Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: 6R6QPaXHyE1G3Uu0IFMnz1E1DcVt56rqPzL0oOp9ZDc=
Subject key identifier: 9A:64:79:8A:83:B2:C5:DB:F0:BF:63:6C:20:78:83:61:E6:11:C3:3D
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 0194BD176A127EE33279EA27BE32B8DA5FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 0F1E
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: M1itbXmnZylV5aQUWr69aXiCwXg.roa (hash: oXiWWV28pZSLXwASeR4LLqDCm3LTnJMuWV3NYCvwU8Q=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: LnrmHppJM425/L6jRN5iLITIxoWhlIrfOihFQfIlm3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:12:7e:e3:32:79:ea:27:be:32:b8:da:5f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=9a64798a83b2c5dbf0bf636c20788361e611c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:9e:35:d1:61:7b:a0:f8:04:15:5f:a6:ed:
c7:c6:48:25:b1:87:fd:a2:68:db:79:0a:98:76:33:
28:b3:d2:77:70:39:b7:bf:7c:5a:2d:53:9e:93:34:
6d:53:e4:00:68:40:b3:02:4d:07:71:09:0a:14:6b:
97:2d:fc:32:7d:fd:2b:f0:5b:c2:87:fa:b3:f3:a9:
45:c6:fa:4f:73:20:b0:12:d0:e9:01:87:1e:de:ea:
77:4c:ae:6a:79:65:0b:7d:7f:fe:10:37:8b:4c:b9:
e2:12:71:94:b1:03:cd:ef:1d:c7:96:9d:f0:34:5c:
f9:b7:92:22:32:c1:b2:aa:b5:3e:c3:5e:ec:10:7b:
6f:9e:c1:57:46:08:ea:b0:13:cc:99:09:3a:11:a3:
04:f4:c5:ab:03:ee:1d:91:7d:5c:ad:38:27:5c:bb:
30:e7:30:69:60:de:7a:52:e5:2e:fa:9e:52:c8:c3:
4a:45:a3:a8:83:e7:17:81:c0:84:36:81:8e:59:66:
67:87:f1:4f:52:fa:e6:17:4a:ef:ed:ef:6a:a0:21:
38:bf:e7:33:ec:69:8e:0e:9f:c8:19:f8:a2:4f:a1:
33:29:bf:f9:fa:d0:c6:2d:4f:19:7d:96:51:d0:dd:
9f:de:78:3d:90:ad:7f:7b:06:00:d4:02:8e:f4:78:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:79:8A:83:B2:C5:DB:F0:BF:63:6C:20:78:83:61:E6:11:C3:3D
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:81:de:4a:1c:61:f4:84:a6:5f:4c:88:ef:97:29:a5:3f:f9:
e6:e4:47:cc:c9:d4:12:92:1c:ac:27:54:40:01:d9:ec:6a:d9:
0c:8f:39:35:62:e6:82:f1:ea:40:75:a9:ab:84:1f:b4:04:3e:
40:8b:4a:dc:ba:8a:38:a3:e7:34:9d:ba:7e:f1:eb:d4:9d:0c:
56:1b:6c:a5:b7:c9:fa:55:9f:3e:46:81:a8:42:ec:a7:e1:06:
1a:dd:27:76:c8:32:dd:6b:84:d2:c1:1a:72:6c:06:fe:0a:d3:
5a:ca:05:da:81:35:f8:dc:4f:7b:3a:38:06:0a:70:4d:bb:1d:
a4:2c:a9:94:f7:64:2b:41:c4:a7:74:e0:45:7d:15:39:54:00:
db:31:19:c8:c8:95:c6:e3:b5:1c:9d:a6:61:c5:49:f6:8c:6e:
a8:b6:75:89:67:dd:8b:f6:77:d0:51:68:cf:f8:5f:4c:08:94:
03:85:ee:fa:d1:3a:27:cd:be:1a:8c:c6:3f:1f:6a:5d:14:b6:
0c:c4:dc:f6:d4:78:c1:bf:e1:d1:ab:aa:f2:09:05:88:bf:55:
a1:fe:e9:ed:32:ea:67:e7:1c:d2:67:0c:ce:75:95:62:e2:19:
58:18:0d:e7:cd:6f:40:9c:c9:91:f0:52:5b:32:db:d1:25:bc:
d4:de:5e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2oSfuMyeeonvjK42l/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YTg3OTUwMzdkZDQwZjAxODM3M2Y0N2M1OWUwNGEyMTJm
NWEwNTUwHhcNMjUwMTMxMTYwMDE1WhcNMjUwMjAxMTYwMDE1WjAzMTEwLwYDVQQD
Eyg5YTY0Nzk4YTgzYjJjNWRiZjBiZjYzNmMyMDc4ODM2MWU2MTFjMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fmeNdFhe6D4BBVfpu3HxkglsYf9
omjbeQqYdjMos9J3cDm3v3xaLVOekzRtU+QAaECzAk0HcQkKFGuXLfwyff0r8FvC
h/qz86lFxvpPcyCwEtDpAYce3up3TK5qeWULfX/+EDeLTLniEnGUsQPN7x3Hlp3w
NFz5t5IiMsGyqrU+w17sEHtvnsFXRgjqsBPMmQk6EaME9MWrA+4dkX1crTgnXLsw
5zBpYN56UuUu+p5SyMNKRaOog+cXgcCENoGOWWZnh/FPUvrmF0rv7e9qoCE4v+cz
7GmODp/IGfiiT6EzKb/5+tDGLU8ZfZZR0N2f3ng9kK1/ewYA1AKO9HhSGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpkeYqDssXb8L9jbCB4g2HmEcM9MB8GA1UdIwQY
MBaAFLmoeVA33UDwGDc/R8WeBKIS9aBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQt
N2QyMmI3Njg0NDc5LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mM2QzMjYtMTU0ZS00MTJlLWIzNDQtN2QyMmI3Njg0NDc5
LzEvdWFoNVVEZmRRUEFZTno5SHhaNEVvaEwxb0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4HeShxh
9ISmX0yI75cppT/55uRHzMnUEpIcrCdUQAHZ7GrZDI85NWLmgvHqQHWpq4QftAQ+
QItK3LqKOKPnNJ26fvHr1J0MVhtspbfJ+lWfPkaBqELsp+EGGt0ndsgy3WuE0sEa
cmwG/grTWsoF2oE1+NxPezo4BgpwTbsdpCyplPdkK0HEp3TgRX0VOVQA2zEZyMiV
xuO1HJ2mYcVJ9oxuqLZ1iWfdi/Z30FFoz/hfTAiUA4Xu+tE6J82+GozGPx9qXRS2
DMTc9tR4wb/h0auq8gkFiL9Vof7p7TLqZ+cc0mcMznWVYuIZWBgN581vQJzJkfBS
WzLb0SW81N5e1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:45 2025 by rpki-client