Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: JYeCUsoKXLAnXvgmUcXeI7Y02WTUZu0CYO7u6IPFYIM=
Subject key identifier: D5:F7:E1:9C:23:EB:77:B2:99:6B:74:25:E4:DF:A2:E4:DA:59:F6:65
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 0194BCA9EB8871FEF9E260093686F0AE2250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 026F
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: ZHUKgbbtFm+5qns9wGVCYHCu0w/3EajNijolbEKmQVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:eb:88:71:fe:f9:e2:60:09:36:86:f0:ae:22:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=d5f7e19c23eb77b2996b7425e4dfa2e4da59f665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:08:e9:4e:1c:ef:73:00:f7:92:e2:87:c1:
64:35:17:55:97:2d:8d:37:f6:a9:fa:bf:3d:53:4b:
f7:2e:c4:2b:69:95:f3:85:0d:16:09:50:6b:0a:6e:
5d:ea:9a:23:c8:3b:1d:86:16:d0:99:06:4c:b7:20:
7d:73:25:36:b3:5f:14:3a:e5:90:f4:e8:ea:6d:de:
6a:f2:6b:77:43:2c:57:cb:e5:7c:25:25:cd:97:4a:
4f:b0:6a:fb:3c:a0:fb:7e:2c:3d:84:24:0d:46:e3:
7e:ff:0a:21:f3:b3:a8:01:b8:c6:5b:96:fd:a0:b2:
e1:3c:db:97:42:5b:4f:2a:38:ee:a8:d0:f9:df:b6:
47:e6:f1:e4:e7:d1:10:ab:fa:e7:12:81:5a:d0:6e:
9f:88:b3:65:77:29:57:49:eb:b1:a9:73:74:44:3b:
3e:50:4d:84:b1:38:ad:8f:28:0d:87:13:cd:d8:f0:
7e:0c:3c:65:cf:70:14:27:24:5a:f6:37:cb:b0:a7:
0b:f8:fd:6a:51:da:2a:45:c1:c5:86:f3:da:5e:37:
de:64:cc:60:ee:ef:90:fa:80:97:14:21:1d:2e:37:
51:8a:03:c3:99:db:7b:24:6f:9c:97:d0:47:bb:75:
ac:58:9d:5b:2c:47:63:ef:e6:d3:2d:7c:fc:8c:af:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:E1:9C:23:EB:77:B2:99:6B:74:25:E4:DF:A2:E4:DA:59:F6:65
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:42:8d:dc:89:84:83:67:9a:37:8c:d8:aa:c1:2f:44:10:70:
6f:08:5e:8c:6b:cf:dd:f9:ca:16:33:29:fa:89:49:34:b1:a5:
65:9e:06:35:c8:08:39:d4:10:b4:50:97:cb:56:ce:09:06:e8:
3e:64:30:05:53:ba:81:6e:b0:af:a0:13:a5:e3:70:3a:36:35:
44:1f:93:7e:fc:65:1b:05:69:09:f2:2e:d3:63:f2:61:69:7d:
c1:71:fe:bd:30:fc:4f:47:36:3f:3b:d2:01:84:8e:6e:ca:3b:
e0:a6:2c:f8:2d:7b:12:bb:f5:9e:f9:a7:0e:24:f5:53:bf:e4:
4a:4c:8f:3b:7e:40:41:85:8d:fd:06:28:58:77:a0:c5:3c:89:
85:8b:78:c2:47:3e:9f:f8:ef:e6:68:35:3a:ed:1d:63:c1:cc:
94:1e:fd:67:1c:0e:3c:fb:2e:34:d5:a6:ac:ce:e0:37:e0:c2:
37:17:e7:c0:cf:37:47:11:13:bb:8c:a7:b9:7b:a3:23:f9:36:
bf:60:51:ab:1c:e0:86:94:f0:c4:01:7e:b0:54:a3:52:7e:5c:
26:e5:8e:78:d9:d5:58:ea:7e:1c:a8:c0:85:06:f2:a7:2e:fd:
4d:04:1e:d5:af:ea:93:3e:d9:9f:d9:6e:a5:77:a9:c6:70:41:
79:9d:11:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeuIcf754mAJNobwriJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTcxNWFmNjY0MDRmYmEwMzcxZWU1YjMwMzc3Njg0ZWE2
ZDQ2ZWQwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
EyhkNWY3ZTE5YzIzZWI3N2IyOTk2Yjc0MjVlNGRmYTJlNGRhNTlmNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA8I6U4c73MA95Lih8FkNRdVly2N
N/ap+r89U0v3LsQraZXzhQ0WCVBrCm5d6pojyDsdhhbQmQZMtyB9cyU2s18UOuWQ
9Ojqbd5q8mt3QyxXy+V8JSXNl0pPsGr7PKD7fiw9hCQNRuN+/woh87OoAbjGW5b9
oLLhPNuXQltPKjjuqND537ZH5vHk59EQq/rnEoFa0G6fiLNldylXSeuxqXN0RDs+
UE2EsTitjygNhxPN2PB+DDxlz3AUJyRa9jfLsKcL+P1qUdoqRcHFhvPaXjfeZMxg
7u+Q+oCXFCEdLjdRigPDmdt7JG+cl9BHu3WsWJ1bLEdj7+bTLXz8jK/rvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX34Zwj63eymWt0JeTfouTaWfZlMB8GA1UdIwQY
MBaAFLhXFa9mQE+6A3HuWzA3doTqbUbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iYjc3MTgtNjNkYi00MTJmLWE3NWUt
M2Y1NDE3OWQ0OWU1LzEvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iYjc3MTgtNjNkYi00MTJmLWE3NWUtM2Y1NDE3OWQ0OWU1
LzEvdUZjVnIyWkFUN29EY2U1Yk1EZDJoT3B0UnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUKN3ImE
g2eaN4zYqsEvRBBwbwhejGvP3fnKFjMp+olJNLGlZZ4GNcgIOdQQtFCXy1bOCQbo
PmQwBVO6gW6wr6ATpeNwOjY1RB+TfvxlGwVpCfIu02PyYWl9wXH+vTD8T0c2PzvS
AYSObso74KYs+C17Erv1nvmnDiT1U7/kSkyPO35AQYWN/QYoWHegxTyJhYt4wkc+
n/jv5mg1Ou0dY8HMlB79ZxwOPPsuNNWmrM7gN+DCNxfnwM83RxETu4ynuXujI/k2
v2BRqxzghpTwxAF+sFSjUn5cJuWOeNnVWOp+HKjAhQbypy79TQQe1a/qkz7Zn9lu
pXepxnBBeZ0RyQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:49 2025 by rpki-client