Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: WAENp+DNXnIXILE4wTNAXrCBCQRWP+nzOkcjL1XAFWA=
Subject key identifier: D0:92:EC:6B:8C:B2:D3:87:FE:1B:F9:23:2A:EC:34:37:12:66:D8:AC
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0194BD17B86F0481248E601A8F2C4F2ED7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 12DB
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: xyjXyivID1Dc9BwhOlEWvOzSeE4WAg+nDe0ED+jM/WY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:6f:04:81:24:8e:60:1a:8f:2c:4f:2e:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=d092ec6b8cb2d387fe1bf9232aec34371266d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:a7:7b:c0:80:99:3b:b3:09:3d:98:82:ff:
49:71:e8:00:10:b8:4e:9a:a8:44:93:4f:d0:bc:70:
19:99:4a:f2:37:60:06:fc:4c:e0:41:cd:f3:1c:a5:
ea:f6:b5:75:45:ce:d3:15:00:5b:e2:dd:40:fc:d8:
de:00:e7:bf:a9:45:e1:e4:5a:3c:83:a4:89:0d:8e:
0b:23:99:f8:80:a3:0f:b6:e5:57:01:a8:f7:9e:3d:
37:84:36:1c:f3:52:80:d4:61:d4:80:c6:b0:dd:31:
66:df:42:30:2c:49:6f:78:e2:60:eb:16:91:8b:35:
f2:06:05:cf:53:1e:9a:d1:ae:9b:b7:b3:52:ac:89:
7d:04:9c:12:57:45:16:2f:24:d8:f9:ed:55:95:a3:
ef:50:11:0d:a4:b6:ac:c3:5f:8f:d1:84:f9:af:08:
15:0a:c4:e7:a0:07:a9:0f:0c:c1:9f:95:2b:f4:58:
68:bd:e9:ad:29:e2:00:76:5a:2d:10:b7:f8:c2:7d:
c4:9c:78:a0:f9:1e:97:f1:cf:6e:b3:fa:09:e9:ab:
05:09:f1:cf:75:b4:14:fc:b4:99:7c:47:5f:ab:84:
d5:e0:c6:1b:a1:2a:22:05:bd:25:d2:3f:6a:ab:66:
83:bd:ac:e7:0f:f5:ae:28:c5:e4:90:88:7e:63:09:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:EC:6B:8C:B2:D3:87:FE:1B:F9:23:2A:EC:34:37:12:66:D8:AC
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ad:e9:03:45:13:48:ce:8f:fd:12:07:ed:26:56:6c:85:d7:
58:91:de:71:eb:16:6b:17:9b:d8:d6:19:dc:68:25:88:61:79:
2e:4e:7c:0d:c7:ab:6d:d6:05:35:65:5f:c9:59:2c:5a:af:7e:
d3:ce:a5:6b:52:12:e6:39:85:91:57:ab:96:07:f5:ae:a1:f9:
83:20:fa:2c:5f:55:bb:30:e3:25:8e:5a:cf:69:ab:4c:a6:23:
e1:b8:2c:b2:7b:bd:6b:d7:d3:e4:9d:e2:f6:14:a1:59:41:d4:
1b:fd:4c:1b:43:35:1c:11:93:21:97:98:59:bb:14:79:2c:8c:
9c:b9:68:72:05:d0:dc:4d:f9:80:07:57:1c:98:78:d0:ae:ce:
32:f5:9a:a9:1a:d1:f7:54:52:22:bd:9d:b3:6c:14:5a:d5:53:
ca:08:13:5d:75:4d:92:ed:ec:00:96:ef:fe:6d:6c:32:01:60:
a0:58:33:9d:86:9e:25:f1:de:c5:90:4a:f1:df:ec:b4:ee:d4:
c4:b6:40:2e:f6:d0:33:1d:f4:21:d7:2c:ab:51:b5:c2:34:63:
47:af:22:bf:1a:57:4d:79:e7:9b:e6:b9:1d:9b:a7:32:02:19:
2b:cc:ca:ec:03:71:d6:a3:e0:83:45:69:b1:e3:30:cb:e3:ce:
17:1c:7a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7hvBIEkjmAajyxPLtfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy
MGI0YzQwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
EyhkMDkyZWM2YjhjYjJkMzg3ZmUxYmY5MjMyYWVjMzQzNzEyNjZkOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZane8CAmTuzCT2Ygv9JcegAELhO
mqhEk0/QvHAZmUryN2AG/EzgQc3zHKXq9rV1Rc7TFQBb4t1A/NjeAOe/qUXh5Fo8
g6SJDY4LI5n4gKMPtuVXAaj3nj03hDYc81KA1GHUgMaw3TFm30IwLElveOJg6xaR
izXyBgXPUx6a0a6bt7NSrIl9BJwSV0UWLyTY+e1VlaPvUBENpLasw1+P0YT5rwgV
CsTnoAepDwzBn5Ur9FhovemtKeIAdlotELf4wn3EnHig+R6X8c9us/oJ6asFCfHP
dbQU/LSZfEdfq4TV4MYboSoiBb0l0j9qq2aDvaznD/WuKMXkkIh+YwkSTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCS7GuMstOH/hv5IyrsNDcSZtisMB8GA1UdIwQY
MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt
ZTNlNWZhMzZiYjJmLzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm
LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq3pA0UT
SM6P/RIH7SZWbIXXWJHecesWaxeb2NYZ3GgliGF5Lk58DcerbdYFNWVfyVksWq9+
086la1IS5jmFkVerlgf1rqH5gyD6LF9VuzDjJY5az2mrTKYj4bgssnu9a9fT5J3i
9hShWUHUG/1MG0M1HBGTIZeYWbsUeSyMnLlocgXQ3E35gAdXHJh40K7OMvWaqRrR
91RSIr2ds2wUWtVTyggTXXVNku3sAJbv/m1sMgFgoFgznYaeJfHexZBK8d/stO7U
xLZALvbQMx30Idcsq1G1wjRjR68ivxpXTXnnm+a5HZunMgIZK8zK7ANx1qPgg0Vp
seMwy+POFxx6WA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:49 2025 by rpki-client