Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: V88NM9+dMocR8bN0/e7KouFRu88EWDza5fFaYF9Hdi8=
Subject key identifier: FA:51:72:FD:83:1E:BD:28:61:6E:B4:C2:46:6E:CB:A2:25:8F:29:42
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 0194BC05126E0498344E74161E0C7DA60BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 10B3
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: FzEB8DnswS9TJCc1cGtFuI35+FpSvYVW4K0X73w7YV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:6e:04:98:34:4e:74:16:1e:0c:7d:a6:0b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=fa5172fd831ebd28616eb4c2466ecba2258f2942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:21:65:29:9d:48:1f:3f:01:d1:4c:34:1c:
7c:c0:ad:3f:8e:c6:e8:a5:b8:13:b5:d4:e7:63:44:
97:cc:5e:0c:6d:be:e3:fb:ba:18:28:83:84:86:9d:
e4:7c:75:af:ad:f7:24:76:04:de:71:a9:68:97:d4:
e0:fa:72:20:d9:d6:7b:0a:1d:71:3f:1e:83:f9:00:
1c:f7:38:f6:ec:15:d2:29:e8:9c:da:e9:68:15:b7:
04:5c:12:d6:2d:6e:2b:a3:44:93:b7:d0:ce:2c:d3:
a7:a1:c5:7a:90:e9:f2:15:cb:5f:b3:12:ad:8d:71:
a5:27:2b:af:b7:4f:76:b6:c8:1a:54:03:54:b3:62:
dd:e2:8f:6a:31:e8:0c:14:a2:a8:6c:bf:9d:ad:44:
6b:53:87:06:82:44:81:e7:d1:66:d3:33:74:03:19:
af:7f:49:a7:08:0d:e5:b4:57:e1:ba:e7:0e:fd:5a:
c4:8f:1b:3b:16:14:c6:a0:7c:06:ea:98:3a:87:f3:
28:0e:ea:d5:75:c1:da:8c:06:58:cd:a0:c9:7e:c6:
2d:4a:73:a1:fe:f0:9c:39:6f:1b:b8:e4:fd:c7:ef:
dc:ed:41:76:96:7e:d9:8e:ef:8f:ee:93:9b:bc:1f:
a1:22:e5:42:3d:1d:4c:3b:c1:df:bb:f0:ab:eb:dc:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:51:72:FD:83:1E:BD:28:61:6E:B4:C2:46:6E:CB:A2:25:8F:29:42
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:10:18:04:d2:03:72:4c:ec:70:70:2a:c5:e3:dd:79:f6:88:
cb:84:04:88:25:6c:a1:51:dd:74:9b:fd:69:7d:d8:ae:3f:aa:
a3:bb:ed:b8:7e:99:41:c7:20:e9:00:5a:f8:71:31:c9:b9:cc:
4c:1d:4c:6f:f8:73:c0:b7:e5:46:8f:66:ee:65:e9:64:fd:06:
59:b2:fc:3d:d5:23:c3:a3:96:1f:13:93:57:8d:81:22:42:c1:
48:06:3e:1f:42:85:c8:4b:cf:22:b2:6c:22:47:56:c2:83:ae:
8d:b9:32:db:1a:35:36:92:63:e6:bf:22:64:78:b1:86:05:f3:
a6:6b:85:3f:f7:35:c2:45:9d:00:56:48:8f:5f:cf:b8:f1:45:
34:04:36:b1:5f:c9:18:d6:d5:52:8f:58:f3:be:18:0e:5a:94:
38:93:39:08:19:29:9d:2b:75:35:68:1b:57:ed:8f:4b:98:19:
7b:41:9e:11:2d:8a:a8:9f:13:d0:f0:8a:9a:19:de:84:fd:2c:
c3:6c:77:94:cb:6e:36:55:9e:f5:5b:75:d2:20:28:ad:f5:0d:
0d:eb:38:70:1c:21:c6:6e:f9:41:5c:0a:0c:2a:75:2d:11:5d:
fc:c6:9d:b3:55:be:e8:52:19:cc:32:cf:06:e7:3f:1a:38:d8:
5d:85:b2:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRJuBJg0TnQWHgx9pguoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOTdjMTU0NTZlYjYwMDQwM2VjZmJiMTZjMjBlMDgxNjA5
NDRmOGYwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
EyhmYTUxNzJmZDgzMWViZDI4NjE2ZWI0YzI0NjZlY2JhMjI1OGYyOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0ghZSmdSB8/AdFMNBx8wK0/jsbo
pbgTtdTnY0SXzF4Mbb7j+7oYKIOEhp3kfHWvrfckdgTecalol9Tg+nIg2dZ7Ch1x
Px6D+QAc9zj27BXSKeic2uloFbcEXBLWLW4ro0STt9DOLNOnocV6kOnyFctfsxKt
jXGlJyuvt092tsgaVANUs2Ld4o9qMegMFKKobL+drURrU4cGgkSB59Fm0zN0Axmv
f0mnCA3ltFfhuucO/VrEjxs7FhTGoHwG6pg6h/MoDurVdcHajAZYzaDJfsYtSnOh
/vCcOW8buOT9x+/c7UF2ln7Zju+P7pObvB+hIuVCPR1MO8Hfu/Cr69z0zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpRcv2DHr0oYW60wkZuy6IljylCMB8GA1UdIwQY
MBaAFLqXwVRW62AEA+z7sWwg4IFglE+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWIt
MmUyY2Q2NDM1MTA2LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWItMmUyY2Q2NDM1MTA2
LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRAYBNID
ckzscHAqxePdefaIy4QEiCVsoVHddJv9aX3Yrj+qo7vtuH6ZQccg6QBa+HExybnM
TB1Mb/hzwLflRo9m7mXpZP0GWbL8PdUjw6OWHxOTV42BIkLBSAY+H0KFyEvPIrJs
IkdWwoOujbky2xo1NpJj5r8iZHixhgXzpmuFP/c1wkWdAFZIj1/PuPFFNAQ2sV/J
GNbVUo9Y874YDlqUOJM5CBkpnSt1NWgbV+2PS5gZe0GeES2KqJ8T0PCKmhnehP0s
w2x3lMtuNlWe9Vt10iAorfUNDes4cBwhxm75QVwKDCp1LRFd/Mads1W+6FIZzDLP
Buc/GjjYXYWy0A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:46 2025 by rpki-client