Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier: sn4kxjeY1DJtVreISbGtrrMWXmGaRvOdU8lvrTq0JHE=
Subject key identifier: 89:4E:C3:F2:B7:28:40:92:4D:1A:64:29:9D:2C:E8:A5:EC:EA:91:56
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 0194BC04B530B7C73F35D9C8C92A11460CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number: 0BF3
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: RnAPkdr/VuZhGc5xOmzzw7ccZgOgayrx+5/pn8QJyQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:30:b7:c7:3f:35:d9:c8:c9:2a:11:46:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=894ec3f2b72840924d1a64299d2ce8a5ecea9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:a1:8a:10:c7:8f:17:33:2f:af:43:b1:79:
77:5e:00:55:7d:ee:d1:f3:bf:11:a6:dd:b1:78:08:
e9:31:00:d7:05:99:c9:aa:db:21:4f:cd:6c:49:d5:
ae:a9:86:f2:e0:da:28:c7:4f:69:5f:a6:17:0b:49:
9e:d6:7a:f4:37:c9:ba:4d:f6:2b:d9:16:1f:36:fe:
8d:98:1b:d7:25:4b:98:de:42:32:b8:0a:f7:7b:08:
31:4f:02:11:03:d5:25:e1:2b:1c:b7:20:4e:88:6f:
84:91:ad:d0:66:ae:9f:f7:c3:e9:3c:10:a3:ff:b5:
8e:82:e0:3f:5a:90:cf:63:fc:9d:ab:0a:d4:c3:d9:
a9:dd:73:bb:fe:07:bd:30:09:e0:52:ed:d7:c6:bd:
02:7f:46:9a:24:6e:09:63:07:e9:5e:03:c9:ec:d4:
91:19:65:d4:10:5a:e4:ea:b1:d2:cb:a6:99:1e:30:
50:ca:06:4c:a2:36:92:37:c4:f9:57:77:39:9a:48:
cf:6b:eb:a9:1f:df:d5:22:48:c2:0f:57:0c:d5:e2:
ed:0e:51:0f:ef:50:e0:af:ab:04:b0:9a:bf:b0:06:
95:c6:a9:04:22:d3:b9:9c:86:b0:67:d1:5c:d7:83:
06:cb:4f:c9:96:95:d5:c5:a9:46:7e:51:5c:b8:60:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4E:C3:F2:B7:28:40:92:4D:1A:64:29:9D:2C:E8:A5:EC:EA:91:56
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e2:a6:aa:b6:52:e5:01:36:47:b6:30:d8:00:49:76:7c:e9:
57:f1:4a:9b:6a:8a:75:43:93:3a:9e:57:42:49:5d:71:51:25:
c5:8d:e3:25:fa:42:fc:17:1c:85:af:a8:c4:86:bd:d7:91:1f:
e8:d6:55:43:55:6d:0a:e0:21:fc:84:69:97:a9:a5:a1:2b:42:
0e:87:96:08:f7:de:e6:1a:8a:a9:55:a1:1d:9e:56:3f:dd:33:
0f:28:0e:ed:c3:dc:3a:85:6e:a3:50:6d:3d:2f:28:f9:7a:8d:
bd:db:03:4a:25:92:51:ce:10:4d:c2:fa:0f:49:c4:41:a8:39:
38:d4:7c:83:1b:99:93:79:1b:bc:d0:de:cb:f9:d0:9e:e3:71:
f0:84:0f:fd:bc:36:0f:e9:e1:e4:ea:1c:6c:bf:d3:2d:06:f2:
c8:0b:8c:d7:e5:06:64:30:3d:09:a4:0b:84:8f:c1:66:84:ef:
73:85:00:f0:84:a5:a6:f9:7a:cb:47:57:9f:aa:a0:86:30:1c:
5d:3e:0c:49:b3:db:19:45:2a:59:95:87:e6:35:2f:89:ec:ea:
63:1b:f7:35:8e:a4:21:32:c9:53:04:ee:42:23:50:87:7b:b2:
c8:a4:3a:8f:ef:3d:93:cb:e9:35:99:a2:4e:dd:d5:19:65:1b:
12:d8:e0:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLUwt8c/NdnIySoRRgzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMzUyMDVjM2QwMTcxM2Y5ZDhiNWIwMGUzNTM5NjE5YjIz
MzUyMzIwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
Eyg4OTRlYzNmMmI3Mjg0MDkyNGQxYTY0Mjk5ZDJjZThhNWVjZWE5MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W6hihDHjxczL69DsXl3XgBVfe7R
878Rpt2xeAjpMQDXBZnJqtshT81sSdWuqYby4Noox09pX6YXC0me1nr0N8m6TfYr
2RYfNv6NmBvXJUuY3kIyuAr3ewgxTwIRA9Ul4SsctyBOiG+Eka3QZq6f98PpPBCj
/7WOguA/WpDPY/ydqwrUw9mp3XO7/ge9MAngUu3Xxr0Cf0aaJG4JYwfpXgPJ7NSR
GWXUEFrk6rHSy6aZHjBQygZMojaSN8T5V3c5mkjPa+upH9/VIkjCD1cM1eLtDlEP
71Dgr6sEsJq/sAaVxqkEItO5nIawZ9Fc14MGy0/JlpXVxalGflFcuGA4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlOw/K3KECSTRpkKZ0s6KXs6pFWMB8GA1UdIwQY
MBaAFFA1IFw9AXE/nYtbAONTlhmyM1IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It
MTYwMmQ2YWQxNDFhLzEvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh
LzEvVURVZ1hEMEJjVC1kaTFzQTQxT1dHYkl6VWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+KmqrZS
5QE2R7Yw2ABJdnzpV/FKm2qKdUOTOp5XQkldcVElxY3jJfpC/Bccha+oxIa915Ef
6NZVQ1VtCuAh/IRpl6mloStCDoeWCPfe5hqKqVWhHZ5WP90zDygO7cPcOoVuo1Bt
PS8o+XqNvdsDSiWSUc4QTcL6D0nEQag5ONR8gxuZk3kbvNDey/nQnuNx8IQP/bw2
D+nh5OocbL/TLQbyyAuM1+UGZDA9CaQLhI/BZoTvc4UA8ISlpvl6y0dXn6qghjAc
XT4MSbPbGUUqWZWH5jUviezqYxv3NY6kITLJUwTuQiNQh3uyyKQ6j+89k8vpNZmi
Tt3VGWUbEtjgPg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:47 2025 by rpki-client