Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: CdC3cECdor8tRecho4jSedi22O78CfdYxC10OzMoVgA=
Subject key identifier: B9:07:81:5C:75:0C:47:5B:49:72:91:41:56:65:BC:81:E7:0B:17:88
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 0194BC72E77EFAEAB4305644D5C93B2D077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: zVIT8htZBT7TlFI/m14L3CVd9G7j2rMapxBML+nibqo=)
3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e7:7e:fa:ea:b4:30:56:44:d5:c9:3b:2d:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=b907815c750c475b497291415665bc81e70b1788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:52:4a:17:ad:39:50:e5:6c:bc:42:29:b5:
b1:c5:62:c6:cb:1d:a7:29:82:f7:e4:5c:93:a1:f4:
14:b1:34:df:6e:2c:31:84:e9:f9:be:79:87:d6:24:
20:8e:7e:66:d4:70:46:ee:47:4f:77:53:b1:a8:b6:
f6:a1:9b:71:77:0e:7e:ec:f8:b4:65:b0:df:8e:b3:
9e:c6:30:76:25:61:b9:dc:a2:77:4b:bb:22:8b:0a:
4e:8f:08:fc:b4:43:64:2c:34:45:c6:51:7b:d0:2f:
63:cb:fd:74:fc:f5:3e:01:ac:2c:9d:f5:83:fd:60:
4c:1c:77:17:39:2b:4b:93:fd:4e:cd:11:b9:b2:f7:
9d:9a:cd:1b:b3:6a:df:4a:68:ec:57:05:4b:50:a2:
30:d7:97:8a:96:b7:68:e4:fb:0f:be:68:8c:e8:bd:
ad:28:5a:df:a5:b1:38:27:23:59:8a:f8:39:5a:af:
f1:df:7a:80:fb:44:20:70:e9:82:cf:a4:bf:1e:b7:
2a:1c:29:ae:d8:c7:d8:b1:72:f8:d9:ab:0e:89:90:
5f:24:19:3a:a6:60:1d:10:3f:2a:f9:e4:0b:6a:72:
4f:f9:c0:b2:c8:5d:2e:61:5e:e8:1b:14:0e:13:0c:
30:97:65:29:e5:2d:72:ad:54:ea:08:71:f7:46:9d:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:07:81:5C:75:0C:47:5B:49:72:91:41:56:65:BC:81:E7:0B:17:88
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:4d:f9:34:09:35:98:2c:a5:a7:8a:e4:5f:1f:97:d1:85:
fa:16:8b:3f:38:02:d0:04:86:1d:aa:a8:a9:06:d9:ac:a1:23:
b0:93:42:e2:c0:f4:83:92:76:44:f3:32:90:95:6d:d7:c0:0e:
d8:3c:3b:b8:33:72:a8:e2:16:9d:51:a4:1b:5e:06:ff:bf:6a:
1f:72:91:9d:e1:28:b0:c0:35:eb:fb:93:89:9b:74:d2:e3:59:
e4:89:42:6d:37:c3:e5:ee:69:e1:90:ee:a9:c0:69:9f:49:80:
5b:e2:e9:f2:4b:08:b4:41:85:03:b0:1c:2f:88:02:06:b2:c6:
bd:1a:d0:27:eb:65:7c:17:de:8b:dd:c9:80:4e:3b:d7:29:96:
45:27:10:29:9a:ac:da:30:0c:f2:f9:0c:aa:fc:02:64:75:17:
d9:2b:65:d4:3f:19:87:0e:91:fa:df:9f:53:4d:1f:89:fe:f0:
15:b4:15:54:11:0d:7d:7a:4b:36:67:4a:a5:e5:29:5a:08:71:
bc:d2:35:d4:8d:d4:0d:08:cd:5c:97:8b:f8:ae:15:98:36:a8:
11:af:14:8e:10:e4:8b:d1:8c:ca:3a:04:d3:a6:b0:23:ac:11:
cd:8a:1d:8e:de:b8:75:04:cc:7f:dd:69:7c:84:e6:74:e1:1d:
12:ba:e3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cud++uq0MFZE1ck7LQd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODhkZWRhY2RjMjQwYjRiMmY3ODZmMTIzNDJlMGE4M2Q4
YWU4MGYwHhcNMjUwMTMxMTMwMDM0WhcNMjUwMjAxMTMwMDM0WjAzMTEwLwYDVQQD
EyhiOTA3ODE1Yzc1MGM0NzViNDk3MjkxNDE1NjY1YmM4MWU3MGIxNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4FSShetOVDlbLxCKbWxxWLGyx2n
KYL35FyTofQUsTTfbiwxhOn5vnmH1iQgjn5m1HBG7kdPd1OxqLb2oZtxdw5+7Pi0
ZbDfjrOexjB2JWG53KJ3S7siiwpOjwj8tENkLDRFxlF70C9jy/10/PU+AawsnfWD
/WBMHHcXOStLk/1OzRG5svedms0bs2rfSmjsVwVLUKIw15eKlrdo5PsPvmiM6L2t
KFrfpbE4JyNZivg5Wq/x33qA+0QgcOmCz6S/HrcqHCmu2MfYsXL42asOiZBfJBk6
pmAdED8q+eQLanJP+cCyyF0uYV7oGxQOEwwwl2Up5S1yrVTqCHH3Rp3mIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkHgVx1DEdbSXKRQVZlvIHnCxeIMB8GA1UdIwQY
MBaAFFGI3trNwkC0sveG8SNC4Kg9iugPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQt
NzliM2RiNjU5ZGZjLzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xZmFhM2UtODg0Yy00NDVmLTg0NWQtNzliM2RiNjU5ZGZj
LzEvVVlqZTJzM0NRTFN5OTRieEkwTGdxRDJLNkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUJN+TQJ
NZgspaeK5F8fl9GF+haLPzgC0ASGHaqoqQbZrKEjsJNC4sD0g5J2RPMykJVt18AO
2Dw7uDNyqOIWnVGkG14G/79qH3KRneEosMA16/uTiZt00uNZ5IlCbTfD5e5p4ZDu
qcBpn0mAW+Lp8ksItEGFA7AcL4gCBrLGvRrQJ+tlfBfei93JgE471ymWRScQKZqs
2jAM8vkMqvwCZHUX2Stl1D8Zhw6R+t+fU00fif7wFbQVVBENfXpLNmdKpeUpWghx
vNI11I3UDQjNXJeL+K4VmDaoEa8UjhDki9GMyjoE06awI6wRzYodjt64dQTMf91p
fITmdOEdErrjjA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:18 2025 by rpki-client