Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier: 7wqVHdlm9Rj/8/eq+kSeZTsXOU04GYZDHihqwJNptEA=
Subject key identifier: E6:54:AA:88:67:07:1D:EA:FA:16:6F:A6:44:10:9E:E9:95:D6:C4:C8
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial: 0194BBCE1ED02F2BFC0417EFCEBFC5C11D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number: 01BA
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: 3p4Sfv5MAsjG+qG4K12WceZam0ynuf9W2O/fSRiyYN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1e:d0:2f:2b:fc:04:17:ef:ce:bf:c5:c1:1d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=e654aa8867071deafa166fa644109ee995d6c4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:1a:88:80:da:15:27:22:bb:46:0b:0a:a6:
25:15:7e:25:18:6c:08:3d:0c:2c:91:ed:c5:36:73:
54:36:15:69:e3:76:0e:f1:13:f0:cf:cc:00:b6:c9:
29:43:53:9a:6d:9a:fb:73:08:86:18:ab:6f:70:c2:
d2:8a:62:77:b0:8a:9c:43:b8:3f:89:0c:59:ed:86:
fd:25:1a:ce:a6:71:00:59:7c:8c:5f:08:85:ca:e8:
45:ef:5b:68:44:e2:dd:b4:57:c7:86:e8:92:03:50:
72:05:5f:30:a1:56:0a:7d:31:aa:ab:a5:ba:e5:8a:
4d:e5:41:7b:03:4f:7e:44:43:30:74:26:e3:eb:db:
e3:8e:d1:af:40:a9:96:68:35:e9:19:00:9e:dd:f0:
34:50:86:7c:f3:4a:b2:10:ee:5f:d0:c8:44:33:e6:
b5:17:66:d9:1a:40:da:22:3f:d1:ff:57:cb:32:eb:
d0:9a:c6:86:14:57:96:1c:69:c2:83:97:a6:0d:f0:
d8:a4:95:9d:16:ca:b1:ed:8c:20:79:07:ae:9a:f3:
6f:3f:d7:61:f4:3b:90:f8:4a:4e:fe:b0:83:76:4d:
3e:78:96:a4:eb:4b:bf:ab:32:ca:cb:b1:0a:67:db:
b5:66:90:7e:4c:b4:54:97:5b:ef:74:d6:d2:3f:e3:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:AA:88:67:07:1D:EA:FA:16:6F:A6:44:10:9E:E9:95:D6:C4:C8
X509v3 Authority Key Identifier:
keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:6e:ed:1f:41:5b:6f:55:92:63:17:67:42:0c:75:20:7e:
fe:1b:6c:dd:10:4a:e1:11:19:93:91:45:43:64:0a:d2:e5:d2:
e2:f2:dc:09:af:0c:a2:21:d5:6c:49:46:c4:23:5a:0c:7c:a9:
6e:fa:07:2d:42:06:e4:42:e4:5b:f3:95:98:9e:40:a0:eb:6d:
99:a9:f8:25:50:70:db:e2:c5:c7:99:f1:fc:d3:ec:2a:35:f0:
59:c0:cf:8d:c8:c6:34:25:b1:62:0e:b8:17:8d:58:66:b2:af:
3b:9b:ca:7f:8e:fc:76:43:4b:8b:86:29:c8:25:43:f8:76:4c:
56:21:f1:c4:01:7b:bc:5c:a4:a9:3d:d5:be:f6:31:ad:2b:f6:
af:c3:4e:f9:36:03:41:90:8b:37:d9:94:90:9f:6f:9d:34:66:
32:9b:ef:6f:9f:d6:42:17:3d:3a:4a:03:7f:e5:66:da:66:0a:
a9:71:e5:77:1e:10:ce:4a:5b:d1:80:f4:c3:74:56:4c:be:08:
6d:0c:ed:ba:47:f7:53:d5:d5:09:88:14:bd:26:3f:82:16:21:
8b:2f:49:eb:e5:36:36:02:af:01:cb:21:04:4c:3e:de:7b:70:
cb:00:4a:ea:23:44:92:df:8a:6c:63:2a:cc:27:37:da:58:71:
ed:f6:42:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zh7QLyv8BBfvzr/FwR1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx
ODMyNDkwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
EyhlNjU0YWE4ODY3MDcxZGVhZmExNjZmYTY0NDEwOWVlOTk1ZDZjNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwcaiIDaFSciu0YLCqYlFX4lGGwI
PQwske3FNnNUNhVp43YO8RPwz8wAtskpQ1OabZr7cwiGGKtvcMLSimJ3sIqcQ7g/
iQxZ7Yb9JRrOpnEAWXyMXwiFyuhF71toROLdtFfHhuiSA1ByBV8woVYKfTGqq6W6
5YpN5UF7A09+REMwdCbj69vjjtGvQKmWaDXpGQCe3fA0UIZ880qyEO5f0MhEM+a1
F2bZGkDaIj/R/1fLMuvQmsaGFFeWHGnCg5emDfDYpJWdFsqx7YwgeQeumvNvP9dh
9DuQ+EpO/rCDdk0+eJak60u/qzLKy7EKZ9u1ZpB+TLRUl1vvdNbSP+N4JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZUqohnBx3q+hZvpkQQnumV1sTIMB8GA1UdIwQY
MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt
ODdhNjMzM2Q2ZTY0LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0
LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaxu7R9B
W29VkmMXZ0IMdSB+/hts3RBK4REZk5FFQ2QK0uXS4vLcCa8MoiHVbElGxCNaDHyp
bvoHLUIG5ELkW/OVmJ5AoOttman4JVBw2+LFx5nx/NPsKjXwWcDPjcjGNCWxYg64
F41YZrKvO5vKf478dkNLi4YpyCVD+HZMViHxxAF7vFykqT3VvvYxrSv2r8NO+TYD
QZCLN9mUkJ9vnTRmMpvvb5/WQhc9OkoDf+Vm2mYKqXHldx4Qzkpb0YD0w3RWTL4I
bQztukf3U9XVCYgUvSY/ghYhiy9J6+U2NgKvAcshBEw+3ntwywBK6iNEkt+KbGMq
zCc32lhx7fZClw==
-----END CERTIFICATE-----
Generated at Thu May 1 10:05:56 2025 by rpki-client