Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File: uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier: XbBybhN6BjgycEPLM7ujTYMbG4CogqlzExYnZ5lgwow=
Subject key identifier: DA:5C:8C:A1:A2:69:88:45:3F:C0:F1:E5:7A:46:C2:9E:7D:3A:5C:6C
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 0194BD4E9EF52143D4EE236BC50C1FE19395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: DKOXi_z4MSZddtY43K_RvFdLWrA.roa (hash: YzkvxZCaiCcQ2o8QHaxCeoWLOl0t5AZ3W6UkEeHutAk=)
2: Lmvz7UtyX1lXwrZFQxyw10f965g.roa (hash: vCjTy8e/EOIM+a9VJ+a62nLt4xZsnuTV5eHITh46LzI=)
3: f4hIaIpBe2uj_P7WnwZdZXU2kNM.roa (hash: r9inBCbaMnpafZ/V8WyTAmWxF/0oxnkbtMD4hiM0OCk=)
4: fTKnFvJYm1yALDcPlDpSnYgxqpY.roa (hash: 0r+kS5xUC78h1sECkEiq4BPaUDs0csbTxmZyZ6FQa7I=)
5: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: dAeib2g43F2RVdms94iGtp82ky5I5W2VXiWFVJzfwFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:f5:21:43:d4:ee:23:6b:c5:0c:1f:e1:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=da5c8ca1a26988453fc0f1e57a46c29e7d3a5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:fa:8b:2b:e0:fb:75:1f:5c:01:91:f6:3c:
f9:30:34:5d:b7:4f:e8:64:28:8b:06:61:a2:c3:cf:
60:4a:9a:66:5d:81:ae:b4:87:06:5d:80:2d:b0:39:
5f:e1:cd:1f:88:16:ff:ad:f4:67:7b:1c:92:39:44:
f8:3f:59:94:05:cb:f0:64:82:cc:d3:fa:11:e2:6d:
a6:31:08:24:bb:35:93:fb:cd:72:3c:4a:82:e2:a6:
eb:0d:3a:40:23:48:3a:1e:2d:ca:6b:a7:f8:fb:45:
bd:24:d7:f2:e8:52:14:d5:7e:1a:14:bc:26:15:ca:
b0:99:94:1d:29:20:6d:e0:1e:2c:ef:d8:12:7b:69:
57:9d:c6:fe:d4:ce:4b:f1:34:86:b8:4d:d3:ba:a8:
9e:df:81:5a:bf:02:ed:52:f3:3e:39:be:09:2d:23:
d8:80:95:1a:b5:96:c8:05:7c:ca:04:e9:79:15:f0:
ce:07:69:0b:16:79:a7:e9:d2:f7:d3:f4:e4:98:6a:
b9:0b:94:28:cb:6d:59:00:fb:03:45:ff:1c:3e:91:
ba:34:85:fb:0a:67:4d:9b:16:1c:44:fd:1a:ed:45:
f4:75:a6:47:86:15:81:8e:3e:f4:d5:c2:79:9f:14:
53:79:48:f7:3e:9d:32:50:45:ab:23:d8:12:eb:d9:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:8C:A1:A2:69:88:45:3F:C0:F1:E5:7A:46:C2:9E:7D:3A:5C:6C
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:dc:28:e9:9c:77:7c:06:d2:6a:f6:c9:a0:de:a3:c8:1d:
2b:55:c0:0d:0c:1d:3d:2f:e8:ad:8d:2f:23:b1:7a:dc:39:b7:
ff:f6:a7:ac:b6:a7:57:98:74:bd:7d:10:73:06:f3:c0:d0:4d:
44:02:cb:28:a3:23:0a:3e:d3:b2:33:13:63:65:b5:94:df:ed:
e4:0e:52:ce:0c:b5:41:99:30:28:cc:34:1a:28:09:da:46:7a:
07:0d:be:d2:c2:2d:fe:7f:85:be:50:e3:16:b2:94:59:ed:60:
95:12:9a:66:57:d8:a5:95:28:d6:21:14:39:9a:28:43:15:15:
a5:4b:81:93:82:c6:61:fb:a4:25:6c:3f:66:de:07:c5:63:8a:
c3:5e:ac:6b:43:ab:13:f6:a2:d7:00:27:2b:0c:1c:09:d7:b0:
30:e2:1c:d8:a7:a2:72:b1:bc:e8:bc:b4:95:15:ea:be:3a:37:
40:79:52:9a:f1:e6:40:bd:02:0e:87:af:4e:0a:73:ba:5c:e1:
da:b7:ba:e4:46:cd:a2:be:3a:1e:57:28:4b:a0:be:f1:8a:44:
1b:6d:6e:6e:3b:ab:e2:bb:ec:86:db:ef:3c:67:1b:d3:18:84:
c1:39:59:b7:a8:37:e0:9c:10:21:7e:90:b6:10:23:dd:8f:0e:
f8:03:24:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tp71IUPU7iNrxQwf4ZOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NjBiMTQ3NDZjNTg3NTI0NGFlM2I2OTQxNjJlYzZkOGM2
MzI1NWUwHhcNMjUwMTMxMTcwMDMzWhcNMjUwMjAxMTcwMDMzWjAzMTEwLwYDVQQD
EyhkYTVjOGNhMWEyNjk4ODQ1M2ZjMGYxZTU3YTQ2YzI5ZTdkM2E1YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4H6iyvg+3UfXAGR9jz5MDRdt0/o
ZCiLBmGiw89gSppmXYGutIcGXYAtsDlf4c0fiBb/rfRnexySOUT4P1mUBcvwZILM
0/oR4m2mMQgkuzWT+81yPEqC4qbrDTpAI0g6Hi3Ka6f4+0W9JNfy6FIU1X4aFLwm
FcqwmZQdKSBt4B4s79gSe2lXncb+1M5L8TSGuE3Tuqie34FavwLtUvM+Ob4JLSPY
gJUatZbIBXzKBOl5FfDOB2kLFnmn6dL30/TkmGq5C5Qoy21ZAPsDRf8cPpG6NIX7
CmdNmxYcRP0a7UX0daZHhhWBjj701cJ5nxRTeUj3Pp0yUEWrI9gS69mcnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpcjKGiaYhFP8Dx5XpGwp59OlxsMB8GA1UdIwQY
MBaAFLlgsUdGxYdSRK47aUFi7G2MYyVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80NTgwNzgtNDI2ZS00NDQ5LWEyYTkt
MTg4ODJhMjgwOWIyLzEvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80NTgwNzgtNDI2ZS00NDQ5LWEyYTktMTg4ODJhMjgwOWIy
LzEvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1LcKOmc
d3wG0mr2yaDeo8gdK1XADQwdPS/orY0vI7F63Dm3//anrLanV5h0vX0QcwbzwNBN
RALLKKMjCj7TsjMTY2W1lN/t5A5Szgy1QZkwKMw0GigJ2kZ6Bw2+0sIt/n+FvlDj
FrKUWe1glRKaZlfYpZUo1iEUOZooQxUVpUuBk4LGYfukJWw/Zt4HxWOKw16sa0Or
E/ai1wAnKwwcCdewMOIc2KeicrG86Ly0lRXqvjo3QHlSmvHmQL0CDoevTgpzulzh
2re65EbNor46HlcoS6C+8YpEG21ubjur4rvshtvvPGcb0xiEwTlZt6g34JwQIX6Q
thAj3Y8O+AMkqQ==
-----END CERTIFICATE-----
Generated at Thu May 1 12:58:21 2025 by rpki-client