Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: acdunLYbgH386Oh70nZturR5mlJpEzdY5am6JIScnC0=
Subject key identifier: 8D:8E:9A:18:EA:2D:19:7F:5D:98:4E:F8:1C:76:E9:EC:EA:A8:91:D5
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0195DFD96698D84F473B35EC52F3D84110DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 14D1
Signing time: Sat 29 Mar 2025 03:02:01 +0000
Manifest this update: Sat 29 Mar 2025 03:02:01 +0000
Manifest next update: Sun 30 Mar 2025 03:02:01 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: gs3yAXlHcSX10Jnl3iXGqxL1gh+X1+nDM7mYTDg+cIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:66:98:d8:4f:47:3b:35:ec:52:f3:d8:41:10:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 29 03:02:01 2025 GMT
Not After : Mar 30 03:02:01 2025 GMT
Subject: CN=8d8e9a18ea2d197f5d984ef81c76e9eceaa891d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:66:39:b6:0b:b9:ab:23:12:2a:c8:b2:31:
de:ad:b6:30:90:9a:07:a7:e6:44:25:02:6b:15:83:
05:a4:d0:4a:d4:e9:13:fc:c8:0d:6f:b7:6a:d7:08:
c1:50:16:38:76:d9:4a:f1:a1:a8:62:d1:6d:4e:64:
55:87:f2:c6:84:00:8a:27:28:3e:ab:8c:4f:91:ba:
63:55:11:dc:26:9e:b5:dc:a3:5d:90:d9:cc:35:7b:
84:10:99:4f:9c:8d:56:d9:40:34:b3:e1:ff:50:9f:
90:bc:18:2f:60:2d:02:39:fe:c5:63:23:c1:82:b9:
cc:f7:96:be:5f:ef:4a:4f:37:ab:ae:a2:cf:38:f3:
4e:62:7a:b6:a9:cc:b1:42:a1:53:38:5f:26:44:c4:
9b:69:f2:74:51:dc:d2:df:a3:87:bd:f8:29:be:37:
45:b7:f2:5e:6b:35:11:ad:bb:6c:23:e6:a9:e1:1f:
09:7a:e4:4d:bc:27:42:0a:72:b4:80:e3:e7:6c:48:
30:1f:aa:4a:86:ef:f8:bd:f3:47:88:1f:da:49:73:
24:65:da:b2:3e:5e:c1:07:f1:8b:82:42:15:1b:e7:
7d:29:68:56:9c:7b:d3:49:06:1e:92:4a:b5:5f:43:
37:f2:bd:d7:3d:b9:6c:71:8e:1d:cf:ca:be:17:1e:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8E:9A:18:EA:2D:19:7F:5D:98:4E:F8:1C:76:E9:EC:EA:A8:91:D5
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c3:a8:64:28:61:db:a6:59:c7:28:ad:2d:91:56:d8:29:ff:
17:a0:f2:80:10:f5:ec:1e:92:8d:17:a1:d9:dd:78:fc:d1:99:
48:a3:12:e4:08:a7:68:17:12:36:ab:30:b6:cb:11:69:09:21:
87:8e:c3:0e:83:9e:36:6a:a4:7f:2e:e8:7a:4f:bc:9b:9f:85:
a0:27:0a:7a:df:ba:73:e2:89:28:99:2a:70:a0:8e:ef:f7:2f:
70:40:9a:c8:a0:0f:85:1c:0e:5b:59:47:b3:98:2d:1e:6c:a4:
2a:19:ed:97:ee:c5:b6:6e:60:15:d9:c1:c7:5e:08:58:10:11:
65:63:8c:64:a3:68:5d:66:2d:e9:59:45:d7:ed:62:65:5f:43:
88:d1:7b:3e:72:d5:5f:a7:a7:90:29:d6:65:51:ba:5f:a2:67:
96:75:11:1b:23:59:a6:f1:86:d6:08:90:67:19:18:97:ae:b1:
2e:03:ed:b8:a0:05:ab:f1:1f:0c:86:81:9a:67:7b:9e:bc:99:
9d:28:a2:08:a2:5a:b6:c2:64:18:fb:d6:e0:8b:90:eb:9c:7a:
15:17:59:d8:b9:34:1c:12:e7:a0:d2:c6:8c:55:4c:f1:40:50:
4b:e5:e9:a4:58:53:da:87:7e:0d:fa:f3:68:2d:90:89:63:ab:
0b:e4:e8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2WaY2E9HOzXsUvPYQRDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjUwMzI5MDMwMjAxWhcNMjUwMzMwMDMwMjAxWjAzMTEwLwYDVQQD
Eyg4ZDhlOWExOGVhMmQxOTdmNWQ5ODRlZjgxYzc2ZTllY2VhYTg5MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD9mObYLuasjEirIsjHerbYwkJoH
p+ZEJQJrFYMFpNBK1OkT/MgNb7dq1wjBUBY4dtlK8aGoYtFtTmRVh/LGhACKJyg+
q4xPkbpjVRHcJp613KNdkNnMNXuEEJlPnI1W2UA0s+H/UJ+QvBgvYC0COf7FYyPB
grnM95a+X+9KTzerrqLPOPNOYnq2qcyxQqFTOF8mRMSbafJ0UdzS36OHvfgpvjdF
t/JeazURrbtsI+ap4R8JeuRNvCdCCnK0gOPnbEgwH6pKhu/4vfNHiB/aSXMkZdqy
Pl7BB/GLgkIVG+d9KWhWnHvTSQYekkq1X0M38r3XPblscY4dz8q+Fx4D7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2OmhjqLRl/XZhO+Bx26ezqqJHVMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4MOoZChh
26ZZxyitLZFW2Cn/F6DygBD17B6SjReh2d14/NGZSKMS5AinaBcSNqswtssRaQkh
h47DDoOeNmqkfy7oek+8m5+FoCcKet+6c+KJKJkqcKCO7/cvcECayKAPhRwOW1lH
s5gtHmykKhntl+7Ftm5gFdnBx14IWBARZWOMZKNoXWYt6VlF1+1iZV9DiNF7PnLV
X6enkCnWZVG6X6JnlnURGyNZpvGG1giQZxkYl66xLgPtuKAFq/EfDIaBmmd7nryZ
nSiiCKJatsJkGPvW4IuQ65x6FRdZ2Lk0HBLnoNLGjFVM8UBQS+XppFhT2od+Dfrz
aC2QiWOrC+To3g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:28 2025 by rpki-client