Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: Nn9rl2JEoVLhf3vAQn51eVqyAnVuqUnRzuyblVlP5UM=
Subject key identifier: EF:8A:5B:0A:36:06:B1:DF:94:17:C3:88:87:85:F6:28:31:1C:95:19
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 0194BC051FDB7E562079A00DA373D2C4F583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1148
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: glZrlzesmyqv1ms4I_jINVAiItY.roa (hash: e9Aesy+QmxKIAQLxzvdWfb0xc4e3fJilDhcUUEkMbkA=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: TfATytUC6ti2LNWy3aFVtoDFdjpWeI5himHeCXXyxY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1f:db:7e:56:20:79:a0:0d:a3:73:d2:c4:f5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=ef8a5b0a3606b1df9417c3888785f628311c9519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:12:18:dc:3b:26:75:09:79:bb:1e:b6:66:
42:c4:b0:e2:36:eb:62:85:13:29:40:2a:24:64:cd:
b9:12:65:06:2a:d0:7a:15:6c:d3:a5:8a:76:5a:51:
f0:74:2c:67:00:f8:6d:1a:a3:b7:c6:0f:33:45:2f:
4d:94:e5:a5:a2:c0:c2:ad:fb:7b:35:97:69:50:96:
23:bb:94:2e:67:ce:b5:6e:91:83:09:f8:7c:7b:ab:
58:80:eb:fd:79:ce:b6:e1:5e:a5:49:df:66:14:2c:
3f:f7:13:30:03:21:6e:38:99:d4:73:0e:16:e6:e0:
1d:84:3c:21:00:0a:c8:f5:02:d2:29:56:77:28:5a:
d9:6a:74:b5:56:ca:ea:c8:f7:b9:8d:21:e8:b4:8c:
f2:c1:b2:93:36:e4:80:e5:5e:9b:53:6f:dc:b3:1a:
08:52:21:3b:4b:8d:bf:db:9e:af:b8:99:e6:8e:b1:
fe:38:3c:64:e8:07:0b:05:68:76:90:fb:10:70:c2:
1a:7c:24:33:31:da:82:e3:67:ac:36:d3:fd:81:4a:
d9:df:bd:ba:0a:66:e1:e0:56:b6:5e:6b:9f:9d:2e:
47:2a:97:34:93:7a:99:e9:22:a3:1d:39:97:ae:ac:
b3:05:1f:b6:4c:8a:ad:c5:2b:80:19:2f:30:d3:9f:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:5B:0A:36:06:B1:DF:94:17:C3:88:87:85:F6:28:31:1C:95:19
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:54:b2:dc:80:45:e0:43:10:b2:d6:f5:e2:eb:47:bf:1c:
1e:52:70:51:93:c3:f2:24:a8:55:c2:33:c0:b0:d9:34:51:33:
86:99:0d:89:38:42:ed:7b:ec:9b:b8:12:fe:11:be:89:a6:a8:
2e:2e:c8:72:19:06:3f:8d:43:c0:d8:69:c5:ce:7c:74:3a:e3:
12:8b:b7:09:70:70:12:26:de:b7:af:e0:48:80:0c:fa:64:b3:
9a:fa:4a:7c:e4:05:01:73:4d:56:4e:5f:d3:b0:4e:bb:86:ac:
52:bc:6a:79:34:02:d4:11:6b:62:7c:64:22:6e:af:1d:ff:50:
7a:e3:1a:2f:ac:a3:fa:03:15:69:62:ba:32:c5:7d:59:fe:56:
f4:51:41:69:6e:74:6a:da:d3:8c:24:2b:8c:07:0d:2f:5d:b8:
53:9f:8f:01:95:64:95:4e:ed:e5:6f:74:72:0e:7f:50:07:e0:
d9:ff:e9:c8:50:d8:bc:4c:b3:61:51:32:9a:dc:40:a1:ab:d6:
b9:26:f2:e0:3a:52:7b:e3:d5:fa:c9:6b:ec:31:87:50:c4:6a:
98:77:40:86:15:6d:10:eb:cf:ea:3e:f2:65:67:6d:70:41:61:
46:cf:9c:06:9e:69:37:e1:a6:86:e9:23:7a:2d:5a:c0:4f:a1:
1c:db:bb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BR/bflYgeaANo3PSxPWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EyhlZjhhNWIwYTM2MDZiMWRmOTQxN2MzODg4Nzg1ZjYyODMxMWM5NTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApswSGNw7JnUJebsetmZCxLDiNuti
hRMpQCokZM25EmUGKtB6FWzTpYp2WlHwdCxnAPhtGqO3xg8zRS9NlOWlosDCrft7
NZdpUJYju5QuZ861bpGDCfh8e6tYgOv9ec624V6lSd9mFCw/9xMwAyFuOJnUcw4W
5uAdhDwhAArI9QLSKVZ3KFrZanS1VsrqyPe5jSHotIzywbKTNuSA5V6bU2/csxoI
UiE7S42/256vuJnmjrH+ODxk6AcLBWh2kPsQcMIafCQzMdqC42esNtP9gUrZ3726
Cmbh4Fa2XmufnS5HKpc0k3qZ6SKjHTmXrqyzBR+2TIqtxSuAGS8w058X9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+KWwo2BrHflBfDiIeF9igxHJUZMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4NUstyA
ReBDELLW9eLrR78cHlJwUZPD8iSoVcIzwLDZNFEzhpkNiThC7Xvsm7gS/hG+iaao
Li7IchkGP41DwNhpxc58dDrjEou3CXBwEibet6/gSIAM+mSzmvpKfOQFAXNNVk5f
07BOu4asUrxqeTQC1BFrYnxkIm6vHf9QeuMaL6yj+gMVaWK6MsV9Wf5W9FFBaW50
atrTjCQrjAcNL124U5+PAZVklU7t5W90cg5/UAfg2f/pyFDYvEyzYVEymtxAoavW
uSby4DpSe+PV+slr7DGHUMRqmHdAhhVtEOvP6j7yZWdtcEFhRs+cBp5pN+Gmhukj
ei1awE+hHNu7Gw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:41 2025 by rpki-client