Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ffa5ff-54f0-4704-8e2b-07b53211e9d5/1/u4g_2BTlFecCaDzOlg8wCdzJooA.mft
File: u4g_2BTlFecCaDzOlg8wCdzJooA.mft (raw, json)
Hash identifier: K8k4AF6cXIGXLwzi54jBMIlyo3iScLBAyJCzLFMjBbs=
Subject key identifier: D7:F0:30:85:61:6A:3C:71:A4:5D:3A:CB:25:08:7A:7D:99:E0:7B:90
Authority key identifier: BB:88:3F:D8:14:E5:15:E7:02:68:3C:CE:96:0F:30:09:DC:C9:A2:80
Certificate issuer: /CN=bb883fd814e515e702683cce960f3009dcc9a280
Certificate serial: 0195CC1B0EC6AD034099DE32D3C0FE8654E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4g_2BTlFecCaDzOlg8wCdzJooA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ffa5ff-54f0-4704-8e2b-07b53211e9d5/1/u4g_2BTlFecCaDzOlg8wCdzJooA.mft
Manifest number: 06E8
Signing time: Tue 25 Mar 2025 07:01:20 +0000
Manifest this update: Tue 25 Mar 2025 07:01:20 +0000
Manifest next update: Wed 26 Mar 2025 07:01:20 +0000
Files and hashes: 1: u4g_2BTlFecCaDzOlg8wCdzJooA.crl (hash: KaDneZ7SxiBfFmTvvYfMzEMwnXhOB9zDoGDQX2Q485g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:1b:0e:c6:ad:03:40:99:de:32:d3:c0:fe:86:54:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb883fd814e515e702683cce960f3009dcc9a280
Validity
Not Before: Mar 25 07:01:20 2025 GMT
Not After : Mar 26 07:01:20 2025 GMT
Subject: CN=d7f03085616a3c71a45d3acb25087a7d99e07b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:bb:a7:7f:bf:88:4a:10:3b:61:35:66:4f:
af:a5:7b:eb:ac:df:c8:ba:4f:81:5e:d2:08:45:21:
ef:a3:9d:aa:2c:a1:9d:03:ed:f7:bc:74:3d:d4:72:
f0:6f:94:f3:c5:5b:c3:91:ee:f2:30:b2:f8:d9:0c:
4f:64:aa:e3:0b:5c:ec:6c:ba:a6:6d:50:08:08:5a:
57:86:1f:b6:f4:01:02:1b:b6:59:64:71:63:f2:de:
15:47:71:3d:40:46:1d:1f:32:8d:ca:a2:10:26:6d:
78:6e:d8:b6:77:bc:b3:c1:7d:27:c5:43:f3:6a:dd:
1e:8c:2e:de:cd:55:ba:e2:0f:32:19:df:eb:53:60:
20:2c:65:dc:17:da:05:89:e8:5c:a0:d5:7a:34:79:
0f:d8:be:b6:23:e1:0f:ea:ce:b0:c4:1f:a6:5f:fe:
77:90:99:72:90:c4:59:e8:21:7c:18:6c:43:3d:6e:
f4:b0:8c:62:8b:58:7b:b8:1d:ce:2d:3a:b7:e6:c0:
32:d2:e4:87:f6:30:6f:c9:e8:88:f5:3b:48:0b:47:
5b:fd:02:70:01:10:89:aa:b3:6f:d0:24:db:70:be:
82:5f:26:a4:83:a5:82:5b:36:84:eb:64:ab:fc:f1:
67:a4:f2:63:38:2a:d7:69:4a:22:db:8a:bc:5e:b6:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:30:85:61:6A:3C:71:A4:5D:3A:CB:25:08:7A:7D:99:E0:7B:90
X509v3 Authority Key Identifier:
keyid:BB:88:3F:D8:14:E5:15:E7:02:68:3C:CE:96:0F:30:09:DC:C9:A2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4g_2BTlFecCaDzOlg8wCdzJooA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ffa5ff-54f0-4704-8e2b-07b53211e9d5/1/u4g_2BTlFecCaDzOlg8wCdzJooA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ffa5ff-54f0-4704-8e2b-07b53211e9d5/1/u4g_2BTlFecCaDzOlg8wCdzJooA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ab:34:17:70:32:87:89:c3:23:da:08:4b:20:c8:2e:7e:08:
35:1a:1d:3e:80:19:67:a5:ee:4e:7f:ac:a4:ff:ba:d1:70:7e:
0a:3c:3a:30:c3:a0:b5:fa:7b:16:04:2c:0b:0e:b9:ac:01:4a:
d0:3e:d0:d2:06:af:e8:2f:98:49:ab:29:cf:db:89:9f:cd:fd:
9d:89:f6:41:8c:c1:66:87:55:65:93:f5:98:95:f8:25:e5:09:
93:b3:29:ae:fd:df:d6:6d:0d:18:5b:9f:03:96:7d:1e:8c:1c:
ef:d5:65:eb:05:79:0d:ce:27:ff:25:15:3a:d7:81:98:db:87:
44:50:43:d2:10:d8:f9:bc:ff:97:50:65:94:fc:2a:d9:c8:a8:
48:f8:8e:d9:c6:92:1e:78:17:c4:d7:5b:75:6c:f3:52:9c:d0:
46:df:1b:ef:8a:4e:42:3f:1e:bc:08:21:e0:9f:0d:3f:14:8c:
56:16:12:07:70:91:bd:4a:21:44:38:af:4b:ce:06:b5:51:b7:
59:f5:05:4c:cb:62:bb:02:35:c9:bf:5c:29:bd:93:3e:d3:c4:
ee:fd:d5:95:5a:e3:54:ce:6c:f2:a1:84:b9:33:a4:69:c2:61:
9e:bd:a1:ee:11:61:2a:ec:b5:ad:80:6f:ca:4a:42:69:22:3a:
30:1a:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:52:57 2025 by rpki-client