Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: 9JgDHKL9N1HBFyfqBQ6vv0u3hjxEGfpIYBYTLOHZFfg=
Subject key identifier: F7:A3:F4:BC:E3:C7:E6:1D:87:CE:9E:CA:EA:76:C3:61:05:97:95:47
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 0194BBCDE8A8592807BB0C50171FF3D5520C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 098E
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: cR3OirnXMlSy4TwiNJb9hVnyojki373fPYS2TvxogQQ=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:a8:59:28:07:bb:0c:50:17:1f:f3:d5:52:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=f7a3f4bce3c7e61d87ce9ecaea76c36105979547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:ac:63:19:d7:c7:86:c8:bd:c8:63:20:69:
e7:56:fe:ac:d9:3e:9f:24:e9:74:ab:0c:a1:9d:45:
69:86:9a:a5:81:d7:4e:ab:c8:67:21:11:10:ee:70:
9c:bd:73:91:4a:40:ef:74:7d:65:75:ef:1d:c9:ea:
95:17:85:fa:9f:b6:e6:7b:a9:f7:c8:f4:8b:1c:71:
d0:49:c0:bb:23:92:af:d5:dc:3e:e9:fd:e7:b0:b4:
0e:0b:8a:ec:27:82:19:77:76:1e:e6:1a:e0:15:0a:
c1:36:6b:53:9b:dd:53:12:a9:a9:6e:17:dd:6f:40:
97:cd:a7:5e:27:68:fa:42:e0:81:4f:c5:9b:ac:cf:
d4:0c:4b:25:d2:fe:3a:9e:80:dd:6b:37:cd:f9:03:
d4:9a:dc:e8:0f:01:77:74:a4:fc:fd:33:38:d3:c8:
d7:34:fb:ad:dd:ba:73:47:cc:86:b2:fd:60:21:87:
59:c3:3d:bb:ea:19:58:f4:4a:9b:bd:64:a3:36:bc:
cc:93:5d:c3:1a:bc:1b:29:9d:36:cf:b3:e8:e5:90:
6d:46:da:fb:f0:91:4b:33:ac:b2:7b:39:c9:48:72:
1b:4f:a8:7f:d0:ab:43:7f:e1:2d:53:3c:6e:d8:1a:
fd:23:05:54:75:0e:20:b2:07:81:77:22:6a:50:96:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:F4:BC:E3:C7:E6:1D:87:CE:9E:CA:EA:76:C3:61:05:97:95:47
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:06:c6:97:1b:eb:13:3c:2a:cd:33:09:08:fd:2a:ea:f1:
2c:2c:ca:01:3f:19:e1:bc:49:77:5b:09:87:41:4e:ff:2b:73:
86:28:29:ea:58:7b:b1:db:dd:a6:60:3e:e4:cb:7a:69:f7:69:
cd:5e:f8:0b:8a:90:ed:f6:5d:a9:ee:ec:19:73:fe:a9:f1:a0:
cf:da:af:6d:af:43:5c:92:54:6d:9e:e9:78:f8:93:af:b0:bd:
1e:6e:b2:07:46:55:27:b2:61:e7:6e:52:e3:00:29:1b:59:6e:
a3:2c:bd:c4:df:95:89:6e:54:28:88:56:79:8d:33:91:69:40:
4d:c9:6b:12:67:bc:3c:cc:ba:d5:ef:4f:77:b5:44:ef:86:af:
c5:e5:b1:17:c4:a9:21:6e:9e:23:31:db:d8:a5:1f:ae:e0:87:
49:eb:dc:b1:fc:9a:cd:56:56:5e:a0:5f:7c:2d:c4:60:ea:97:
3b:b5:90:3b:e6:e4:ad:5f:65:65:aa:c7:ad:22:61:f6:ab:a9:
1a:9d:6b:2b:06:5e:d2:2e:d6:61:dd:3a:34:87:83:7e:c7:e0:
34:d2:36:0b:5a:76:3c:74:97:ab:c8:bb:ec:a4:aa:8f:04:c6:
b9:6e:c8:7c:6b:41:08:e5:ed:ef:45:7c:03:0c:4d:77:6e:18:
36:01:15:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeioWSgHuwxQFx/z1VIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNzE0MzhlMjNjZTkyNWU2NmMyNTk5ODEyMjFiNWI2ODNh
MmYwOGYwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
EyhmN2EzZjRiY2UzYzdlNjFkODdjZTllY2FlYTc2YzM2MTA1OTc5NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKasYxnXx4bIvchjIGnnVv6s2T6f
JOl0qwyhnUVphpqlgddOq8hnIREQ7nCcvXORSkDvdH1lde8dyeqVF4X6n7bme6n3
yPSLHHHQScC7I5Kv1dw+6f3nsLQOC4rsJ4IZd3Ye5hrgFQrBNmtTm91TEqmpbhfd
b0CXzadeJ2j6QuCBT8WbrM/UDEsl0v46noDdazfN+QPUmtzoDwF3dKT8/TM408jX
NPut3bpzR8yGsv1gIYdZwz276hlY9EqbvWSjNrzMk13DGrwbKZ02z7Po5ZBtRtr7
8JFLM6yyeznJSHIbT6h/0KtDf+EtUzxu2Br9IwVUdQ4gsgeBdyJqUJZEGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPej9Lzjx+Ydh86eyup2w2EFl5VHMB8GA1UdIwQY
MBaAFFJxQ44jzpJeZsJZmBIhtbaDovCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMt
OWFkMDM1NDc0MTE0LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MDY5MTctYWY2Yi00ZTFlLTg3NzMtOWFkMDM1NDc0MTE0
LzEvVW5GRGppUE9rbDVtd2xtWUVpRzF0b09pOEk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj0Gxpcb
6xM8Ks0zCQj9KurxLCzKAT8Z4bxJd1sJh0FO/ytzhigp6lh7sdvdpmA+5Mt6afdp
zV74C4qQ7fZdqe7sGXP+qfGgz9qvba9DXJJUbZ7pePiTr7C9Hm6yB0ZVJ7Jh525S
4wApG1luoyy9xN+ViW5UKIhWeY0zkWlATclrEme8PMy61e9Pd7VE74avxeWxF8Sp
IW6eIzHb2KUfruCHSevcsfyazVZWXqBffC3EYOqXO7WQO+bkrV9lZarHrSJh9qup
Gp1rKwZe0i7WYd06NIeDfsfgNNI2C1p2PHSXq8i77KSqjwTGuW7IfGtBCOXt70V8
AwxNd24YNgEVNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:24 2025 by rpki-client