Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: dvWvT/bxCe/Y2FFGovlGMzuadJ2PSjY6YDwatn/UA/o=
Subject key identifier: 5B:DE:32:9F:2D:35:8D:36:F3:81:F1:8B:F6:15:F4:BB:FA:D4:33:74
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 0194BC730318F571A8E187CD02E8B7640B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 0D40
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: vAQR1Vos7TlFvPli5VIDf51EVNbY4WGEWzYQXP3UZ1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:18:f5:71:a8:e1:87:cd:02:e8:b7:64:0b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=5bde329f2d358d36f381f18bf615f4bbfad43374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:ea:1f:35:fb:c6:e5:d3:3a:9e:d0:bd:78:
8a:5e:09:b7:dd:29:ad:bd:ce:aa:b9:40:b9:47:cb:
c0:56:ba:3a:07:3e:b9:f3:2e:ea:26:12:95:08:05:
91:c6:81:21:61:09:73:d3:c3:dd:1e:d0:dc:49:c4:
7d:a1:69:ba:18:c3:80:62:bf:29:4c:fe:cc:fa:52:
49:9c:06:8c:ad:4d:f0:46:eb:f8:3f:8a:13:49:d7:
fb:f2:7f:af:44:a0:7b:a0:22:c8:ac:91:8f:18:fc:
1d:80:ca:c4:f1:db:3c:b0:51:90:d3:f8:2c:49:7a:
52:79:6d:75:61:a9:ea:7f:52:c3:f2:2c:1b:62:48:
60:59:39:c1:ad:a5:ec:7a:b3:78:e8:6c:09:b2:83:
3d:4b:b6:73:3f:3a:f5:cd:69:8f:5a:0d:94:99:bb:
53:0e:da:99:d7:ef:a1:89:ce:ca:e8:24:45:ee:3f:
ae:3e:b7:62:b5:77:28:d8:8e:67:b4:71:d1:39:e4:
f4:96:bf:4d:b1:d4:44:40:5a:c9:23:ed:ef:66:3f:
3b:d7:ed:3f:4f:2d:25:06:37:36:c5:26:4d:24:9a:
a5:7c:a1:f9:e1:d3:c4:b3:24:9a:9c:6d:d2:2a:ca:
a8:18:b8:92:c3:4d:15:b0:bf:63:60:9f:55:ad:16:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:32:9F:2D:35:8D:36:F3:81:F1:8B:F6:15:F4:BB:FA:D4:33:74
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c2:40:2c:ee:0e:f2:f3:ed:8d:1c:a5:24:b4:74:f1:9d:40:
02:df:00:a7:6e:07:39:c0:ba:a9:f7:64:ca:fa:f9:3b:14:c6:
e3:d9:83:82:dc:ab:85:6b:ed:e7:d6:ad:92:9c:90:df:76:cb:
62:1b:cd:5d:97:2c:2a:e1:ad:0c:ef:53:79:23:a6:7f:bb:52:
53:d6:9c:c6:8b:c5:06:38:42:63:95:ff:86:56:2a:86:f1:66:
a5:64:12:14:53:22:f4:cd:55:5d:46:43:53:84:e2:e8:cb:21:
a6:b0:10:54:4d:16:66:33:c4:f4:fd:6f:cf:1b:95:e7:6f:58:
5b:a6:90:ea:6f:f8:28:a2:e3:fd:17:24:8b:a1:29:26:23:fd:
73:b5:81:c5:ac:e2:62:78:2d:fb:31:e1:7a:6f:9c:a7:ef:27:
2b:63:03:5d:4e:f9:f8:fc:ad:99:67:18:b5:6a:5e:93:62:ed:
18:b8:58:d2:4a:57:0d:19:43:3f:3a:e2:d0:11:6b:cf:21:39:
8d:50:a2:82:bb:7d:45:cb:85:03:72:b9:05:ba:97:77:37:f6:
58:56:aa:93:1c:4c:97:4c:15:a0:bb:d5:27:b0:ce:40:05:d4:
a9:66:12:75:ff:26:09:62:ce:3b:db:91:bf:2f:4c:b2:1d:44:
2b:03:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:48 2025 by rpki-client