Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: Wbk8Oc9I2pVkpifBvKgwjg6j3Ccj0wxAqEXzt4Up4co=
Subject key identifier: C8:4F:FC:D7:F7:49:10:62:4D:6A:44:44:11:AD:E6:6C:B5:A6:F7:0C
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 0194BC04CCA3A2FA31209E6B6ED72DF2A4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 1171
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: 0DyTsacmxibr19BJICxaqms0j5EfCIY0pgnnFxRG3wk=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cc:a3:a2:fa:31:20:9e:6b:6e:d7:2d:f2:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=c84ffcd7f74910624d6a444411ade66cb5a6f70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:b2:f1:1a:d1:17:d5:7a:5c:cd:e3:8f:1d:
44:26:24:f3:77:1f:82:4e:ab:c3:38:d2:ba:26:a2:
64:0f:dd:55:e4:7b:e6:d9:93:ba:a0:e2:18:ae:84:
8c:52:98:ce:dc:b9:64:9e:6f:53:a3:8b:a6:ff:05:
fe:6b:4c:cf:02:58:4c:da:3b:41:db:4c:89:38:f9:
a9:16:78:f6:5b:16:73:4c:2f:d2:29:06:67:7f:c2:
16:68:30:e6:e5:c9:be:7a:10:a8:a9:5a:3b:c3:0e:
65:d9:ba:9b:75:67:f5:40:f6:6e:2b:3d:e7:8f:5d:
b7:2c:5c:e2:66:3d:9d:a3:75:cf:06:d9:62:a4:dc:
99:09:c8:40:21:25:cc:d7:bc:d8:23:11:23:0e:a9:
4b:a3:83:74:54:db:da:96:e9:d5:2c:b1:ee:b8:77:
de:75:af:e8:66:3d:e4:fc:61:20:90:32:4d:e9:5a:
ce:c5:d9:11:e4:7f:a6:41:56:56:cf:54:9b:eb:1e:
87:a7:8f:6c:9c:6c:1d:50:6d:6a:8b:74:79:d6:5c:
c8:eb:f8:e3:05:ef:62:9e:08:5a:45:6b:2a:ff:0e:
f3:04:59:6c:19:be:45:11:74:87:a5:48:6b:18:6b:
a3:83:be:08:9a:3e:9d:be:45:a3:06:65:67:35:3a:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:FC:D7:F7:49:10:62:4D:6A:44:44:11:AD:E6:6C:B5:A6:F7:0C
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:57:17:06:de:00:ae:14:f0:c4:8c:f8:5b:82:31:d1:49:82:
a3:ca:f9:60:65:4f:c3:16:4a:b8:ff:78:04:11:32:18:e4:49:
ff:23:af:9f:f0:ca:b8:56:69:82:63:90:1f:ea:21:f1:97:b4:
e9:3c:9d:4f:a1:2e:dc:a6:e2:23:06:13:e4:87:f2:e1:10:3d:
7c:1a:89:5c:a7:e7:8e:f5:62:0c:f2:a3:4b:0a:a5:aa:01:48:
9e:b3:75:7f:52:04:9b:35:d2:8b:ff:85:d8:81:0e:ea:b2:5d:
59:b5:9a:9b:84:87:c9:4d:ce:39:bc:ee:29:16:63:9c:ff:11:
34:76:0e:d7:a3:3e:37:af:70:35:85:c4:a1:a4:0f:57:45:b6:
da:fa:dd:9a:11:57:86:77:6f:52:38:2c:a5:d1:9d:4a:57:04:
ee:0f:53:3e:69:db:42:10:81:dd:46:64:47:06:88:dc:0f:38:
dc:65:14:d8:2a:67:e2:cd:43:6b:ee:7c:9e:49:3a:f3:e4:54:
92:46:44:bb:fe:ba:86:2f:c2:a7:20:77:85:f7:e2:db:43:0f:
ba:7b:7e:8c:e6:fd:aa:06:45:69:29:be:67:22:8f:17:24:4e:
1f:c2:bd:85:00:35:c4:80:59:91:1b:54:12:eb:5c:9b:c9:d3:
79:63:50:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMyjovoxIJ5rbtct8qTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OGQxZjZlMzM2YTdjODEzNTE5NDFiYzBiOWRlYTM5ZDdk
NzY0ZGIwHhcNMjUwMTMxMTEwMDE4WhcNMjUwMjAxMTEwMDE4WjAzMTEwLwYDVQQD
EyhjODRmZmNkN2Y3NDkxMDYyNGQ2YTQ0NDQxMWFkZTY2Y2I1YTZmNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1iy8RrRF9V6XM3jjx1EJiTzdx+C
TqvDONK6JqJkD91V5Hvm2ZO6oOIYroSMUpjO3Llknm9To4um/wX+a0zPAlhM2jtB
20yJOPmpFnj2WxZzTC/SKQZnf8IWaDDm5cm+ehCoqVo7ww5l2bqbdWf1QPZuKz3n
j123LFziZj2do3XPBtlipNyZCchAISXM17zYIxEjDqlLo4N0VNvalunVLLHuuHfe
da/oZj3k/GEgkDJN6VrOxdkR5H+mQVZWz1Sb6x6Hp49snGwdUG1qi3R51lzI6/jj
Be9inghaRWsq/w7zBFlsGb5FEXSHpUhrGGujg74Imj6dvkWjBmVnNTr0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhP/Nf3SRBiTWpERBGt5my1pvcMMB8GA1UdIwQY
MBaAFLmNH24zanyBNRlBvAud6jnX12TbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAt
MDM4NTdlZjViMzg3LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAtMDM4NTdlZjViMzg3
LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlcXBt4A
rhTwxIz4W4Ix0UmCo8r5YGVPwxZKuP94BBEyGORJ/yOvn/DKuFZpgmOQH+oh8Ze0
6TydT6Eu3KbiIwYT5Ify4RA9fBqJXKfnjvViDPKjSwqlqgFInrN1f1IEmzXSi/+F
2IEO6rJdWbWam4SHyU3OObzuKRZjnP8RNHYO16M+N69wNYXEoaQPV0W22vrdmhFX
hndvUjgspdGdSlcE7g9TPmnbQhCB3UZkRwaI3A843GUU2Cpn4s1Da+58nkk68+RU
kkZEu/66hi/CpyB3hffi20MPunt+jOb9qgZFaSm+ZyKPFyROH8K9hQA1xIBZkRtU
Eutcm8nTeWNQtg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:15 2025 by rpki-client