:38:59:
20:93:86:37:4f:20:37:7a:4e:c6:f7:a0:3e:44:11:21:92:4e:
c2:38:83:d6:98:74:2d:43:79:a5:ec:10:3a:5a:26:91:4c:67:
c7:8c:9e:58:50:fa:ec:e8:e8:ae:96:0b:63:d9:fe:e3:7c:12:
c2:cc:b8:42:28:ca:db:b4:f4:ba:67:41:e4:12:72:bf:d9:ab:
b6:3c:1c:46:cb:a7:31:4d:a2:44:5b:c4:c6:d7:ef:5b:0f:93:
2a:ac:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:04:54 2025 by rpki-client