Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier: UfZe02sN5Po43DU+N65/yq0f99RYOsAnljHYIfprjNI=
Subject key identifier: D9:C8:1A:20:74:50:CB:C3:8E:57:9D:A2:A2:51:3B:2C:15:D7:5F:D7
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 0194BCA9A94A77C348CB83D800664B42FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number: 0C86
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 1patb8mkVp0mJa0slQ7qQ-5WVBk.roa (hash: DsUMv9vQW0wvlxaSYrdoCYfaCKpNMHSpozAHeICWqOw=)
2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: xW6rayAMDA9QJmmPcXItz2M1KFg/Qv85jF4yaySZecg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:4a:77:c3:48:cb:83:d8:00:66:4b:42:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=d9c81a207450cbc38e579da2a2513b2c15d75fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:23:b5:1f:99:01:44:d3:99:0a:93:b6:a2:
80:7f:a9:49:ff:d8:38:10:43:be:f0:7f:8d:be:7a:
93:df:45:22:72:aa:63:75:c6:c8:33:70:7a:d0:ce:
f4:cf:b5:2b:4e:e3:f2:c6:5c:85:9d:b1:e0:72:6f:
20:8b:84:da:97:90:64:09:f5:7a:34:f3:af:62:37:
f5:50:71:2a:66:d7:d7:b2:c3:1a:6d:91:cb:42:fc:
41:6a:a8:dc:84:b2:a3:b9:20:59:22:bb:62:64:47:
8c:6e:ba:ba:53:1f:22:89:e3:2b:97:18:a4:e0:d3:
32:77:79:d5:06:cc:09:33:48:09:36:46:22:de:9c:
cb:d0:8c:66:48:2b:60:a3:9f:a2:5f:56:40:3c:ec:
6a:e6:3d:04:06:a8:e4:39:88:32:95:ea:f5:a2:01:
ad:c3:e5:b5:a3:d9:24:30:80:04:8b:9d:10:48:c4:
2e:94:55:ed:76:83:94:98:a6:ff:c7:52:b5:c5:9b:
47:57:10:31:07:7f:52:7c:20:bd:1c:6b:a5:4c:e4:
5e:f6:9c:27:07:5d:85:89:56:79:6f:66:ee:5b:9b:
05:51:b2:45:08:1e:81:39:3d:ff:e8:e5:d6:23:1e:
c0:06:a4:1e:94:c4:ea:25:42:d7:02:f5:33:9d:bb:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C8:1A:20:74:50:CB:C3:8E:57:9D:A2:A2:51:3B:2C:15:D7:5F:D7
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:1e:fc:aa:6d:0b:22:88:74:87:2a:b8:02:ef:a0:aa:be:
d0:6d:11:3d:70:e4:19:cc:65:39:d7:eb:22:04:da:ca:72:6b:
e1:a5:33:16:ed:c1:0d:e6:d0:b7:f8:e3:fd:c9:41:b3:97:64:
8b:ec:91:d4:9e:a7:4b:9a:5b:cd:76:70:79:9c:93:69:30:94:
51:92:a0:c7:da:4c:d7:23:4a:b9:01:7f:75:39:25:dd:f7:8f:
8c:04:ed:00:7d:ab:8d:33:a8:11:ac:8a:67:8b:f6:a5:26:b8:
58:e8:17:cb:9b:5d:84:94:4e:f5:f5:fe:a9:8b:49:06:9f:c6:
7f:ab:92:3e:bf:f9:f2:99:fc:ab:09:ca:49:60:c0:cd:6b:92:
8d:3a:1c:13:18:1b:4b:f7:c2:f1:6d:1a:15:53:16:26:b0:28:
1a:95:71:28:4b:b2:44:b8:69:b3:6c:34:03:60:64:37:39:1e:
10:cd:54:4e:fb:3d:3f:53:19:7e:75:a1:20:ea:6c:8c:91:44:
94:34:eb:13:21:65:54:8f:bf:00:c9:b3:02:19:bf:a8:4f:f8:
9d:98:4c:54:56:10:77:58:7a:e8:80:5f:95:5a:7c:3f:4e:66:
91:f1:c8:97:a9:19:f2:04:56:2d:04:fa:5d:8e:95:a2:e9:de:
cf:17:3d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qalKd8NIy4PYAGZLQv4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTEyYzgwNGE3ZjRhNzRjZTU4Y2M3MWM5OTRmNWE5ZDU2
MTIyYjEwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhkOWM4MWEyMDc0NTBjYmMzOGU1NzlkYTJhMjUxM2IyYzE1ZDc1ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJIjtR+ZAUTTmQqTtqKAf6lJ/9g4
EEO+8H+NvnqT30UicqpjdcbIM3B60M70z7UrTuPyxlyFnbHgcm8gi4Tal5BkCfV6
NPOvYjf1UHEqZtfXssMabZHLQvxBaqjchLKjuSBZIrtiZEeMbrq6Ux8iieMrlxik
4NMyd3nVBswJM0gJNkYi3pzL0IxmSCtgo5+iX1ZAPOxq5j0EBqjkOYgyler1ogGt
w+W1o9kkMIAEi50QSMQulFXtdoOUmKb/x1K1xZtHVxAxB39SfCC9HGulTORe9pwn
B12FiVZ5b2buW5sFUbJFCB6BOT3/6OXWIx7ABqQelMTqJULXAvUznbtscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnIGiB0UMvDjledoqJROywV11/XMB8GA1UdIwQY
MBaAFLkRLIBKf0p0zljMccmU9anVYSKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMWNmYjUtYWNiNS00MDUyLTlmODMt
NWUyYzlkYWI4NDAzLzEvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xMWNmYjUtYWNiNS00MDUyLTlmODMtNWUyYzlkYWI4NDAz
LzEvdVJFc2dFcF9TblRPV014eHlaVDFxZFZoSXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzke/Kpt
CyKIdIcquALvoKq+0G0RPXDkGcxlOdfrIgTaynJr4aUzFu3BDebQt/jj/clBs5dk
i+yR1J6nS5pbzXZweZyTaTCUUZKgx9pM1yNKuQF/dTkl3fePjATtAH2rjTOoEayK
Z4v2pSa4WOgXy5tdhJRO9fX+qYtJBp/Gf6uSPr/58pn8qwnKSWDAzWuSjTocExgb
S/fC8W0aFVMWJrAoGpVxKEuyRLhps2w0A2BkNzkeEM1UTvs9P1MZfnWhIOpsjJFE
lDTrEyFlVI+/AMmzAhm/qE/4nZhMVFYQd1h66IBflVp8P05mkfHIl6kZ8gRWLQT6
XY6Vounezxc9mA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:16:01 2025 by rpki-client