Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier: wcUrLuuFa3RSColk/VkDL3dKcjYB4T/zvuhvtq6W8Jg=
Subject key identifier: 03:05:31:FB:2E:79:30:9C:0C:BB:EA:7C:02:CE:74:B1:22:26:CB:E1
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial: 0194BD17B7051835D5C4D64C6409B20CBF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number: 0539
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: +oPV2l5ZXZkLzxhmDQoKI6GLJaKXK9mGhVUhuIeOVH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:05:18:35:d5:c4:d6:4c:64:09:b2:0c:bf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=030531fb2e79309c0cbbea7c02ce74b12226cbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:8b:2f:24:8c:cd:92:ef:6b:76:8f:77:25:
22:28:5d:68:0c:4f:12:19:54:17:2c:bf:96:7a:c6:
a9:a4:e8:16:31:91:5e:8d:18:37:f1:6d:b5:c8:4f:
29:ce:c9:fa:a5:db:1f:af:b3:cf:4d:60:99:ee:37:
a3:3e:61:be:74:7e:16:fd:fe:1d:7f:09:10:83:91:
44:f5:61:ea:64:4b:42:0d:b0:df:b4:af:99:b5:01:
69:35:3d:d6:88:39:c8:37:50:79:14:ca:94:0c:76:
4c:52:5f:06:7e:5c:a9:a2:fc:f9:42:5f:69:f4:4e:
9c:88:74:ca:78:45:91:ac:ad:76:3a:f5:b4:d3:27:
36:eb:e7:c4:ce:7e:e3:98:74:b0:db:5a:89:b0:10:
fa:77:06:c3:2e:7d:53:cd:b8:22:ac:5f:ef:89:fc:
a7:26:c9:31:a8:1c:0c:e6:28:77:10:b2:9d:f6:93:
b8:b1:74:d2:5c:9c:79:ca:74:93:40:78:7b:a5:c8:
cc:91:de:b6:87:24:b1:d2:31:56:37:9a:0b:21:cd:
5a:59:5a:d8:70:3d:d4:60:34:b7:d5:74:ea:28:0a:
8c:fc:c4:d5:2f:fe:d6:36:bd:7a:d6:f6:01:8f:b6:
2e:52:1d:98:70:11:f6:e3:16:3e:84:56:43:3b:79:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:05:31:FB:2E:79:30:9C:0C:BB:EA:7C:02:CE:74:B1:22:26:CB:E1
X509v3 Authority Key Identifier:
keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:9b:f8:3c:6a:33:9b:46:7a:52:ba:e4:53:72:ed:1c:97:
13:ff:50:62:8b:39:2b:e1:fe:0b:10:57:a2:cf:89:a9:d5:fe:
39:d8:1d:64:0e:c2:d4:44:47:96:43:4b:40:26:33:db:e4:6b:
4a:e7:f8:c9:6d:65:41:54:aa:0f:ff:99:37:8b:a7:8b:ee:08:
33:96:12:f0:5b:fa:89:30:53:5c:d9:bf:9b:c9:21:12:f4:4b:
96:db:4d:5c:21:c5:ea:b5:65:97:77:18:7e:ad:e8:dd:9d:a7:
ab:3e:ae:0e:7c:1a:ab:83:13:26:73:3e:2c:53:bc:ec:e7:d5:
b0:d0:1f:ba:19:de:df:c7:aa:b9:b3:2d:78:cb:1f:eb:26:50:
e2:d2:e1:2d:03:26:f8:16:b0:7e:6c:b9:97:6e:1d:d7:56:22:
03:67:d2:d0:be:d1:66:7c:f7:e0:ee:5b:35:42:64:26:35:bd:
48:0f:7b:af:74:80:16:b6:6e:90:69:4a:92:f1:ce:2b:47:3c:
23:ed:50:fc:9d:93:07:0e:99:ee:59:67:b4:11:a7:ab:bb:01:
5d:f8:d8:b5:e6:b7:f1:83:99:09:99:ef:61:7a:41:1d:20:98:
13:f0:d2:99:7b:29:7c:d6:ef:29:93:d5:1a:4c:3e:56:18:95:
d3:d6:b1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7cFGDXVxNZMZAmyDL8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzY4Y2RhNjVmNjY5NjJjY2I5NjgzZjE1NTBkMTRlNTYx
MDdhMGEwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
EygwMzA1MzFmYjJlNzkzMDljMGNiYmVhN2MwMmNlNzRiMTIyMjZjYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4SLLySMzZLva3aPdyUiKF1oDE8S
GVQXLL+WesappOgWMZFejRg38W21yE8pzsn6pdsfr7PPTWCZ7jejPmG+dH4W/f4d
fwkQg5FE9WHqZEtCDbDftK+ZtQFpNT3WiDnIN1B5FMqUDHZMUl8Gflypovz5Ql9p
9E6ciHTKeEWRrK12OvW00yc26+fEzn7jmHSw21qJsBD6dwbDLn1TzbgirF/vifyn
JskxqBwM5ih3ELKd9pO4sXTSXJx5ynSTQHh7pcjMkd62hySx0jFWN5oLIc1aWVrY
cD3UYDS31XTqKAqM/MTVL/7WNr161vYBj7YuUh2YcBH24xY+hFZDO3m2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMFMfsueTCcDLvqfALOdLEiJsvhMB8GA1UdIwQY
MBaAFLjGjNpl9mlizLloPxVQ0U5WEHoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt
OGY0OGEzNzAyZjkwLzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw
LzEvdU1hTTJtWDJhV0xNdVdnX0ZWRFJUbFlRZWdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8ub+Dxq
M5tGelK65FNy7RyXE/9QYos5K+H+CxBXos+JqdX+OdgdZA7C1ERHlkNLQCYz2+Rr
Suf4yW1lQVSqD/+ZN4uni+4IM5YS8Fv6iTBTXNm/m8khEvRLlttNXCHF6rVll3cY
fq3o3Z2nqz6uDnwaq4MTJnM+LFO87OfVsNAfuhne38equbMteMsf6yZQ4tLhLQMm
+Bawfmy5l24d11YiA2fS0L7RZnz34O5bNUJkJjW9SA97r3SAFrZukGlKkvHOK0c8
I+1Q/J2TBw6Z7llntBGnq7sBXfjYtea38YOZCZnvYXpBHSCYE/DSmXspfNbvKZPV
Gkw+VhiV09axOg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:30 2025 by rpki-client