Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: Ipz0IkFlMk6cD9576yAv1NFOgVCcS+f+4VAVB2LDFn8=
Subject key identifier: 13:E1:D9:B3:3C:8D:05:4D:F7:6E:9D:CA:2C:87:6C:70:26:50:28:1B
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 0194BCAA1AF3DF9601B6FA26A1E6C80D92D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 05F2
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 8wvKaNZPMB6fonw1NrYfUg2gnbk.roa (hash: 3qdVN8DevKvufLzN2R8DX4QYa4MJxDLMUWeWlDqsEhs=)
2: ERoj6kZ7f09LojIbK7F6-iIQ3Q0.roa (hash: vYYSfaPpbNWHfZROyqOxGskbcYsJiw4rOn2tsPINhLk=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: uRSs+/EnLFf0CkkLvuLWTTleQsuPZl/a2bGkIUaP61I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1a:f3:df:96:01:b6:fa:26:a1:e6:c8:0d:92:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=13e1d9b33c8d054df76e9dca2c876c702650281b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:60:9d:74:32:63:fd:a9:e8:86:8c:50:fa:
b6:29:47:cf:6b:07:5e:e0:92:ca:ac:d2:a0:3d:bb:
fd:9b:02:62:92:64:d8:9f:a0:0e:fc:f1:76:70:cd:
16:24:97:3d:ed:6c:3d:57:64:dc:ef:3a:5d:4a:a7:
8e:35:5d:f9:48:35:71:6b:a3:ad:5b:37:a5:3a:fe:
22:69:c8:42:79:fc:05:7f:b3:62:43:22:a7:d1:cf:
e3:5b:7e:89:50:d3:5e:d3:b6:05:2e:0f:3b:dc:e3:
87:1e:7c:d6:6e:83:2e:71:44:af:4d:e7:fb:fd:12:
f9:ba:e4:67:5c:9e:aa:6f:b1:51:53:92:97:5c:89:
86:5e:01:58:50:53:30:99:7f:af:a6:15:0a:15:73:
cb:c9:39:bc:53:f8:e3:95:c7:ff:e5:d0:2a:af:22:
19:e3:95:36:89:e6:3a:ef:84:30:b3:07:80:06:4d:
ab:e7:60:e8:cd:d3:5b:ec:ed:1a:57:54:d0:e3:33:
8a:98:95:d2:70:a2:f9:06:a0:05:11:9b:cf:71:99:
ef:0a:52:23:23:24:08:5c:66:c3:b5:34:66:ff:f3:
20:d9:d1:ff:11:d1:13:e9:b2:9b:a6:8f:b5:06:49:
f5:ee:bb:19:5f:2f:1d:cf:96:bc:82:7d:7a:c0:61:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E1:D9:B3:3C:8D:05:4D:F7:6E:9D:CA:2C:87:6C:70:26:50:28:1B
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e4:39:9f:e8:80:ed:77:03:88:1a:69:cf:70:5a:fb:d9:0d:
57:6c:94:bd:5a:0e:59:52:54:e4:69:1d:75:9f:f4:e7:25:f5:
b5:e8:09:7c:e0:4e:b6:67:b2:a0:a9:40:80:87:00:32:22:a7:
21:cb:bf:37:c1:69:47:c5:5f:03:b8:1f:3e:28:a1:0f:d3:a4:
5c:9e:d9:16:fc:f4:9b:f9:6c:f4:ef:68:4a:f7:00:37:32:82:
86:83:f2:9e:1d:24:4b:36:26:73:7f:4e:6d:23:82:b4:05:6c:
0e:a8:c7:07:9c:28:11:83:36:02:b5:ad:3c:22:9b:bf:95:0e:
0e:d9:28:ef:e5:55:1e:f1:2d:6a:83:af:59:8f:f2:ed:a7:f7:
5f:d5:d5:f9:41:00:e9:ac:7f:4b:a2:00:9f:fb:ea:37:6c:6f:
09:6f:d5:f1:73:dd:d8:ea:41:84:27:de:f7:b6:50:45:6b:c6:
4f:24:e2:69:6c:40:0d:13:3e:70:43:06:8b:f8:4f:bf:55:1d:
f2:27:74:6e:c7:cd:31:88:47:cc:5b:f4:58:79:e1:cc:74:22:
33:5c:7e:66:f3:17:cc:6a:82:5a:da:8d:49:62:e3:cb:e8:b6:
12:3d:46:b7:fa:4e:4f:e6:8f:d4:04:9a:3f:89:c2:3b:52:83:
9d:94:fc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhrz35YBtvomoebIDZLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw
MDI4NjMwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
EygxM2UxZDliMzNjOGQwNTRkZjc2ZTlkY2EyYzg3NmM3MDI2NTAyODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqChgnXQyY/2p6IaMUPq2KUfPawde
4JLKrNKgPbv9mwJikmTYn6AO/PF2cM0WJJc97Ww9V2Tc7zpdSqeONV35SDVxa6Ot
WzelOv4iachCefwFf7NiQyKn0c/jW36JUNNe07YFLg873OOHHnzWboMucUSvTef7
/RL5uuRnXJ6qb7FRU5KXXImGXgFYUFMwmX+vphUKFXPLyTm8U/jjlcf/5dAqryIZ
45U2ieY674QwsweABk2r52DozdNb7O0aV1TQ4zOKmJXScKL5BqAFEZvPcZnvClIj
IyQIXGbDtTRm//Mg2dH/EdET6bKbpo+1Bkn17rsZXy8dz5a8gn16wGHHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPh2bM8jQVN926dyiyHbHAmUCgbMB8GA1UdIwQY
MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct
MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4
LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+Q5n+iA
7XcDiBppz3Ba+9kNV2yUvVoOWVJU5GkddZ/05yX1tegJfOBOtmeyoKlAgIcAMiKn
Icu/N8FpR8VfA7gfPiihD9OkXJ7ZFvz0m/ls9O9oSvcANzKChoPynh0kSzYmc39O
bSOCtAVsDqjHB5woEYM2ArWtPCKbv5UODtko7+VVHvEtaoOvWY/y7af3X9XV+UEA
6ax/S6IAn/vqN2xvCW/V8XPd2OpBhCfe97ZQRWvGTyTiaWxADRM+cEMGi/hPv1Ud
8id0bsfNMYhHzFv0WHnhzHQiM1x+ZvMXzGqCWtqNSWLjy+i2Ej1Gt/pOT+aP1ASa
P4nCO1KDnZT8gw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:31 2025 by rpki-client