Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: b5Rusq4sFmKFWFUP12EfVA+oXx7FbbgwvWSP+ESXegU=
Subject key identifier: 97:D7:65:76:F0:BB:00:35:AE:32:92:2F:F7:DE:E5:03:00:4E:20:1C
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 0194BD174A56A1A9B279D8A2EA3D3F771B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 13F0
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: qNTvMGYHrUfeCQ/uCO+aLxu4kMPC5kjCMSaXTCjl4xQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4a:56:a1:a9:b2:79:d8:a2:ea:3d:3f:77:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=97d76576f0bb0035ae32922ff7dee503004e201c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:dc:9c:55:69:4a:db:32:0e:83:b5:c6:d2:
1f:10:33:34:00:44:98:62:81:23:da:d4:cc:f3:e4:
14:9a:8b:77:45:9d:ba:f6:03:12:86:ff:9f:48:6c:
b8:3d:e0:df:83:d5:7a:db:be:7d:44:f6:77:69:d7:
8e:9f:69:98:58:82:57:b9:b4:98:79:ca:29:01:c3:
9f:fb:b1:e4:9f:41:1e:2a:88:b7:bc:cd:fb:c1:a8:
f2:9a:86:95:83:9e:21:39:3f:45:31:55:17:17:18:
da:db:18:d5:79:39:d9:da:34:04:72:ce:22:67:ba:
c3:70:b7:6e:be:3c:16:05:a5:3d:02:f7:2e:93:91:
58:d0:63:60:da:0b:95:ed:e5:96:42:89:b6:24:62:
14:f1:fa:14:11:1e:b7:e4:06:88:ed:87:f2:0f:cc:
2d:1b:da:c5:01:1c:6b:25:c6:fd:f8:03:c4:c7:81:
6b:2b:8d:ef:37:b2:7d:11:3c:21:06:7e:8c:c5:58:
b1:4a:53:cd:40:2d:a4:97:33:2b:10:2c:ff:af:1c:
54:9d:3a:81:2c:a2:af:6e:01:45:ca:6a:23:77:ee:
c2:50:3c:0d:75:35:d5:04:d1:83:d9:3d:aa:8d:9f:
54:12:e6:30:83:f5:e1:7e:f1:82:85:f8:78:fa:51:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:65:76:F0:BB:00:35:AE:32:92:2F:F7:DE:E5:03:00:4E:20:1C
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d7:e0:f5:f7:ed:8a:0e:42:f1:ef:a0:bc:e7:b1:1f:b6:35:
69:39:d2:09:42:27:76:95:45:06:9d:87:ed:db:43:15:2e:68:
49:3c:0c:2e:d0:c6:2d:c2:66:0f:82:62:de:c8:99:47:63:78:
4a:42:ae:66:9a:f9:a7:7e:15:03:35:43:78:a0:e1:50:1f:88:
96:eb:38:0b:1a:1c:e2:a4:b7:92:bb:12:ac:3b:67:bd:72:ab:
50:f6:bb:83:26:e6:bf:a1:ab:fb:ab:e7:3a:b2:81:ac:8e:5d:
9d:8a:7b:bc:08:ad:d4:99:30:37:ba:27:0c:8d:a9:62:be:86:
0e:00:52:2b:88:7a:78:fc:44:3e:b4:7d:38:e7:31:d9:b0:e6:
bb:1a:9e:d3:2d:63:49:c8:fc:fc:df:86:04:9a:bb:3c:f7:20:
7e:03:0b:b9:16:7a:48:e7:8b:bd:f7:80:a3:2a:35:e1:f4:27:
f3:c4:63:f2:61:9d:6f:10:28:7e:79:13:68:c3:82:bc:c9:8a:
75:f1:df:5f:76:ff:13:9e:84:4e:48:de:25:f8:a1:f8:33:90:
5a:ed:3e:fe:5b:fd:37:ea:c0:a0:99:f5:67:51:53:72:ad:d1:
c6:88:e5:a7:fe:d1:f6:d3:48:d8:75:cf:98:49:3f:86:15:84:
f3:3e:f2:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0pWoamyedii6j0/dxsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZDIzYjFlNmMwN2U2MmFmMmQyZTdlYjZkZTA4OTNiMDkx
MTlhYmIwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
Eyg5N2Q3NjU3NmYwYmIwMDM1YWUzMjkyMmZmN2RlZTUwMzAwNGUyMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTTcnFVpStsyDoO1xtIfEDM0AESY
YoEj2tTM8+QUmot3RZ269gMShv+fSGy4PeDfg9V62759RPZ3adeOn2mYWIJXubSY
ecopAcOf+7Hkn0EeKoi3vM37wajymoaVg54hOT9FMVUXFxja2xjVeTnZ2jQEcs4i
Z7rDcLduvjwWBaU9Avcuk5FY0GNg2guV7eWWQom2JGIU8foUER635AaI7YfyD8wt
G9rFARxrJcb9+APEx4FrK43vN7J9ETwhBn6MxVixSlPNQC2klzMrECz/rxxUnTqB
LKKvbgFFymojd+7CUDwNdTXVBNGD2T2qjZ9UEuYwg/XhfvGChfh4+lEzXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfXZXbwuwA1rjKSL/fe5QMATiAcMB8GA1UdIwQY
MBaAFLjSOx5sB+Yq8tLn623giTsJEZq7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMt
NjkwNjFlZjJjNDk5LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iNzRhYTItMjVlMC00YWQ1LThjYzMtNjkwNjFlZjJjNDk5
LzEvdU5JN0htd0g1aXJ5MHVmcmJlQ0pPd2tSbXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtfg9fft
ig5C8e+gvOexH7Y1aTnSCUIndpVFBp2H7dtDFS5oSTwMLtDGLcJmD4Ji3siZR2N4
SkKuZpr5p34VAzVDeKDhUB+Ilus4Cxoc4qS3krsSrDtnvXKrUPa7gybmv6Gr+6vn
OrKBrI5dnYp7vAit1JkwN7onDI2pYr6GDgBSK4h6ePxEPrR9OOcx2bDmuxqe0y1j
Scj8/N+GBJq7PPcgfgMLuRZ6SOeLvfeAoyo14fQn88Rj8mGdbxAofnkTaMOCvMmK
dfHfX3b/E56ETkjeJfih+DOQWu0+/lv9N+rAoJn1Z1FTcq3Rxojlp/7R9tNI2HXP
mEk/hhWE8z7ykA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:55 2025 by rpki-client