Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier: k2K5nYslUpbSmUIpt+OEXGSyuZzKbpC52zexa/OcAJ8=
Subject key identifier: 3F:03:B1:0A:4B:DE:D8:76:9D:39:AF:62:9E:F4:F8:40:DC:AE:D2:99
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial: 0194BD1750B488D645DA2D1FECDB2D835CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: 7kjrtJy2HwwNM3qWkaFSrC6GClG8D8klHiowA65XyJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:50:b4:88:d6:45:da:2d:1f:ec:db:2d:83:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=3f03b10a4bded8769d39af629ef4f840dcaed299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:1c:b5:f8:48:01:e1:0e:f4:60:53:d2:00:
c7:eb:cd:eb:08:8b:ae:0c:e3:31:ee:42:82:0b:16:
1c:b3:52:88:a3:1b:90:07:97:1c:bd:f5:87:23:2e:
06:e0:09:3a:42:1c:a8:90:0b:e9:45:9c:bc:87:b3:
a3:db:07:e9:a4:5a:47:62:31:fb:90:e0:51:2f:c2:
20:19:ae:7a:b9:57:4c:c8:b9:3e:d7:d1:79:c8:23:
63:1d:5e:f3:97:e3:7d:96:a6:bc:17:31:d9:ac:94:
b5:a2:9d:d3:85:00:38:ec:46:81:37:51:2b:6c:f5:
35:92:ab:e4:9f:55:2e:e1:ba:12:14:ab:25:0e:2b:
3b:eb:23:1e:db:59:f8:95:34:ef:83:4c:c3:9e:3b:
3b:6c:14:7a:04:e2:9c:e6:4b:7c:7b:ab:00:0f:17:
d8:1a:fc:89:4a:b2:90:bd:a7:86:ca:df:9b:4d:25:
34:bc:56:38:16:b8:0d:42:4f:6a:6c:70:ed:86:37:
16:4e:5d:7f:c8:fc:76:92:d1:a2:f0:75:2d:3d:c9:
12:ca:1e:7a:78:1a:68:04:a8:87:0f:a3:96:a9:55:
35:23:ab:16:49:3c:ce:16:da:f3:42:96:93:58:67:
99:7f:7e:8e:3d:b8:fc:84:3d:c9:8f:ef:f7:99:50:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:03:B1:0A:4B:DE:D8:76:9D:39:AF:62:9E:F4:F8:40:DC:AE:D2:99
X509v3 Authority Key Identifier:
keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6b:be:d1:fb:0b:3b:ca:2e:4b:57:7e:26:95:7f:15:4b:8c:
c6:94:7b:ee:2a:2d:c4:5e:27:8c:12:62:2a:59:59:e5:22:33:
88:7f:df:ab:27:d1:c8:0c:29:33:82:1d:98:28:cf:fe:ba:26:
7d:73:90:75:d0:34:ac:84:f0:e2:ca:01:f3:1e:08:9e:b6:26:
f5:b0:3f:9b:a5:a4:c2:76:b1:a2:6b:bf:ed:3d:37:77:75:32:
74:72:f5:bf:c9:a5:da:c5:cd:a2:22:bc:cc:eb:b5:d6:24:c5:
b3:34:2a:d7:03:7f:91:88:cf:19:65:64:2f:63:fe:6b:1a:8b:
c4:af:70:a9:53:f0:92:5b:ad:ae:5c:cf:09:08:da:59:86:68:
3b:d6:3d:50:c9:99:e8:d9:b8:f2:c8:27:7e:00:40:8c:de:a4:
f9:45:54:f5:46:1a:d5:ca:ca:57:34:d9:63:fa:82:3a:58:d5:
40:42:5d:de:8e:a8:36:a6:5c:4e:0e:d6:bc:e6:bb:dc:0e:ed:
6e:ac:6d:d7:6a:39:e8:a0:aa:c9:28:8a:67:8c:15:43:bd:c0:
ba:ca:44:27:6e:bb:32:34:73:fb:84:61:26:33:89:3e:00:42:
57:54:b1:4a:ab:6a:1f:1f:b4:c5:66:bd:38:b4:da:a3:fe:10:
5f:5a:c4:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1C0iNZF2i0f7Nstg1yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTRjZmU3ZjQ3ZjUyNDY0NTQ1YWRiYjBiYmM0ZDMzNDc4
YWFlYjIwHhcNMjUwMTMxMTYwMDA5WhcNMjUwMjAxMTYwMDA5WjAzMTEwLwYDVQQD
EygzZjAzYjEwYTRiZGVkODc2OWQzOWFmNjI5ZWY0Zjg0MGRjYWVkMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWYctfhIAeEO9GBT0gDH683rCIuu
DOMx7kKCCxYcs1KIoxuQB5ccvfWHIy4G4Ak6QhyokAvpRZy8h7Oj2wfppFpHYjH7
kOBRL8IgGa56uVdMyLk+19F5yCNjHV7zl+N9lqa8FzHZrJS1op3ThQA47EaBN1Er
bPU1kqvkn1Uu4boSFKslDis76yMe21n4lTTvg0zDnjs7bBR6BOKc5kt8e6sADxfY
GvyJSrKQvaeGyt+bTSU0vFY4FrgNQk9qbHDthjcWTl1/yPx2ktGi8HUtPckSyh56
eBpoBKiHD6OWqVU1I6sWSTzOFtrzQpaTWGeZf36OPbj8hD3Jj+/3mVB1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8DsQpL3th2nTmvYp70+EDcrtKZMB8GA1UdIwQY
MBaAFNLkz+f0f1JGRUWtuwu8TTNHiq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMt
OGYyMzFmNzMxN2I5LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZjFlZDMtNjNiYS00MjNiLWI5YzMtOGYyMzFmNzMxN2I5
LzEvMHVUUDVfUl9Va1pGUmEyN0M3eE5NMGVLcnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmu+0fsL
O8ouS1d+JpV/FUuMxpR77iotxF4njBJiKllZ5SIziH/fqyfRyAwpM4IdmCjP/rom
fXOQddA0rITw4soB8x4InrYm9bA/m6Wkwnaxomu/7T03d3UydHL1v8ml2sXNoiK8
zOu11iTFszQq1wN/kYjPGWVkL2P+axqLxK9wqVPwklutrlzPCQjaWYZoO9Y9UMmZ
6Nm48sgnfgBAjN6k+UVU9UYa1crKVzTZY/qCOljVQEJd3o6oNqZcTg7WvOa73A7t
bqxt12o56KCqySiKZ4wVQ73AuspEJ267MjRz+4RhJjOJPgBCV1SxSqtqHx+0xWa9
OLTao/4QX1rEcQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:36 2025 by rpki-client