Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: zfq5CfMMKana3wB9LjGp0lct7z+wWUF67qUZs603XEI=
Subject key identifier: 54:A4:37:2D:36:28:8E:FF:CE:9D:00:69:0B:CA:3C:09:F2:C2:08:B3
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 0194BD178DA0B138352DE8C0F1B3A702B589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 0DCB
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: 5wn1MUshvBmc6ME2IzD6zIe1XZE.roa (hash: QLmy/h6humsEGtFs5Q8B+FIkOzKvZzOF/LsQEEuh7mQ=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: D02h5KPuMWNp3PIO1EfO3/jKz0POlzs3aMifJYF+wAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:a0:b1:38:35:2d:e8:c0:f1:b3:a7:02:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=54a4372d36288effce9d00690bca3c09f2c208b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:21:0f:15:45:46:e8:a5:aa:55:9b:7d:e2:
96:c9:3e:e0:21:b1:3e:d9:ea:67:ba:20:d0:fe:4e:
db:3d:e6:a0:e3:74:a9:a8:05:18:90:51:b1:18:fa:
2a:df:8a:e9:39:01:32:9a:5e:42:f1:ab:f0:7d:ad:
7d:dd:cd:29:60:68:dd:ae:61:79:cd:c9:8f:e6:dc:
ef:72:53:29:77:d7:81:06:21:e2:71:55:66:2b:c0:
56:55:51:1e:e9:3f:ec:95:c2:87:af:b6:b3:87:5c:
e2:2d:55:39:0f:84:06:0e:6f:77:0f:b3:65:1e:88:
80:67:65:8f:cd:09:5d:e0:4f:0b:d2:7e:fb:1e:79:
e8:f2:97:e0:dc:5e:bf:75:39:a3:eb:ea:5e:ee:f1:
8a:e1:f5:54:73:5c:ca:d1:e8:67:29:3f:38:bb:f6:
4a:bb:63:b2:88:80:89:5a:67:99:f4:f1:06:1d:8c:
52:d6:dd:a7:13:fc:8e:e0:37:07:91:7f:f5:7d:f5:
a7:d0:8a:03:13:88:ef:5f:1d:40:af:cf:f4:a7:77:
c2:53:3d:02:ab:4b:20:98:5f:d4:f7:7b:32:87:31:
13:8b:9b:09:18:86:54:d6:9d:8c:c3:09:35:b1:a8:
cd:cc:96:eb:a5:d7:05:dd:0e:b3:99:c0:df:f6:4d:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:37:2D:36:28:8E:FF:CE:9D:00:69:0B:CA:3C:09:F2:C2:08:B3
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:fe:6d:cb:3c:fa:b0:c8:42:6b:ab:05:bb:08:00:c3:2a:
ce:fb:84:ca:2a:29:b7:3f:fc:8b:39:aa:f2:58:ff:e0:fa:5f:
9c:97:70:bf:bf:6f:c7:a9:17:6e:c0:20:27:25:47:51:5b:9e:
a6:c1:a3:6d:b2:07:38:53:97:ef:c4:f6:e5:52:b8:b7:f2:54:
50:c6:b8:a8:d1:8e:8b:b5:b2:e1:a6:19:8f:fe:da:84:66:52:
42:1a:57:30:ac:37:3b:59:c0:f5:8d:16:23:85:6b:0e:46:ed:
35:63:03:eb:d5:13:e2:f1:a5:39:13:f2:b1:e9:88:d6:16:c3:
5f:6e:8c:00:65:cf:25:45:9d:92:3a:72:bc:a4:7d:cf:c7:d9:
cb:ca:26:9c:c1:7f:f3:00:6b:01:3c:00:6d:28:d4:13:70:b7:
b8:0a:a9:85:61:49:5f:36:eb:28:7f:77:2c:e1:cc:59:24:28:
dc:5c:82:0f:13:e6:bf:38:34:66:bb:94:e8:0b:e7:15:bb:80:
0d:c0:8c:c5:3d:63:55:89:67:f6:4f:15:7e:1e:78:a9:11:fe:
01:62:4c:67:93:21:27:ef:09:10:41:63:c2:44:c4:07:65:28:
36:80:6e:88:52:9f:8a:c9:7a:d3:ae:c9:13:d8:bf:40:06:c9:
d6:bd:44:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F42gsTg1LejA8bOnArWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjJiODVhMWQyYzUxZDk5MDY5Y2EzYTVhZmY1MmVjYzZh
OWFhYjQwHhcNMjUwMTMxMTYwMDI0WhcNMjUwMjAxMTYwMDI0WjAzMTEwLwYDVQQD
Eyg1NGE0MzcyZDM2Mjg4ZWZmY2U5ZDAwNjkwYmNhM2MwOWYyYzIwOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S0hDxVFRuilqlWbfeKWyT7gIbE+
2epnuiDQ/k7bPeag43SpqAUYkFGxGPoq34rpOQEyml5C8avwfa193c0pYGjdrmF5
zcmP5tzvclMpd9eBBiHicVVmK8BWVVEe6T/slcKHr7azh1ziLVU5D4QGDm93D7Nl
HoiAZ2WPzQld4E8L0n77Hnno8pfg3F6/dTmj6+pe7vGK4fVUc1zK0ehnKT84u/ZK
u2OyiICJWmeZ9PEGHYxS1t2nE/yO4DcHkX/1ffWn0IoDE4jvXx1Ar8/0p3fCUz0C
q0sgmF/U93syhzETi5sJGIZU1p2Mwwk1sajNzJbrpdcF3Q6zmcDf9k0oiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSkNy02KI7/zp0AaQvKPAnywgizMB8GA1UdIwQY
MBaAFLhiuFodLFHZkGnKOlr/UuzGqaq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2Yt
Mjc4ZmQ0NzVmM2ZiLzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjIyMGYtMWEzYS00Y2JhLTgyY2YtMjc4ZmQ0NzVmM2Zi
LzEvdUdLNFdoMHNVZG1RYWNvNld2OVM3TWFwcXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW83+bcs8
+rDIQmurBbsIAMMqzvuEyioptz/8izmq8lj/4PpfnJdwv79vx6kXbsAgJyVHUVue
psGjbbIHOFOX78T25VK4t/JUUMa4qNGOi7Wy4aYZj/7ahGZSQhpXMKw3O1nA9Y0W
I4VrDkbtNWMD69UT4vGlORPysemI1hbDX26MAGXPJUWdkjpyvKR9z8fZy8omnMF/
8wBrATwAbSjUE3C3uAqphWFJXzbrKH93LOHMWSQo3FyCDxPmvzg0ZruU6AvnFbuA
DcCMxT1jVYln9k8Vfh54qRH+AWJMZ5MhJ+8JEEFjwkTEB2UoNoBuiFKfisl6067J
E9i/QAbJ1r1E4Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:05 2025 by rpki-client