Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: Vs1aolpP2YW0j4g1etLbOm7oqrRuc+aj0GJQF3WjbVM=
Subject key identifier: 96:22:DB:0F:6C:C0:29:B4:20:46:E2:74:78:FE:D4:B4:EC:25:20:73
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0194BC3BEF97E246C88BBB1891B040B30F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 0E84
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: jm4SuvD/3u76CtxQ70zc39T80jrnpoPLur+lh7VvfcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:97:e2:46:c8:8b:bb:18:91:b0:40:b3:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=9622db0f6cc029b42046e27478fed4b4ec252073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:6a:dd:ee:29:4c:0e:c3:37:89:c2:7e:af:
3d:da:d6:45:51:ce:70:3d:86:b1:12:3e:74:4e:65:
fc:42:be:2b:1d:94:91:3d:54:8d:3b:2f:f9:70:f5:
e8:da:a8:b9:04:db:4a:f0:76:ba:91:8f:87:9f:12:
d9:f2:2c:57:12:9f:0f:f7:08:fb:2e:0f:88:1a:ff:
e3:7d:30:8a:35:79:83:d5:61:f1:84:d7:1b:0f:7c:
76:85:83:1b:50:4a:6a:a3:52:65:b6:2b:37:5a:a9:
1f:a3:23:a8:d1:59:4e:fd:88:da:be:e3:dd:8e:40:
87:ed:8c:ad:1e:4a:11:42:8b:9e:02:1f:cb:39:c7:
b4:53:95:95:5a:9b:e3:3b:24:63:e9:9c:75:b6:55:
b9:a1:8e:fe:26:02:4e:d3:50:a6:09:b6:2f:53:35:
15:ea:21:05:7f:35:26:c8:cf:38:b3:d3:fb:0e:b2:
c8:af:c8:19:9a:a3:c1:58:46:0e:62:97:00:06:ce:
54:54:0c:28:bc:e6:65:1c:57:71:84:6e:4b:74:8a:
1c:f7:41:c0:83:65:d1:45:26:85:e8:79:ed:45:8d:
1e:a8:50:85:d6:9a:a7:a8:b0:d1:42:69:94:4e:9c:
b6:06:f9:68:04:32:7d:d1:c6:ea:ea:74:70:a2:4c:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:DB:0F:6C:C0:29:B4:20:46:E2:74:78:FE:D4:B4:EC:25:20:73
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fe:bf:42:fc:9e:fe:bf:28:19:5a:b0:db:c8:de:3b:ba:8c:
57:3d:10:5f:8d:e5:ab:a2:0c:16:f0:34:9f:06:c5:9a:c3:22:
b7:36:a1:c7:7f:33:9b:b8:f7:03:72:a3:6f:76:ad:ee:77:e8:
00:20:00:9f:39:0c:e1:08:59:82:71:66:de:94:07:41:c7:19:
a3:49:f0:34:96:90:74:eb:bf:08:0f:e2:78:4a:55:ed:e8:31:
72:f5:ea:8b:97:f5:c8:b9:ea:d3:92:d7:7a:4f:d5:77:bb:cc:
8b:53:ab:4c:5e:14:97:66:33:a4:39:1d:04:8d:7d:dc:31:05:
e9:1f:21:65:35:36:64:e6:3a:8c:e3:30:ca:83:8e:e0:da:53:
f0:e5:22:3f:96:28:22:48:ce:90:c6:bd:ca:fe:22:cf:93:92:
21:05:70:f7:a1:ee:27:c4:17:31:c2:5e:42:f5:40:df:85:ea:
8c:71:eb:69:6c:b8:d0:86:1a:59:d6:0e:f2:5a:b8:34:c7:5f:
c8:9c:04:0e:b2:4b:c7:b4:68:0d:ac:a0:ae:e0:dd:50:e0:0e:
80:1d:1b:df:50:b9:53:3c:d2:09:10:fa:9a:9d:04:be:a7:bc:
85:72:6e:2a:83:bb:33:0a:a9:ab:84:5f:f7:51:90:c0:6a:4f:
12:02:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:03 2025 by rpki-client