Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: tAXH0E4uqm9itAS7p+imDu0DTzrY1nbSxc7aphGz8Ps=
Subject key identifier: 6A:82:4E:A4:ED:CF:DD:0C:F2:A9:FC:45:E4:07:C6:1C:07:CE:0A:A2
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 0194BC3C5577E6F5F70C3681E0B71DCD4811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 11A3
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: KtRg6SO+BK937hGYsyw+AeDEcz2va6h+hxHsOuNu1ok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:77:e6:f5:f7:0c:36:81:e0:b7:1d:cd:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=6a824ea4edcfdd0cf2a9fc45e407c61c07ce0aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:f0:04:f5:1a:35:0d:1d:c7:ab:75:e3:61:
bb:4a:ce:fd:1d:4d:f6:8b:68:7c:0f:1f:93:3a:06:
75:77:d5:7d:b7:0d:2e:fa:7e:9b:c7:6e:a8:c3:84:
d8:3e:8e:36:97:b6:cf:ed:77:38:06:8e:26:a7:4a:
97:6c:51:69:5b:72:7d:74:63:4f:42:e9:30:79:f2:
41:3f:48:a1:9c:9e:88:10:6b:9c:a9:6f:01:71:40:
3c:6c:02:26:82:cc:f8:2b:55:bd:22:66:c4:9f:07:
2c:cb:5c:69:a9:1c:d4:ec:06:33:78:13:dc:48:99:
f7:40:e0:5c:fd:74:59:23:b4:a9:58:19:00:8e:ee:
32:0a:b9:a9:61:4a:ac:c4:c3:5c:e8:3a:d8:ed:15:
02:8b:3e:c4:fc:6d:1b:48:2e:a8:33:b0:01:c7:28:
69:fa:76:8a:af:a6:cb:59:16:e9:d9:5b:a7:42:d9:
3f:3e:57:21:b2:b4:40:32:46:5b:88:8e:c5:8f:bb:
fe:0e:d6:97:8c:9b:a6:02:93:6c:e0:37:ba:30:00:
2d:74:90:2a:5d:52:36:0c:0e:8c:76:0b:87:a9:a1:
c7:c4:96:42:0d:a1:64:83:8e:e4:39:29:98:f2:91:
c4:fc:18:78:30:3b:cb:80:67:e7:fe:c2:8c:a2:c5:
19:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:4E:A4:ED:CF:DD:0C:F2:A9:FC:45:E4:07:C6:1C:07:CE:0A:A2
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:3d:f1:91:69:b2:a3:ca:bb:2d:a5:e0:99:b0:0b:da:30:
c3:ef:45:79:8d:67:13:a2:30:fe:02:80:37:8d:94:1e:dc:66:
77:0b:b1:6e:45:4f:d9:f9:84:1c:9f:b1:6d:b2:f8:04:5f:57:
38:50:47:e3:df:5d:dc:20:39:6e:cf:33:6b:de:1d:3a:2a:a2:
39:59:88:fb:65:b2:80:2f:bc:db:4a:40:8c:46:33:ab:84:6f:
a4:7c:85:0f:6b:03:a1:fd:23:c0:db:29:51:63:cd:ed:96:a2:
24:4a:61:a9:86:e6:1e:c4:f3:8c:37:db:84:85:02:b3:e1:43:
e7:bb:79:d9:a4:5a:d3:78:11:96:cd:ca:9b:3e:4e:3b:eb:a8:
04:57:39:91:a4:80:c3:33:63:8d:3b:9b:db:3a:43:97:07:8e:
ce:4b:aa:18:37:b7:d1:a3:7e:9a:f1:2e:f7:c3:a2:5a:25:6a:
f4:e0:57:bb:12:e5:a5:c5:ee:79:a7:68:70:3f:32:2d:78:c4:
8c:6e:9d:36:2c:55:d8:29:ca:7b:f4:0e:66:da:29:37:99:b9:
d7:9e:be:02:81:ad:b9:c5:13:73:2d:08:7e:6b:c1:7b:ef:5a:
57:88:58:f3:f3:32:d3:9d:22:0b:6a:dd:56:4a:a6:de:6f:8c:
46:f2:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:14 2025 by rpki-client