Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: 1A7tteb5yOltMWc0YQqqrYJYa3oEW4SLY0FXpDHT+pY=
Subject key identifier: 45:A1:33:9E:5B:E7:7D:68:15:FC:08:18:70:6D:50:C6:14:4B:76:38
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 0194BCA9C45B8F6F4A1393653CD74C5CECFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: EjGB9iBtNedyHWV4/ZdDihJ8y2AbRZ/9sRJueE8w+VE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:5b:8f:6f:4a:13:93:65:3c:d7:4c:5c:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=45a1339e5be77d6815fc0818706d50c6144b7638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:59:53:7c:78:12:16:8b:68:b6:e4:db:4b:
26:cf:63:d7:ff:e8:d5:b6:3e:30:c9:7f:77:f4:96:
4b:5e:ab:fc:e2:fd:cf:4f:42:9a:2c:a0:70:88:6d:
2c:55:69:74:d4:9b:b9:de:49:99:b7:2a:06:b1:81:
aa:d8:d6:c5:88:47:9d:15:b8:02:cd:d3:3b:56:b3:
d7:14:b2:1f:a3:04:ce:80:54:06:2e:74:b9:3e:32:
17:84:6c:50:49:db:df:c1:2c:87:45:6e:bf:4d:c3:
f4:72:e4:04:04:20:ec:7a:7e:61:2e:37:8e:c4:15:
b6:4e:23:fb:ab:73:38:ed:52:4e:22:48:bd:e0:42:
01:d6:27:2b:ac:73:84:40:4b:6c:d5:66:a6:22:08:
38:1e:db:3c:09:05:2f:e7:b6:7d:b1:a2:dd:1f:db:
52:4a:68:55:65:11:7d:0f:51:85:44:59:0b:51:90:
6c:f4:75:11:02:09:22:6d:5b:f5:43:af:14:91:a1:
59:54:34:7f:1e:03:fe:0a:22:48:32:9e:3f:a7:6f:
fa:92:8e:9f:69:c2:82:8f:d0:56:eb:d6:6a:27:5e:
88:8f:b2:52:6a:36:98:02:be:51:b0:71:83:b7:9b:
61:15:10:a4:40:ce:7e:a2:4f:50:81:2c:cd:f6:f6:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:33:9E:5B:E7:7D:68:15:FC:08:18:70:6D:50:C6:14:4B:76:38
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:d3:61:9e:76:17:55:e5:d5:3a:f7:c7:74:3b:4b:aa:cf:
54:f6:24:3e:3a:8f:fd:7b:b1:92:2e:9b:ee:bf:f5:3b:4c:e5:
1c:cd:33:90:5b:fa:3d:2a:7a:2c:42:43:91:65:ee:d7:f5:24:
42:25:d0:84:92:36:8a:6f:0c:70:af:b9:f0:1f:d4:37:e0:69:
0f:71:13:4f:90:b1:26:52:29:eb:76:fd:e7:0f:65:32:13:11:
27:cd:a9:f6:51:74:02:b9:8c:85:c4:8f:4a:d1:a4:57:8c:29:
d9:ec:a5:47:95:4c:96:d4:4e:75:97:27:6a:2c:c4:03:8d:f0:
81:5b:59:a4:0d:80:29:b2:26:87:c1:c0:c9:fa:d6:2e:bb:e8:
2e:cb:d9:90:f6:f5:96:bc:a8:2b:09:cf:9a:f6:11:d7:82:73:
c5:ad:80:97:b7:29:c9:44:17:58:48:23:23:9b:8b:fb:06:a9:
b3:a6:6d:f5:e6:b9:3a:09:ec:86:27:55:c6:b4:be:b3:4f:8f:
32:d4:bf:91:c3:2f:3d:73:91:a1:4b:9b:a5:8f:73:17:d6:25:
c6:b3:14:58:bb:2a:05:d5:0a:c6:79:b8:db:75:ac:13:a6:40:
25:f9:04:69:7e:12:b2:8c:97:6f:3d:57:b2:e0:e1:e7:6b:f7:
36:a3:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:16 2025 by rpki-client