Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: FFxz8oteK9thKNeTolu3pdNxQ79EVht9MQ2PmB73EtU=
Subject key identifier: 53:36:FE:5E:7F:10:64:1D:CE:0F:AD:B6:98:9D:DA:30:CF:6C:E2:07
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 0194BD8593384087A9A19EBF61D057FA1822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0BF7
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: ZzqUVWOMMNnw5aR55MU0ivWzB8XYvm64nByti4WrhoA=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:38:40:87:a9:a1:9e:bf:61:d0:57:fa:18:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=5336fe5e7f10641dce0fadb6989dda30cf6ce207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:92:84:f7:24:0c:83:7a:b1:27:e7:37:9e:
52:bf:87:c1:8e:52:62:d2:8b:53:d5:a4:9e:73:c2:
71:69:8f:ac:90:d1:33:24:dc:ae:20:b9:97:96:be:
28:16:ed:36:8d:06:b6:56:72:89:b5:c3:e8:4a:c7:
87:f5:d7:97:60:9a:5a:79:b0:77:48:a4:7f:8b:db:
92:a7:6c:fc:af:77:71:b7:97:7d:94:53:38:ab:4d:
0e:1e:25:91:28:e6:ca:dc:96:97:cb:0f:3c:88:fe:
78:2c:11:e5:ca:91:4c:c5:fe:b5:df:a4:98:ff:80:
96:33:a2:1a:99:e1:51:66:56:61:f4:26:6e:6f:0b:
8d:56:6f:38:eb:5c:bb:c0:b5:09:fa:2b:a1:52:49:
a0:d7:fa:85:a0:b0:88:9a:3c:19:bd:5b:65:f0:3b:
9e:14:0c:8a:24:cd:a8:50:e0:ef:2c:75:bd:0b:df:
60:92:87:0f:3f:ba:48:37:da:30:5e:1a:5a:2b:ce:
49:3b:7a:d0:e8:26:74:c4:07:9a:b4:08:4e:4d:4b:
60:3c:0f:e0:02:56:ed:cd:b7:e9:6e:c7:21:81:4e:
4b:53:4c:e3:eb:c9:a8:8e:4e:d6:5f:e4:8b:06:81:
7e:86:4f:26:36:42:a6:17:56:20:9f:7c:c2:34:da:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:FE:5E:7F:10:64:1D:CE:0F:AD:B6:98:9D:DA:30:CF:6C:E2:07
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2e:e7:e6:f5:df:c9:f0:e9:ed:04:38:06:79:3b:56:14:38:
1c:71:bf:ae:78:5f:76:f8:58:bc:5e:6b:ae:a9:c3:bc:4e:92:
24:61:79:ba:ca:10:f5:bf:10:49:c5:ee:04:cc:7a:af:a0:f1:
21:6e:b9:41:68:77:8c:4a:d6:e6:58:15:bf:94:49:f4:dd:52:
8d:7a:1a:19:cb:89:72:da:cb:d1:f3:24:8b:c9:39:35:11:3b:
a7:e1:b2:46:0f:a2:86:38:89:9f:71:55:28:06:cd:9e:6f:ee:
ae:92:eb:d1:29:1b:e1:fb:6f:a9:37:c6:32:4b:30:79:89:b8:
c8:6c:52:3d:ca:ce:b8:b3:15:8d:63:fe:6b:b6:56:55:7a:44:
9b:aa:c3:a5:75:96:e2:83:1a:4f:41:29:3f:05:d6:83:27:50:
34:15:ec:2b:92:7b:1a:7d:56:e0:a8:28:8a:05:1f:0a:8e:55:
f6:f5:9d:c7:38:c8:14:1e:75:58:a4:17:a0:7e:fc:85:99:c6:
90:fc:e5:91:15:40:02:0b:01:bc:9d:6c:9a:e4:79:c4:a0:53:
f1:02:99:e7:91:be:4c:ce:6f:91:03:70:98:e6:f5:4d:f8:3d:
1a:64:be:7f:e8:3c:89:e5:7d:f4:6f:a1:13:fa:53:66:b1:69:
c0:ac:8c:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZM4QIepoZ6/YdBX+hgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTdjODdkMTExYzgwNTBmZDVjOWFjMmIwNmJlNjIzMjM2
NzUwMzMwHhcNMjUwMTMxMTgwMDM0WhcNMjUwMjAxMTgwMDM0WjAzMTEwLwYDVQQD
Eyg1MzM2ZmU1ZTdmMTA2NDFkY2UwZmFkYjY5ODlkZGEzMGNmNmNlMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWShPckDIN6sSfnN55Sv4fBjlJi
0otT1aSec8JxaY+skNEzJNyuILmXlr4oFu02jQa2VnKJtcPoSseH9deXYJpaebB3
SKR/i9uSp2z8r3dxt5d9lFM4q00OHiWRKObK3JaXyw88iP54LBHlypFMxf6136SY
/4CWM6IameFRZlZh9CZubwuNVm8461y7wLUJ+iuhUkmg1/qFoLCImjwZvVtl8Due
FAyKJM2oUODvLHW9C99gkocPP7pIN9owXhpaK85JO3rQ6CZ0xAeatAhOTUtgPA/g
AlbtzbfpbschgU5LU0zj68mojk7WX+SLBoF+hk8mNkKmF1Ygn3zCNNpcswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM2/l5/EGQdzg+ttpid2jDPbOIHMB8GA1UdIwQY
MBaAFFFXyH0RHIBQ/VyawrBr5iMjZ1AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAt
ZDI5NzAxNDg3NTM2LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80ZTdiNWMtMjkwNi00NzhhLThlZjAtZDI5NzAxNDg3NTM2
LzEvVVZmSWZSRWNnRkQ5WEpyQ3NHdm1JeU5uVURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAES7n5vXf
yfDp7QQ4Bnk7VhQ4HHG/rnhfdvhYvF5rrqnDvE6SJGF5usoQ9b8QScXuBMx6r6Dx
IW65QWh3jErW5lgVv5RJ9N1SjXoaGcuJctrL0fMki8k5NRE7p+GyRg+ihjiJn3FV
KAbNnm/urpLr0Skb4ftvqTfGMksweYm4yGxSPcrOuLMVjWP+a7ZWVXpEm6rDpXWW
4oMaT0EpPwXWgydQNBXsK5J7Gn1W4KgoigUfCo5V9vWdxzjIFB51WKQXoH78hZnG
kPzlkRVAAgsBvJ1smuR5xKBT8QKZ55G+TM5vkQNwmOb1Tfg9GmS+f+g8ieV99G+h
E/pTZrFpwKyMZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:16 2025 by rpki-client