Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: TXrqcsxiKnVigoSa8KibOCwSPHeiE/xVLDWqNYshTcM=
Subject key identifier: 87:23:06:45:3A:9D:23:48:3B:6C:FC:3D:E6:D6:A9:CE:74:E9:49:B2
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 0194BD4E9FD3500D3AE5D1A149CDC7E342DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 0119
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: VHnyecAgKZeoumTY4In4vK2VlV8aQ5fiFha/87xFm84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:d3:50:0d:3a:e5:d1:a1:49:cd:c7:e3:42:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=872306453a9d23483b6cfc3de6d6a9ce74e949b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:05:0c:95:c8:68:7c:a0:12:d3:5b:60:fa:
ef:85:28:39:ea:10:7d:db:4a:71:b9:b1:60:90:65:
a7:1c:cb:58:ea:e5:2d:56:42:41:53:00:1b:79:0e:
c2:f6:77:7f:3a:f1:9c:c3:ef:94:46:56:2b:2f:bc:
63:e3:b3:e6:88:fd:18:ef:0b:f4:5d:f9:34:74:a3:
6f:93:ac:37:25:a2:d8:37:3f:ec:fe:a4:c8:7f:f7:
de:5c:36:aa:00:5e:47:5b:0e:f1:4f:c5:34:1c:d3:
74:5c:e8:48:16:1a:f1:39:9e:a0:e3:cd:61:41:ee:
1b:d2:4c:a4:21:82:19:60:6c:e4:14:10:5d:ce:42:
cb:ff:21:3e:c1:93:e4:3e:85:c3:eb:54:d2:9b:91:
63:73:f4:6f:ea:eb:30:07:2e:02:3f:f1:59:0e:4a:
93:a4:85:04:08:ce:04:6f:e7:20:95:45:44:b4:12:
71:f8:4d:5a:f5:d0:33:e6:dd:5a:3a:29:70:3a:a4:
fa:a2:81:e9:0e:3b:b4:e7:0c:6f:9c:b6:5e:d0:42:
7b:35:fb:fa:d3:ac:ed:4f:82:be:61:3c:c1:b7:7e:
c4:43:fe:ea:2c:8c:31:57:10:d8:6e:03:82:20:1b:
82:db:5b:67:db:fb:10:ad:23:80:4a:70:1d:cb:72:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:06:45:3A:9D:23:48:3B:6C:FC:3D:E6:D6:A9:CE:74:E9:49:B2
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:cd:5e:60:03:23:d2:a3:30:ec:66:97:91:a8:2e:94:72:
02:0a:71:42:3e:3c:a2:f7:c4:8d:b3:54:8b:0b:8c:a6:a6:94:
e5:dd:ac:b2:7c:de:1d:c7:1c:51:d9:86:46:2e:0b:84:ac:ba:
9a:0b:02:a4:82:0e:e1:cc:8f:72:00:ff:25:45:c9:04:53:38:
de:61:97:68:9a:80:7f:12:60:9f:9e:cb:a7:c2:8b:98:36:ae:
70:cc:e2:d3:70:7e:c2:08:4e:73:eb:f9:09:30:3f:2a:ce:c4:
2a:bb:dd:d3:d8:e9:75:e2:c8:06:06:5e:19:04:89:71:93:2d:
c4:d0:66:37:0a:a0:39:08:57:db:ab:5c:a8:17:e1:76:0f:ef:
a3:8b:74:4d:88:43:a3:58:c4:0b:c0:9d:86:d5:af:14:ac:68:
ce:a4:0e:86:37:64:ec:09:bb:3d:0c:20:3a:7f:f0:1a:60:2b:
a8:ea:0c:c3:0e:e5:a0:70:62:7d:95:59:18:2e:34:a2:db:f8:
d5:ce:7f:f3:72:d6:20:03:91:92:5b:98:da:bb:32:8d:33:05:
d5:f3:71:56:b1:7a:01:10:04:3a:e5:cf:7e:b2:d2:d9:56:ee:
74:bd:ac:8c:a9:a9:2c:f2:ef:51:56:7c:4e:b7:37:de:2e:f6:
7c:89:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:07 2025 by rpki-client