Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
File: UhowB3IjwlxvN9z1lIB3jAtbEGg.mft (raw, json)
Hash identifier: Ox1RFZ3Ktq+cuOFU4hoNuT3lSO35NnG/vvRXJJciLz8=
Subject key identifier: 48:40:D8:31:FA:34:4C:8B:EE:8B:78:79:95:38:90:0D:40:E4:E4:C9
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 0194BC72DC0D3C8669EB5C6A6036D607840F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
Manifest number: 01CC
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: EZLCIrzpeAQOgAoPRAnL9Jsnyns.roa (hash: zKcPyyZHtwlaeSTOg+sebV3wQH2iDfrkeYXwI2IGAm8=)
2: Fe3o1H2NZOXORu_5Q3H36pU8vac.roa (hash: ya8j4YYjDXSgsigCjodSN9yQH9BwQm9h+hSBpcdeQQk=)
3: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (hash: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=)
4: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (hash: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=)
5: UhowB3IjwlxvN9z1lIB3jAtbEGg.crl (hash: 3QIeTzl/Rsv2rqGT8CKF4nw+urzJmiyy7T85hqi2P3I=)
6: gLn6sYEOn9pRWAXsMvSDkoXwul4.roa (hash: Df6Gtp6PcMtkpweTizYMEjfslePoNKL+sfgagrdFwYw=)
7: qJ7iy-90HrN5J6Yv_EGcJYH3P0E.roa (hash: izkvvs6On2oZ0CO9kwq9OoiGecybl4o+ykCCyBRuqwI=)
8: tWQPgt2ULgR-XHuKbKbtwnO0yt4.roa (hash: FTezREACVvewvxdnyIiPFrHTxEp8/emPQ8i+6JCdMYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:0d:3c:86:69:eb:5c:6a:60:36:d6:07:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=4840d831fa344c8bee8b78799538900d40e4e4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:73:95:3c:4e:0a:80:9f:4b:64:9f:55:7a:
a7:2e:4d:ad:7e:68:36:98:72:41:86:5d:0b:58:f1:
3b:c9:b2:88:e3:df:ff:ad:02:38:17:cb:66:c0:ab:
e4:fb:f1:59:48:c1:1b:b9:40:97:4c:39:93:38:c6:
02:ae:f3:44:93:a5:d3:59:0d:84:db:e4:d6:a9:ea:
af:71:89:f7:b4:af:93:f5:f0:4d:fd:90:6b:9a:3c:
3c:f6:51:b6:9a:bd:ba:01:d2:d5:a5:26:cc:9e:e9:
62:b7:ed:9e:09:da:98:39:a1:22:25:2a:03:10:75:
2f:85:7a:bb:c4:13:26:bb:be:21:42:3d:c0:3d:d0:
87:77:92:8f:f8:fb:71:d1:85:72:d0:01:2b:71:c9:
e2:72:95:3c:3a:08:2f:59:5b:9d:47:74:e9:96:28:
20:16:73:dc:56:c1:56:e4:4e:dd:5b:be:7e:be:05:
27:69:bf:1e:57:fb:fd:82:58:51:c3:cf:1a:33:8b:
77:8a:7e:92:6a:9b:1a:9e:39:a4:e2:61:ab:a7:67:
bc:2c:91:31:dd:ac:e9:1f:4f:f0:e6:39:18:3a:d1:
c9:6b:99:38:08:46:c2:1b:ee:b8:81:e4:2c:c1:12:
93:b0:41:ee:f0:32:fb:d8:1f:40:3c:69:ac:23:ec:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:D8:31:FA:34:4C:8B:EE:8B:78:79:95:38:90:0D:40:E4:E4:C9
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:0b:4f:58:af:7d:93:09:69:32:88:6f:c6:37:67:bf:d8:
a9:3b:7a:42:14:9f:50:31:bf:eb:5a:d1:ed:ff:78:e3:1d:ee:
a4:13:a8:1f:f5:a1:5c:80:22:4a:df:62:25:06:a8:5d:e3:a5:
62:4f:f8:7f:ac:e6:2d:41:02:95:97:04:84:3f:1d:67:5b:fd:
a9:9b:2e:96:2a:11:69:fe:88:cd:05:44:0d:55:fc:bc:b8:0f:
e3:c5:c1:af:5a:33:36:09:58:70:f6:68:24:d2:3e:2f:26:84:
de:e2:a7:ce:e1:17:d3:4d:58:f0:e5:10:4b:89:6a:1f:d3:1a:
9b:2b:48:0e:dd:00:e6:54:30:9a:a7:f6:80:7e:89:73:36:6c:
52:1d:27:cb:eb:93:c8:a0:2a:f3:93:4e:5c:b4:32:32:57:8a:
34:f3:f6:bf:a4:d5:33:0c:20:59:d6:bd:7b:91:4e:7e:be:1d:
cc:fd:b8:c3:1b:4f:51:95:dd:b6:e1:05:9f:85:0a:3a:55:90:
ea:45:fd:82:b0:9d:a6:48:04:ef:9f:21:ee:17:a7:cf:87:88:
39:0a:89:02:3a:e0:f5:3b:d0:16:01:23:98:1e:95:9d:ad:27:
2f:90:b1:6b:b9:2a:72:e2:94:ba:75:f0:f6:fc:20:8f:c8:5e:
ac:f2:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:43 2025 by rpki-client