Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: VCBwmmYP+srW3ijraG7OFb541SJRL761rP0HRCTo2GM=
Subject key identifier: 3C:77:B7:57:F2:7F:BC:E3:44:9D:1B:91:2A:F0:59:DE:F0:D8:6D:CB
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 0194BCA9C44AC775BE4A5FE939D912B0280E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 0744
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: X64gi6j/sfJ2amz6/5YFD+mYuUcb8CNxt6qhmpMG8GQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:4a:c7:75:be:4a:5f:e9:39:d9:12:b0:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=3c77b757f27fbce3449d1b912af059def0d86dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:0c:cc:e3:a0:98:40:23:3a:a4:a3:46:b5:
6b:1f:41:fb:7b:60:4b:a0:1e:61:cb:9a:3b:14:16:
78:7b:db:bc:43:7d:49:35:89:0c:5d:87:68:e4:e1:
38:be:7d:03:05:00:b7:05:c8:76:d7:b9:c8:f7:54:
8a:61:51:f2:e3:dc:ac:90:d3:38:cc:33:2c:a7:62:
75:06:1d:5b:7f:dd:98:2a:83:17:1e:96:18:67:66:
d1:cc:38:ec:c6:45:15:3d:ca:2e:bd:f3:37:bc:4f:
cf:06:10:3b:db:3a:fb:55:5a:a6:fd:86:a9:0f:a9:
9c:13:71:44:38:86:f7:60:5d:1f:ab:a7:60:04:30:
7d:d3:cd:67:28:a6:6f:90:c9:37:3c:1d:df:0e:f1:
23:c0:69:2e:db:b5:fc:18:7c:f0:ab:d3:57:bc:8a:
34:73:52:4e:6c:26:47:87:f7:37:f6:36:72:37:5e:
75:a8:c5:b0:a0:a3:36:fd:3f:57:98:8a:3e:87:ab:
bb:c5:11:3b:b5:4c:ae:f1:e3:c2:22:de:af:fa:d5:
74:3e:96:93:c6:d0:e0:35:5f:4f:1b:c7:86:3e:42:
e4:ba:d1:c8:09:87:c4:d1:13:65:28:3d:47:84:99:
27:a4:10:aa:18:19:2f:10:1a:d1:4b:29:43:d3:21:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:B7:57:F2:7F:BC:E3:44:9D:1B:91:2A:F0:59:DE:F0:D8:6D:CB
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2f:2d:79:bc:52:f1:75:33:5e:59:97:59:cc:14:bf:a7:84:
9b:f9:e8:3b:a2:8c:0c:c7:0e:13:31:28:ee:18:f6:e6:8c:16:
c3:8d:68:f5:98:b1:b7:bb:7e:fc:14:d0:a7:36:6d:15:8c:1d:
e1:a4:cc:62:df:50:41:f4:d8:f4:4a:c0:6f:d3:55:68:c2:7c:
76:96:d6:5e:27:75:3c:02:14:5c:9e:0e:13:ce:d6:e0:9f:62:
85:e7:bb:0b:2f:3c:f2:96:ab:b7:bb:85:8b:c0:b3:59:99:7c:
c0:3c:9c:15:08:13:30:1b:b4:a3:de:c4:1d:b9:cc:84:0d:ca:
a3:94:f4:02:ae:3c:2b:52:4f:9b:81:2b:58:81:2a:8c:34:b3:
b7:3c:03:34:36:89:f5:a3:02:43:73:fa:63:96:85:75:ec:04:
2c:bb:c6:42:55:2a:99:9c:96:a5:17:91:6b:a1:1e:31:00:99:
23:7b:71:01:e9:df:c3:12:8e:8d:bb:99:2e:38:c1:2f:e9:ab:
71:64:8c:94:21:07:ac:32:26:2f:01:c8:d8:09:ef:57:56:4b:
59:f9:7b:56:76:d4:42:ea:f5:2e:96:13:ea:ba:2c:09:40:79:
34:71:06:ee:3e:9a:00:54:68:f6:f5:6f:61:d9:23:9e:8e:5e:
0d:b2:b6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcRKx3W+Sl/pOdkSsCgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWJhMjVjNGExYzg2Y2U3NWEyNGI3NmU3ODU1OGM5MmY4
YTAzNzIwHhcNMjUwMTMxMTQwMDI5WhcNMjUwMjAxMTQwMDI5WjAzMTEwLwYDVQQD
EygzYzc3Yjc1N2YyN2ZiY2UzNDQ5ZDFiOTEyYWYwNTlkZWYwZDg2ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvscMzOOgmEAjOqSjRrVrH0H7e2BL
oB5hy5o7FBZ4e9u8Q31JNYkMXYdo5OE4vn0DBQC3Bch217nI91SKYVHy49yskNM4
zDMsp2J1Bh1bf92YKoMXHpYYZ2bRzDjsxkUVPcouvfM3vE/PBhA72zr7VVqm/Yap
D6mcE3FEOIb3YF0fq6dgBDB9081nKKZvkMk3PB3fDvEjwGku27X8GHzwq9NXvIo0
c1JObCZHh/c39jZyN151qMWwoKM2/T9XmIo+h6u7xRE7tUyu8ePCIt6v+tV0PpaT
xtDgNV9PG8eGPkLkutHICYfE0RNlKD1HhJknpBCqGBkvEBrRSylD0yFyNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx3t1fyf7zjRJ0bkSrwWd7w2G3LMB8GA1UdIwQY
MBaAFIProlxKHIbOdaJLdueFWMkvigNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2Mt
NTc3ZmFmODU1Mzk5LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNTYxMmQtZTgxYi00M2JlLWFlN2MtNTc3ZmFmODU1Mzk5
LzEvZy11aVhFb2NoczUxb2t0MjU0Vll5Uy1LQTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwy8tebxS
8XUzXlmXWcwUv6eEm/noO6KMDMcOEzEo7hj25owWw41o9Zixt7t+/BTQpzZtFYwd
4aTMYt9QQfTY9ErAb9NVaMJ8dpbWXid1PAIUXJ4OE87W4J9ihee7Cy888part7uF
i8CzWZl8wDycFQgTMBu0o97EHbnMhA3Ko5T0Aq48K1JPm4ErWIEqjDSztzwDNDaJ
9aMCQ3P6Y5aFdewELLvGQlUqmZyWpReRa6EeMQCZI3txAenfwxKOjbuZLjjBL+mr
cWSMlCEHrDImLwHI2AnvV1ZLWfl7VnbUQur1LpYT6rosCUB5NHEG7j6aAFRo9vVv
Ydkjno5eDbK2+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:30 2025 by rpki-client