Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: F6BO4QPVGaGm4dIDf8cxIrmBWbOZSu6undhmBqvRIow=
Subject key identifier: 8E:C3:C9:5A:A0:B1:34:E3:B1:B9:56:BB:B9:E9:C0:AA:61:D7:0A:06
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 0194BCA9D50F30D72D2B4FAF576A22749F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: zo49c3Gm+KXuioh0iTIJVcbExBhra/y5NKcTsWaOAeE=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:0f:30:d7:2d:2b:4f:af:57:6a:22:74:9f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=8ec3c95aa0b134e3b1b956bbb9e9c0aa61d70a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:dd:69:66:44:5c:a8:74:a0:45:ab:29:11:
dc:67:9b:f7:05:df:49:fd:fa:29:c5:73:09:ae:fe:
da:ac:fa:20:b3:f6:c0:6b:ee:8f:b6:21:d6:d5:d5:
29:ab:0a:6e:c2:c7:c8:f7:69:21:1c:7a:bd:cf:57:
53:a0:b4:a1:2d:2d:02:07:fc:73:a0:9a:6c:5e:8a:
22:ce:71:da:51:0a:c0:ab:d1:42:8e:65:8f:2b:c2:
d6:b4:f6:03:c9:db:2b:8c:c0:e2:50:c3:d4:96:65:
0b:69:93:1a:dd:46:9a:be:ac:2f:b9:23:7a:02:3d:
9f:5c:e8:96:3e:b1:a1:7c:9b:1d:1a:8b:38:c9:d1:
f9:6e:17:92:9a:e9:20:c7:d8:89:9c:ad:98:e4:20:
48:83:69:38:8c:bf:af:0a:dc:3a:89:a7:aa:5d:34:
41:52:fb:22:b6:7a:b5:92:a0:5e:be:ae:8e:27:e9:
c5:d1:5a:82:ec:74:f9:27:36:69:0f:1f:ca:71:aa:
8c:8e:c3:07:ab:c2:e1:5b:b6:c5:00:eb:2d:2f:97:
03:7e:87:58:17:77:fe:fc:5c:1c:fd:60:cd:f8:92:
28:c9:93:be:b0:19:3a:87:39:0c:40:c4:0e:b5:18:
1a:cd:43:c5:97:6a:08:6d:4e:f8:59:ba:f7:b0:a0:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C3:C9:5A:A0:B1:34:E3:B1:B9:56:BB:B9:E9:C0:AA:61:D7:0A:06
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:40:ec:f3:99:92:5d:07:01:f6:56:f3:ee:e9:12:15:84:98:
a5:74:2f:33:25:d7:94:6a:4e:de:b3:49:7f:0f:a1:b6:17:f8:
bd:a1:b6:ce:f1:9f:ec:3b:6e:88:07:cc:5b:6c:4d:bf:71:c3:
af:11:13:a4:14:bb:2f:97:83:1a:68:a4:77:08:b0:fd:df:3c:
2f:b4:d5:ff:77:c3:3c:ca:4b:93:d5:6c:39:5d:a1:06:bc:fe:
b0:54:19:e3:84:5f:04:e7:c9:8e:f9:9a:56:b0:8a:7a:67:c6:
d3:33:c5:48:bb:ee:7f:42:53:6b:03:d2:d5:45:38:ff:dd:b8:
07:96:64:80:51:a6:36:46:b2:2e:a6:3e:3d:4d:0c:a6:1c:78:
77:3a:81:c7:f2:f6:de:9c:4c:7b:c0:ba:83:26:74:b2:2d:c2:
7a:95:70:d2:72:22:28:22:89:be:96:6e:28:c6:98:09:5a:49:
58:49:06:75:e1:46:74:bc:d8:12:3b:55:8e:64:72:01:18:3f:
1c:00:8d:ee:7d:56:61:35:41:57:51:32:0b:5c:fe:5d:db:28:
e7:26:ab:c4:7e:9c:77:c8:f8:45:87:88:67:a7:99:7b:ee:54:
b6:e7:d7:a1:e7:38:3c:d8:b9:ae:8a:3a:21:78:4b:8d:cb:e4:
d8:cf:bc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdUPMNctK0+vV2oidJ9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTM5YTY3NzY5M2JhZmI3OTI0ZDZlYTg0Njk3OGNmNGM2
OGI4YzIwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
Eyg4ZWMzYzk1YWEwYjEzNGUzYjFiOTU2YmJiOWU5YzBhYTYxZDcwYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvdaWZEXKh0oEWrKRHcZ5v3Bd9J
/fopxXMJrv7arPogs/bAa+6PtiHW1dUpqwpuwsfI92khHHq9z1dToLShLS0CB/xz
oJpsXooiznHaUQrAq9FCjmWPK8LWtPYDydsrjMDiUMPUlmULaZMa3UaavqwvuSN6
Aj2fXOiWPrGhfJsdGos4ydH5bheSmukgx9iJnK2Y5CBIg2k4jL+vCtw6iaeqXTRB
Uvsitnq1kqBevq6OJ+nF0VqC7HT5JzZpDx/KcaqMjsMHq8LhW7bFAOstL5cDfodY
F3f+/Fwc/WDN+JIoyZO+sBk6hzkMQMQOtRgazUPFl2oIbU74Wbr3sKDH0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7DyVqgsTTjsblWu7npwKph1woGMB8GA1UdIwQY
MBaAFFHjmmd2k7r7eSTW6oRpeM9MaLjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVPYVozYVR1dnQ1Sk5icWhHbDR6MHhvdU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NzkxZTItZGYyNS00YzdjLTg5ZGYt
NzZlYzRhY2JiNzI2LzEvVWVPYVozYVR1dnQ1Sk5icWhHbDR6MHhvdU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80NzkxZTItZGYyNS00YzdjLTg5ZGYtNzZlYzRhY2JiNzI2
LzEvVWVPYVozYVR1dnQ1Sk5icWhHbDR6MHhvdU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkDs85mS
XQcB9lbz7ukSFYSYpXQvMyXXlGpO3rNJfw+hthf4vaG2zvGf7DtuiAfMW2xNv3HD
rxETpBS7L5eDGmikdwiw/d88L7TV/3fDPMpLk9VsOV2hBrz+sFQZ44RfBOfJjvma
VrCKemfG0zPFSLvuf0JTawPS1UU4/924B5ZkgFGmNkayLqY+PU0Mphx4dzqBx/L2
3pxMe8C6gyZ0si3CepVw0nIiKCKJvpZuKMaYCVpJWEkGdeFGdLzYEjtVjmRyARg/
HACN7n1WYTVBV1EyC1z+Xdso5yarxH6cd8j4RYeIZ6eZe+5UtufXoec4PNi5roo6
IXhLjcvk2M+8og==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client