Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
File: ulwqMT590aRJ4sH7JsWrA-UmgY0.mft (raw, json)
Hash identifier: qJ5JR8s7nz37VGmmkT3zBFC1Oo3zx0NkFJePbg7Ncs4=
Subject key identifier: CF:D5:5A:C5:C0:68:B7:02:04:D1:71:3F:C1:44:DD:B2:17:FF:FA:B8
Authority key identifier: BA:5C:2A:31:3E:7D:D1:A4:49:E2:C1:FB:26:C5:AB:03:E5:26:81:8D
Certificate issuer: /CN=ba5c2a313e7dd1a449e2c1fb26c5ab03e526818d
Certificate serial: 0194BCE0742B7E004ADDD5FC461D21C4ED01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulwqMT590aRJ4sH7JsWrA-UmgY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
Manifest number: 0157
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: ulwqMT590aRJ4sH7JsWrA-UmgY0.crl (hash: Qgg75Vreb15GUuoiZLStyYyepUqhJEfP+ry0pWCpYe4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:2b:7e:00:4a:dd:d5:fc:46:1d:21:c4:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5c2a313e7dd1a449e2c1fb26c5ab03e526818d
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=cfd55ac5c068b70204d1713fc144ddb217fffab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:3c:ca:67:aa:91:8d:2a:ed:33:3c:66:9c:
f2:49:31:99:8e:31:73:b0:0c:ad:a5:49:ae:88:5e:
1b:70:85:b8:58:bc:e0:c8:fb:39:bf:5f:66:d6:d9:
5b:47:ec:df:24:ad:dd:6b:2e:2c:19:ed:fa:fe:66:
0f:49:f2:a9:3e:48:33:72:de:2f:9b:03:95:52:f4:
cd:ed:60:19:06:49:f3:c6:61:64:86:5b:68:3c:24:
b7:be:c4:23:77:a4:5c:03:5e:0c:1a:ec:c8:ca:29:
79:0c:a2:b1:ee:44:61:9e:ab:f4:86:9a:5a:1f:ac:
92:1f:28:32:f2:95:94:08:7b:78:f5:48:c3:3b:52:
df:46:e8:9c:a3:13:24:96:7f:af:dc:44:60:52:77:
ea:ec:1a:43:a5:c3:8a:ad:bd:a5:cf:65:fa:e7:13:
8f:40:66:c4:52:b2:1a:e3:dd:cb:a7:18:05:7b:c0:
f2:66:6c:f7:04:1e:6a:5e:4b:db:68:a7:6e:d3:d3:
16:a0:74:73:f8:d7:f7:fb:85:57:7d:da:2e:a0:39:
74:84:71:03:1c:28:aa:f6:8c:fe:9f:89:b5:7f:d3:
7d:7f:80:d0:17:90:18:b0:a5:a9:24:62:45:58:82:
56:5d:73:2c:c2:50:6c:99:5a:1a:4e:69:51:e6:d1:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:5A:C5:C0:68:B7:02:04:D1:71:3F:C1:44:DD:B2:17:FF:FA:B8
X509v3 Authority Key Identifier:
keyid:BA:5C:2A:31:3E:7D:D1:A4:49:E2:C1:FB:26:C5:AB:03:E5:26:81:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulwqMT590aRJ4sH7JsWrA-UmgY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f8ea98-4fbc-4f3e-b658-e0a7ae216cb7/1/ulwqMT590aRJ4sH7JsWrA-UmgY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ff:20:e3:d4:d5:76:f2:3d:7f:6d:10:b0:2b:fd:3a:a7:e6:
55:84:31:9d:bc:45:e1:54:25:db:5d:7a:fb:b1:81:27:60:87:
d9:68:49:41:1d:91:25:77:ae:25:fd:6e:24:77:be:d3:44:6d:
1f:cd:7d:c4:dc:d6:56:6d:90:65:46:52:90:38:94:7c:28:8c:
99:d9:5c:d0:09:12:8b:25:7f:ee:e4:ef:99:73:48:1e:8b:1b:
1c:0e:9e:86:d3:59:4d:68:b7:35:c3:35:31:c4:36:90:c9:9c:
bb:ae:2c:f4:3f:d8:38:82:af:8c:b0:b2:56:ef:71:f0:6f:18:
dd:20:52:53:64:25:d7:e0:37:b9:3f:aa:c1:87:43:7b:c3:03:
52:23:38:4d:71:b9:c7:b1:81:a7:16:03:45:f9:1d:02:9c:fc:
6c:76:f4:f6:c1:92:5d:cd:db:37:55:c0:12:11:bf:61:06:67:
b9:20:56:b5:33:05:4b:fe:c3:4e:6a:45:40:3a:82:f7:e4:58:
74:cf:cc:ed:a9:91:24:86:7a:5e:e9:f4:36:c6:b1:f1:8e:45:
37:83:04:2b:b5:4f:c3:f3:94:f2:13:1a:fc:69:76:e3:01:33:
5b:34:7b:17:c0:4e:6c:aa:0d:08:db:0a:8d:20:a1:6c:90:1e:
c0:d4:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:14 2025 by rpki-client