Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
File: u7kUAX20Xp91443ePwNXzitx2Cc.mft (raw, json)
Hash identifier: HKOp5kccj13jPjq6thneoU1n7cIqcjQMhBYbclyAUio=
Subject key identifier: B5:88:B5:4F:EB:AC:34:2C:6A:E8:54:7F:38:2D:2D:20:08:BF:64:D7
Authority key identifier: BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
Certificate issuer: /CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Certificate serial: 0194BBCE84286D7A9C1808FEB5C07C30B3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
Manifest number: 04D4
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: u7kUAX20Xp91443ePwNXzitx2Cc.crl (hash: SYIXwLxvR/pCKacCd7JrRVajLsE1idmpzhoWQw7fh90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:84:28:6d:7a:9c:18:08:fe:b5:c0:7c:30:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb914017db45e9f75e38dde3f0357ce2b71d827
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=b588b54febac342c6ae8547f382d2d2008bf64d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:14:17:f1:71:5d:6c:04:21:bd:61:be:ca:
db:81:f7:79:3a:d7:2e:7a:84:35:b2:2a:e1:59:69:
fd:7f:55:0a:2c:c3:c0:22:09:ec:48:70:d5:3c:6e:
62:6a:28:0d:e7:41:9b:b3:45:e0:82:f8:01:9b:d4:
06:10:6d:05:e4:d8:e5:50:56:7d:44:ba:6c:7f:cb:
9a:de:0f:07:00:6e:e8:22:b1:a7:af:c9:ea:7f:b9:
3a:95:c5:2a:f5:e5:e1:ce:4a:03:66:71:b1:1e:db:
a2:44:44:23:5e:11:f0:c2:4c:7a:73:d6:05:7a:dc:
36:52:cd:32:52:21:7e:91:a8:06:67:08:49:fc:33:
b4:67:a5:ff:b5:29:d0:2b:d7:f2:05:b9:b4:31:4e:
0a:a2:61:0a:61:6c:4d:16:80:a6:9e:4f:be:2e:23:
ba:49:fb:e2:50:a6:37:0c:36:de:e1:b3:97:44:52:
d5:53:97:bc:14:e6:39:4a:33:9e:c8:18:77:a9:97:
1e:45:f1:2e:a6:dd:54:6d:08:1a:72:08:18:68:65:
4d:8c:bf:5f:2b:9d:39:f7:9d:42:ed:04:7a:07:42:
5f:db:96:4f:e3:c3:93:4f:9c:2d:37:79:73:cf:8c:
4e:d9:4a:91:a9:f8:ff:da:be:65:62:9f:c4:a6:0f:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:B5:4F:EB:AC:34:2C:6A:E8:54:7F:38:2D:2D:20:08:BF:64:D7
X509v3 Authority Key Identifier:
keyid:BB:B9:14:01:7D:B4:5E:9F:75:E3:8D:DE:3F:03:57:CE:2B:71:D8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7kUAX20Xp91443ePwNXzitx2Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a3bbf2-261e-44e8-b9bc-6be97e37241f/1/u7kUAX20Xp91443ePwNXzitx2Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:36:b6:2e:45:65:6b:5f:28:93:23:88:45:c4:f9:2a:08:a9:
fb:e7:34:09:1d:37:4e:06:df:5a:f0:84:a3:fd:dc:06:06:63:
2b:4b:a7:a5:56:33:59:2a:0f:23:2c:64:3b:85:ec:62:f8:da:
5d:3e:a4:2d:a2:1c:2f:fe:f6:e1:d5:cd:91:ce:a0:f8:06:58:
67:11:ed:d6:59:eb:6e:ab:fb:03:76:87:6f:08:2f:60:9c:30:
2e:ce:2a:a0:99:9a:2b:82:79:b8:48:55:52:b5:db:0d:90:d5:
e7:ea:63:c6:70:f1:aa:83:da:8c:85:f7:eb:86:a8:95:4d:4a:
e4:e6:cc:2e:d6:b2:e7:aa:c1:36:83:f9:99:a0:7b:0d:ec:60:
ec:9b:d1:d1:a8:6d:43:17:b6:f2:e4:9f:b7:b3:1b:81:b8:07:
eb:f3:74:83:c3:d3:fa:93:74:da:eb:9e:8d:c8:a8:dc:ac:25:
29:26:88:5a:d7:44:20:27:2d:af:d9:df:e8:84:58:2f:2d:d7:
fe:af:6d:36:4a:de:3f:74:59:da:ef:ed:26:b6:4b:67:2d:9d:
2c:95:b2:0c:b5:01:49:9e:84:26:64:13:85:0d:b5:b0:90:df:
32:06:e6:0b:d7:e0:38:f8:f4:48:15:f9:b8:71:35:18:47:11:
3a:2f:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:43 2025 by rpki-client