Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
File: uEWIWKHL3onJKQYPQvKw35JNTik.mft (raw, json)
Hash identifier: b6WaMMX/idvMHBQor7wJ3GLcmpys5KRUP+l0p7biJ/g=
Subject key identifier: D1:6D:46:93:6D:B9:83:9B:B7:9E:6D:7D:9C:AD:1D:6E:E1:8E:37:3F
Authority key identifier: B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
Certificate issuer: /CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Certificate serial: 0194BC04D8DC1DB4655E2196E9188C03D687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
Manifest number: 08AA
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: TGrXflCdfRfW3fIuk1M0sun1vvs.roa (hash: alNQcjpWXoWXc70x5wuOV0VaoVsG9NOJ3xbbbXJM7RE=)
2: uEWIWKHL3onJKQYPQvKw35JNTik.crl (hash: MVwik03FV+JG4YXMjLMYuy6ZD6BbTN9nVjur4KBSyv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:dc:1d:b4:65:5e:21:96:e9:18:8c:03:d6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8458858a1cbde89c929060f42f2b0df924d4e29
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=d16d46936db9839bb79e6d7d9cad1d6ee18e373f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:c4:51:dc:b2:8f:32:ff:7c:40:f9:a8:28:
64:11:61:f7:6c:df:96:45:19:70:8c:df:96:23:d6:
59:9d:1b:49:b6:d5:bb:6d:35:f5:76:19:4c:f2:df:
55:94:e4:75:41:eb:9d:31:b6:ae:83:4d:7a:6d:c8:
4a:71:9e:87:46:71:ea:02:7b:b8:9d:93:41:45:c4:
13:aa:76:e1:21:79:e9:e4:3b:24:87:a9:74:d6:de:
f8:27:e3:f5:7d:4f:0c:c0:29:ca:64:d3:80:c6:3d:
3f:86:9e:94:fa:ff:83:c4:72:e1:3c:65:73:f7:bb:
6d:54:72:ce:3e:4c:59:ed:79:7b:8c:77:8e:1a:4f:
44:06:fc:e4:0b:47:47:b5:05:b4:9c:32:da:07:23:
55:d4:ef:f2:57:b2:b6:cc:c8:b4:bf:ea:a9:08:ce:
fc:ed:f1:af:a3:33:cc:22:47:39:53:6a:8d:4f:74:
06:49:d6:73:71:88:cc:34:2e:c3:81:82:7b:73:55:
62:8a:ce:11:49:dc:e6:7d:a5:67:ad:b8:fc:a7:99:
28:59:31:92:f1:f8:f3:03:66:00:8d:7e:4d:3e:e2:
11:6b:2d:7b:77:e7:6e:98:35:a4:23:a7:75:33:3f:
92:fa:4a:8e:6a:32:f7:21:07:be:5b:93:11:7c:ac:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:46:93:6D:B9:83:9B:B7:9E:6D:7D:9C:AD:1D:6E:E1:8E:37:3F
X509v3 Authority Key Identifier:
keyid:B8:45:88:58:A1:CB:DE:89:C9:29:06:0F:42:F2:B0:DF:92:4D:4E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEWIWKHL3onJKQYPQvKw35JNTik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e674fb-2683-4cf4-967b-b7c67eacc3a5/1/uEWIWKHL3onJKQYPQvKw35JNTik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8f:f0:14:ed:bd:8c:09:4d:e3:e3:46:77:59:2e:28:d2:26:
20:6a:01:57:b2:61:12:9a:3b:cf:c9:80:b1:5b:c9:b2:77:58:
78:d1:61:df:9c:9c:7e:54:92:9c:f7:8d:06:1d:20:d6:3a:e2:
ce:59:55:94:14:6c:c6:a7:82:81:b1:28:49:51:84:96:c7:60:
5a:2d:18:0c:da:6c:fa:89:02:5b:68:30:99:61:3e:a2:74:c0:
f5:4a:27:e3:d2:bb:47:cf:de:7e:2c:91:b4:ee:8f:51:02:0f:
12:4e:87:a1:f5:56:b7:db:ac:52:22:42:b8:f5:46:24:ec:d5:
44:d2:9d:64:91:21:f3:01:1c:98:f7:35:57:36:9f:5c:75:a7:
0d:1a:2e:01:4f:4a:5d:c7:85:09:72:b4:6e:35:3b:47:98:83:
f1:35:af:4c:2b:dc:5c:8f:29:4e:67:62:92:f3:78:ae:ae:01:
9f:97:04:31:3e:f9:80:b2:e3:94:54:6e:0d:0c:e5:4b:81:8f:
1f:b1:08:b5:d4:8e:0d:1b:70:52:e7:10:1d:48:c3:ed:05:39:
95:0c:75:58:f5:ca:64:15:e6:33:74:9c:60:81:7d:79:96:cd:
86:57:aa:ce:24:49:fd:40:0e:49:bf:61:51:bd:75:c5:88:e2:
7a:63:ba:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNjcHbRlXiGW6RiMA9aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDU4ODU4YTFjYmRlODljOTI5MDYwZjQyZjJiMGRmOTI0
ZDRlMjkwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
EyhkMTZkNDY5MzZkYjk4MzliYjc5ZTZkN2Q5Y2FkMWQ2ZWUxOGUzNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHDEUdyyjzL/fED5qChkEWH3bN+W
RRlwjN+WI9ZZnRtJttW7bTX1dhlM8t9VlOR1QeudMbaug016bchKcZ6HRnHqAnu4
nZNBRcQTqnbhIXnp5Dskh6l01t74J+P1fU8MwCnKZNOAxj0/hp6U+v+DxHLhPGVz
97ttVHLOPkxZ7Xl7jHeOGk9EBvzkC0dHtQW0nDLaByNV1O/yV7K2zMi0v+qpCM78
7fGvozPMIkc5U2qNT3QGSdZzcYjMNC7DgYJ7c1Viis4RSdzmfaVnrbj8p5koWTGS
8fjzA2YAjX5NPuIRay17d+dumDWkI6d1Mz+S+kqOajL3IQe+W5MRfKyAwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFtRpNtuYObt55tfZytHW7hjjc/MB8GA1UdIwQY
MBaAFLhFiFihy96JySkGD0LysN+STU4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2It
YjdjNjdlYWNjM2E1LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNjc0ZmItMjY4My00Y2Y0LTk2N2ItYjdjNjdlYWNjM2E1
LzEvdUVXSVdLSEwzb25KS1FZUFF2S3czNUpOVGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuI/wFO29
jAlN4+NGd1kuKNImIGoBV7JhEpo7z8mAsVvJsndYeNFh35ycflSSnPeNBh0g1jri
zllVlBRsxqeCgbEoSVGElsdgWi0YDNps+okCW2gwmWE+onTA9Uon49K7R8/efiyR
tO6PUQIPEk6HofVWt9usUiJCuPVGJOzVRNKdZJEh8wEcmPc1VzafXHWnDRouAU9K
XceFCXK0bjU7R5iD8TWvTCvcXI8pTmdikvN4rq4Bn5cEMT75gLLjlFRuDQzlS4GP
H7EItdSODRtwUucQHUjD7QU5lQx1WPXKZBXmM3ScYIF9eZbNhleqziRJ/UAOSb9h
Ub11xYjiemO6JQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:32 2025 by rpki-client