Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: L4tomZQEsxCgRtRBU1Bg8tay9by5KZVEk0L/L8dXEy0=
Subject key identifier: C9:D5:14:7E:C7:B4:09:E8:D1:46:0F:2F:11:97:3B:2B:1F:78:1D:3B
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0195E0B4B7322FB1473DD0CD01932993490F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 088E
Signing time: Sat 29 Mar 2025 07:01:34 +0000
Manifest this update: Sat 29 Mar 2025 07:01:34 +0000
Manifest next update: Sun 30 Mar 2025 07:01:34 +0000
Files and hashes: 1: KdXGUsS6YFFnPjVjyeI04m93TdQ.roa (hash: F1EV3pD+ahdpl3VAKymIXnj+Wbddg7Ey2m0ZW8zB4L0=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: MUQdXG1uKNcgp244Ul5biUjIfuHAs8GoRSPf9WeSXHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:b7:32:2f:b1:47:3d:d0:cd:01:93:29:93:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Mar 29 07:01:34 2025 GMT
Not After : Mar 30 07:01:34 2025 GMT
Subject: CN=c9d5147ec7b409e8d1460f2f11973b2b1f781d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:49:3b:8a:b5:62:bc:aa:8c:e8:fe:6e:63:
6e:65:24:89:3f:21:ff:2e:38:f0:37:11:81:a3:0b:
cf:59:a8:29:1f:30:fe:e7:b7:b3:b0:d7:08:8f:9e:
34:f8:5b:12:2d:10:2b:61:84:ef:7b:bf:82:1f:bd:
ba:78:a1:24:84:08:b2:ee:3a:a3:b4:06:6b:f3:3d:
af:87:87:7e:10:3e:e3:e1:6b:c6:d8:c7:3f:5d:76:
1a:45:29:9c:97:6b:47:da:b8:85:0e:e8:ec:61:05:
a5:2c:03:54:4c:62:94:78:98:29:1b:6e:8f:2a:62:
b8:65:a0:1f:bc:9b:90:1d:b6:d3:a4:b0:21:c9:4a:
a8:16:cf:44:8f:d0:53:d2:da:b7:e9:6e:20:48:11:
25:31:52:2f:dd:bf:79:6c:50:d5:82:97:83:25:86:
ea:a4:f0:49:a9:cb:fb:b3:b1:6b:06:20:a4:7f:3b:
ea:e9:2f:c6:8a:09:20:24:5c:30:5d:95:e4:32:d1:
ca:4e:70:f4:f2:3a:d0:4d:ea:fd:40:f6:a8:c7:e8:
e4:d5:b0:6a:bb:37:0e:7c:2b:ae:73:33:df:59:ca:
c7:9e:34:2b:36:43:14:13:6e:98:f5:0a:29:e6:32:
23:ab:dd:cc:70:ab:9f:c1:d8:96:63:e8:0a:e2:75:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D5:14:7E:C7:B4:09:E8:D1:46:0F:2F:11:97:3B:2B:1F:78:1D:3B
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:c8:45:71:01:e9:9f:4e:69:84:f0:55:d9:16:28:ae:41:
d1:60:00:bf:3b:ee:01:44:8c:c2:35:7d:23:8d:80:fe:bf:2a:
3a:16:1d:e6:ce:66:95:bd:16:12:bd:fa:73:d5:3c:dc:2d:6b:
f5:5e:91:4f:6b:fa:25:2f:81:b6:41:9b:c6:90:af:04:c1:0a:
21:06:36:ef:7b:60:b0:62:1d:dc:9b:52:d4:98:b7:bd:4f:b3:
73:12:32:1b:f0:5c:3d:87:85:b0:ec:ef:6e:b6:89:20:36:f0:
68:f5:a0:00:56:6d:8d:6f:77:9b:77:aa:66:7b:47:8e:1d:53:
a0:4f:24:5c:69:bc:34:59:1b:86:cd:71:79:b2:c1:85:4a:c8:
f2:cb:e1:e5:c0:50:d3:9c:b8:27:ba:27:02:1c:94:a5:01:ae:
94:11:f6:24:a0:f4:e2:f8:e3:42:40:d7:bd:02:96:94:69:67:
45:92:65:0b:0e:e0:0b:3d:6d:04:c2:dc:0d:3f:a7:49:87:19:
22:d3:b1:89:ef:b5:c5:e6:23:f2:98:9f:a8:5d:12:85:8d:d3:
82:87:bb:48:b8:d7:f2:5e:31:6f:b7:c8:a4:62:0f:01:7a:03:
be:63:7b:bd:64:c3:08:8d:10:39:14:b2:84:f9:c0:ab:a8:2f:
97:a7:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:42:24 2025 by rpki-client