Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: PhVMw0h8vnFkjJwNsIQ7THdKbjcKgX7ZNhtpch6tS7U=
Subject key identifier: 74:95:BE:E7:65:15:66:02:CD:46:21:4B:9B:3A:CF:29:6A:67:A8:A6
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0194BC0509F2E309603D59655D9C772F6C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 0D4A
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
2: 8tGhbhMGN_POJ7YSYEPEigGTSlM.roa (hash: AyZWf3gcGZsZqBrGbd7j+e4CICThgNWqmUZZB2Q39TY=)
3: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
4: lgWMWWQ2KOYdSDhAlDGQuHNHWdc.roa (hash: P6bpbS3OXvq0UtxdzJFd21jTQ3yjWXkBJ0OIzqYZwM4=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: j7hN7T13vWDrOK11Cds9RGiBeJ8mUOWsMpnxLz7cJiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:f2:e3:09:60:3d:59:65:5d:9c:77:2f:6c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=7495bee765156602cd46214b9b3acf296a67a8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:63:e2:69:af:dd:ba:39:db:81:30:52:cf:
73:bb:94:27:52:59:20:71:11:24:29:a5:f6:d6:7a:
c3:8b:04:64:92:bb:16:2d:5f:08:51:9a:7a:87:f7:
ab:49:02:64:d7:a7:75:c7:d3:ba:08:83:70:18:53:
9d:12:15:99:1b:23:66:f3:02:29:19:80:d3:55:b0:
80:4b:0b:87:b6:22:a2:3d:90:b9:ce:4c:b3:6e:02:
75:35:a4:8f:8f:68:f7:5d:e3:e8:9e:85:8a:c6:32:
11:5b:a8:17:29:ce:78:7a:18:24:00:b3:68:30:e3:
c8:f9:6b:86:02:11:32:9e:50:ef:83:f1:3d:ad:b2:
e7:d1:e4:4c:b2:d8:aa:12:5e:2c:13:60:fa:0d:38:
12:72:71:5a:b6:7a:94:cb:a7:9a:28:ab:c8:52:2f:
69:78:af:c8:dd:f4:1b:4c:67:02:78:7e:9a:67:ab:
50:7c:8b:40:a7:f7:47:fc:59:8f:ec:30:81:04:b2:
ca:cc:67:65:a9:60:07:ed:b1:19:91:5d:18:eb:23:
9d:dc:d4:07:e0:46:0c:6d:ed:d6:2c:53:11:5c:4c:
1a:3d:16:44:22:9e:ce:30:65:04:89:4a:15:dc:d0:
94:22:ed:a9:8c:89:c6:00:c5:5f:03:08:b1:39:bb:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:BE:E7:65:15:66:02:CD:46:21:4B:9B:3A:CF:29:6A:67:A8:A6
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:93:be:bd:fe:3d:b6:f7:d4:e7:8f:0a:78:01:62:82:3f:c0:
b0:7b:04:8f:33:0f:42:ab:25:3d:80:39:51:4f:8e:cf:a0:8e:
24:a1:2f:7a:21:97:ca:02:c6:45:a1:09:f8:c5:fa:d1:c0:b7:
bd:38:13:9f:b6:12:4a:db:9e:88:82:0d:f1:ce:1c:c1:94:c3:
fb:dc:c5:d4:e5:80:d4:92:19:3a:61:6a:89:29:fa:05:cb:bb:
b9:33:45:b0:70:36:5c:fe:e3:75:6a:9f:90:e6:d4:f2:52:bb:
41:5d:ed:5b:27:bf:bf:37:66:d8:f8:f0:2d:7e:54:06:9b:e6:
17:52:6d:b8:6d:b6:4d:ba:ac:28:e0:57:2c:3c:0f:38:a1:0b:
bd:c9:68:e2:49:38:36:29:f5:e0:1d:71:dd:82:1b:7c:a4:8b:
28:ca:20:04:ef:3a:e1:60:ac:0c:5c:9b:35:2b:00:e3:2e:4f:
7a:ba:db:79:d5:c8:76:4a:01:0e:29:66:55:71:45:b0:7f:3b:
1c:fa:0a:25:fe:21:01:8d:80:86:bb:f0:9e:e6:a6:be:15:82:
ea:b2:86:d7:62:c7:7d:dd:7e:fe:62:af:33:ed:0a:38:42:07:
c5:81:d8:43:56:e0:69:0d:31:4f:60:0f:4b:30:29:5e:30:d8:
9c:82:3d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQny4wlgPVllXZx3L2wRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm
MDI0NGYwHhcNMjUwMTMxMTEwMDM0WhcNMjUwMjAxMTEwMDM0WjAzMTEwLwYDVQQD
Eyg3NDk1YmVlNzY1MTU2NjAyY2Q0NjIxNGI5YjNhY2YyOTZhNjdhOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnhj4mmv3bo524EwUs9zu5QnUlkg
cREkKaX21nrDiwRkkrsWLV8IUZp6h/erSQJk16d1x9O6CINwGFOdEhWZGyNm8wIp
GYDTVbCASwuHtiKiPZC5zkyzbgJ1NaSPj2j3XePonoWKxjIRW6gXKc54ehgkALNo
MOPI+WuGAhEynlDvg/E9rbLn0eRMstiqEl4sE2D6DTgScnFatnqUy6eaKKvIUi9p
eK/I3fQbTGcCeH6aZ6tQfItAp/dH/FmP7DCBBLLKzGdlqWAH7bEZkV0Y6yOd3NQH
4EYMbe3WLFMRXEwaPRZEIp7OMGUEiUoV3NCUIu2pjInGAMVfAwixObu34wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSVvudlFWYCzUYhS5s6zylqZ6imMB8GA1UdIwQY
MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct
OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy
LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5O+vf49
tvfU548KeAFigj/AsHsEjzMPQqslPYA5UU+Oz6COJKEveiGXygLGRaEJ+MX60cC3
vTgTn7YSStueiIIN8c4cwZTD+9zF1OWA1JIZOmFqiSn6Bcu7uTNFsHA2XP7jdWqf
kObU8lK7QV3tWye/vzdm2PjwLX5UBpvmF1JtuG22TbqsKOBXLDwPOKELvclo4kk4
Nin14B1x3YIbfKSLKMogBO864WCsDFybNSsA4y5PerrbedXIdkoBDilmVXFFsH87
HPoKJf4hAY2AhrvwnuamvhWC6rKG12LHfd1+/mKvM+0KOEIHxYHYQ1bgaQ0xT2AP
SzApXjDYnII90w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:07 2025 by rpki-client