Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File: uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier: Wuu2q0uEJubuPD4oQ+unaJ/yUb+pChCJBxYOelGf3sE=
Subject key identifier: F0:2D:61:7D:4C:E4:A2:DC:61:30:BF:B9:10:7E:48:25:CE:45:EB:E0
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 0194BD85AD9CFA44F4C3F9842CCEC6BD8D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: KHPRuQDdd-kWMT7LTpUd4Jl5CLc.roa (hash: HHEh/ZmjNau8OqCWaktRrOiEVjCo5faN7oV96b1l4Q8=)
2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: UcQ6HB1LSviBCVkEYL/nnjWu7tnZ44cBL6aqDnIX5kw=)
4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:9c:fa:44:f4:c3:f9:84:2c:ce:c6:bd:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=f02d617d4ce4a2dc6130bfb9107e4825ce45ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:df:86:56:8e:43:aa:15:76:68:15:9e:54:
e9:25:91:55:65:dc:a3:de:21:fb:b9:ce:ae:b9:08:
dc:a8:df:03:30:8e:79:66:17:a5:e0:92:d1:7e:ef:
d8:e1:97:88:23:25:15:7b:05:a4:cb:4e:04:6f:1b:
67:d2:40:41:b4:34:e0:7d:4c:f8:0e:4c:53:dd:9d:
39:59:ae:56:16:1f:f5:ba:28:94:f0:ca:b5:6f:5f:
30:f9:0a:24:9d:a8:11:6d:df:d9:d3:d3:dd:6e:8b:
f2:0f:42:34:42:0b:c5:dd:96:2c:23:d8:97:7d:79:
b1:9a:aa:a0:f7:01:f0:4a:04:29:46:85:03:d7:3e:
51:21:d2:9e:c2:c0:ef:fd:af:8b:01:13:4e:74:bf:
9d:12:3a:cd:74:37:6c:58:85:aa:13:0c:11:33:3d:
70:3c:6e:63:ac:a2:b1:de:19:35:47:70:c0:2b:ee:
02:af:24:4e:6f:bd:bb:66:52:5d:21:41:9b:21:b1:
00:14:43:f5:7a:77:30:5d:5e:02:e5:65:82:c2:9a:
62:6e:86:6f:53:09:ed:d5:a0:20:56:7a:f7:45:d7:
ed:7a:18:a6:81:19:ab:a9:89:69:59:a9:5d:33:ad:
17:1f:d1:41:ae:b0:1a:99:c7:b2:0f:a0:0a:42:bd:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:61:7D:4C:E4:A2:DC:61:30:BF:B9:10:7E:48:25:CE:45:EB:E0
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:f6:4f:36:9e:a4:82:90:d7:4a:56:93:8c:e4:e8:ae:56:
44:a2:54:a7:7d:a2:a9:9f:70:68:78:5d:4c:20:8e:ec:88:db:
3a:ce:e0:79:7d:76:e6:a5:b0:58:75:36:54:28:b6:ee:a7:2c:
59:12:40:d8:44:8a:76:9c:6d:db:d3:3c:aa:69:37:46:d5:0a:
30:7f:a3:3c:28:b8:1d:5e:b6:3a:11:e3:08:ad:7b:00:43:07:
13:56:90:77:2f:c0:98:82:04:22:19:50:5b:5a:73:60:a3:d1:
cf:e5:1f:2e:7b:6f:39:31:ed:05:bc:a9:f2:9c:09:35:4d:a0:
4a:33:19:ca:9c:2b:15:fc:cb:51:0a:9b:e7:06:4c:93:73:8b:
54:11:70:f9:2b:d9:d7:2f:27:46:83:a4:fe:c3:a9:eb:b6:af:
af:e1:9f:ce:cf:5e:db:4c:d0:0b:3e:91:8c:6d:7d:7f:44:ca:
ad:e4:a3:85:a5:52:97:39:a3:54:39:9f:09:b5:a0:4e:71:7c:
79:ed:b6:e2:ce:49:a8:97:74:28:85:f8:01:f8:fc:15:63:38:
5e:13:c4:e4:23:39:9c:cc:f4:a1:da:f8:33:d4:f5:44:2e:fe:
d4:dc:5c:d0:04:ea:98:70:36:5f:a4:b6:93:07:96:2e:25:4a:
74:89:d0:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha2c+kT0w/mELM7GvY1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EyhmMDJkNjE3ZDRjZTRhMmRjNjEzMGJmYjkxMDdlNDgyNWNlNDVlYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykrfhlaOQ6oVdmgVnlTpJZFVZdyj
3iH7uc6uuQjcqN8DMI55Zhel4JLRfu/Y4ZeIIyUVewWky04Ebxtn0kBBtDTgfUz4
DkxT3Z05Wa5WFh/1uiiU8Mq1b18w+QoknagRbd/Z09PdbovyD0I0QgvF3ZYsI9iX
fXmxmqqg9wHwSgQpRoUD1z5RIdKewsDv/a+LARNOdL+dEjrNdDdsWIWqEwwRMz1w
PG5jrKKx3hk1R3DAK+4CryROb727ZlJdIUGbIbEAFEP1encwXV4C5WWCwppiboZv
Uwnt1aAgVnr3RdftehimgRmrqYlpWaldM60XH9FBrrAamceyD6AKQr2gGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAtYX1M5KLcYTC/uRB+SCXORevgMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBf2Tzae
pIKQ10pWk4zk6K5WRKJUp32iqZ9waHhdTCCO7IjbOs7geX125qWwWHU2VCi27qcs
WRJA2ESKdpxt29M8qmk3RtUKMH+jPCi4HV62OhHjCK17AEMHE1aQdy/AmIIEIhlQ
W1pzYKPRz+UfLntvOTHtBbyp8pwJNU2gSjMZypwrFfzLUQqb5wZMk3OLVBFw+SvZ
1y8nRoOk/sOp67avr+Gfzs9e20zQCz6RjG19f0TKreSjhaVSlzmjVDmfCbWgTnF8
ee224s5JqJd0KIX4Afj8FWM4XhPE5CM5nMz0odr4M9T1RC7+1Nxc0ATqmHA2X6S2
kweWLiVKdInQHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:44 2025 by rpki-client