Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier: 7sbEDly0/qMSyqMARY6Rcib47kRX16hh16UqqdPkIxU=
Subject key identifier: 92:14:EF:D5:B1:EA:28:D8:A9:7B:68:12:D9:2B:2A:FE:13:EB:95:B7
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial: 0194BBCE4BE984B4266A753117DD9BE3270C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number: 0384
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: aEGMv1zeXqLRSQYAfJR2evk9oExKo43qIBnh9sXKpZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4b:e9:84:b4:26:6a:75:31:17:dd:9b:e3:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=9214efd5b1ea28d8a97b6812d92b2afe13eb95b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:5d:fe:b9:cb:17:24:55:a5:e2:e9:91:07:
21:8f:cf:e2:35:3e:dd:aa:d1:38:4e:cf:6b:b1:6c:
42:a1:f8:a7:fa:d1:fb:1d:e6:2d:7c:18:aa:89:a4:
4d:cc:bc:eb:e4:c5:83:12:be:18:b6:e2:ad:f8:96:
1d:fc:20:5f:e0:ad:a7:c7:ea:ed:97:3c:b0:ee:72:
04:fa:ce:44:b6:2d:ee:43:f9:fd:2c:b8:16:4d:77:
75:5a:cf:66:4a:d9:8b:8e:96:b9:db:2b:ae:fc:18:
80:36:a3:89:33:9f:17:d1:8b:51:53:24:64:b2:ad:
c5:f3:69:fe:b8:be:8b:34:76:12:fd:71:8b:64:6f:
53:40:1e:6d:0f:86:29:0a:fa:6c:34:1b:09:c2:ae:
19:0a:32:c2:e5:a4:48:2b:70:b9:a0:01:da:b6:fe:
71:65:57:83:17:27:cc:b6:e5:be:c1:7d:bc:00:69:
cb:59:06:c7:01:4c:eb:f3:13:3a:ac:54:ef:ab:64:
2d:fd:0d:4b:3f:24:46:c1:9c:7b:b7:0c:d5:d5:49:
8b:fc:68:99:91:fa:06:ad:98:79:69:75:59:dd:03:
47:a4:09:61:10:c6:23:51:1a:2a:81:e5:e8:be:d6:
34:ce:db:45:6b:61:3b:56:c6:c1:ba:4e:bb:31:10:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:EF:D5:B1:EA:28:D8:A9:7B:68:12:D9:2B:2A:FE:13:EB:95:B7
X509v3 Authority Key Identifier:
keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b3:87:9e:72:37:36:8d:1d:39:ef:f9:f9:a1:be:59:cd:36:
b2:25:9c:ec:92:cb:22:40:2c:ad:59:63:ad:a0:61:b3:38:ee:
65:1b:e7:a5:7b:bc:cd:a7:a0:fe:03:52:03:77:81:4a:2b:3e:
23:80:3a:1f:55:cd:06:32:4c:7b:d8:f7:df:f5:3c:2b:72:7f:
c3:41:5b:b4:d3:2c:d4:b3:fc:fa:b8:f1:c2:84:1b:dc:a4:92:
d7:5d:4f:9d:9f:24:06:7b:2f:ba:c5:2b:f3:35:a6:f8:79:41:
af:19:ee:3f:3e:a5:77:a6:de:c8:d0:bb:de:9a:2f:cd:62:14:
83:fb:be:e3:de:dc:81:84:ec:1c:fa:0b:2b:14:3c:b0:94:03:
70:26:e4:64:4c:e2:2d:b2:bb:eb:40:1f:0f:df:c8:10:7c:c4:
8a:c7:3a:cf:03:9c:67:a5:2f:a5:26:ad:c1:d9:dd:85:4e:0f:
06:bd:2b:11:97:84:2d:e9:fc:84:2a:75:ab:25:4c:06:80:e2:
26:90:14:8b:f8:0a:58:36:cc:ac:54:60:b1:7c:b1:46:39:e3:
cc:c0:c6:3d:e6:f2:da:04:e8:69:6d:fd:4d:18:f2:a8:44:5c:
6a:89:0c:b7:e3:50:3c:47:52:54:dc:48:f9:fb:4a:6d:ed:b2:
cd:60:78:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkvphLQmanUxF92b4ycMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTRhYWM3N2Q2Mzg4MmY3NDM2MjA3MDRjMjRkYmVkYjE4
ODBkN2EwHhcNMjUwMTMxMTAwMDQ2WhcNMjUwMjAxMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5MjE0ZWZkNWIxZWEyOGQ4YTk3YjY4MTJkOTJiMmFmZTEzZWI5NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo5d/rnLFyRVpeLpkQchj8/iNT7d
qtE4Ts9rsWxCofin+tH7HeYtfBiqiaRNzLzr5MWDEr4YtuKt+JYd/CBf4K2nx+rt
lzyw7nIE+s5Eti3uQ/n9LLgWTXd1Ws9mStmLjpa52yuu/BiANqOJM58X0YtRUyRk
sq3F82n+uL6LNHYS/XGLZG9TQB5tD4YpCvpsNBsJwq4ZCjLC5aRIK3C5oAHatv5x
ZVeDFyfMtuW+wX28AGnLWQbHAUzr8xM6rFTvq2Qt/Q1LPyRGwZx7twzV1UmL/GiZ
kfoGrZh5aXVZ3QNHpAlhEMYjURoqgeXovtY0zttFa2E7VsbBuk67MRD+1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIU79Wx6ijYqXtoEtkrKv4T65W3MB8GA1UdIwQY
MBaAFLvkqsd9Y4gvdDYgcEwk2+2xiA16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUt
MWJhMjFiMGUyOTEzLzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kNGQ3ZDItOWNiMi00Y2UwLTg2NjUtMWJhMjFiMGUyOTEz
LzEvdS1TcXgzMWppQzkwTmlCd1RDVGI3YkdJRFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7OHnnI3
No0dOe/5+aG+Wc02siWc7JLLIkAsrVljraBhszjuZRvnpXu8zaeg/gNSA3eBSis+
I4A6H1XNBjJMe9j33/U8K3J/w0FbtNMs1LP8+rjxwoQb3KSS111PnZ8kBnsvusUr
8zWm+HlBrxnuPz6ld6beyNC73povzWIUg/u+497cgYTsHPoLKxQ8sJQDcCbkZEzi
LbK760AfD9/IEHzEisc6zwOcZ6UvpSatwdndhU4PBr0rEZeELen8hCp1qyVMBoDi
JpAUi/gKWDbMrFRgsXyxRjnjzMDGPeby2gToaW39TRjyqERcaokMt+NQPEdSVNxI
+ftKbe2yzWB4uw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:37 2025 by rpki-client