Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: haM61HPvud3ZlhmFkRpKODglrqCxozxcS0712TFCkEc=
Subject key identifier: BF:A4:C3:76:F5:A6:24:DB:48:ED:BE:EC:68:84:C6:22:C2:3C:ED:A8
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 0194BCAA11129824315BC949457661B2050B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: sRrMFzITouVd18bUZH9gnj+GqkFSmvhZo+m3QNvsnE4=)
2: UPs4nn0eBay_fIEXwzFrziOGHlg.roa (hash: n1rQX2er8ehY5mv/Oe6cZ3YcfGOcUxMxZAxeUBrIysk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:12:98:24:31:5b:c9:49:45:76:61:b2:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=bfa4c376f5a624db48edbeec6884c622c23ceda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:2a:85:c6:64:d5:a1:ed:56:42:e5:da:93:
84:d6:71:bf:78:54:7d:7a:34:29:8a:76:c8:a1:99:
42:40:95:1a:42:a9:0b:cd:72:4f:95:da:18:3c:2d:
bf:17:68:6b:86:e9:02:85:37:d6:f6:a1:9b:0d:31:
e1:ec:ea:7a:e0:18:81:25:5e:76:a8:d4:43:01:88:
c3:2f:ad:c4:ca:9e:52:ed:73:0f:3a:7a:5d:20:10:
a9:d5:eb:9a:40:74:b6:3c:1c:28:64:f2:58:89:92:
be:c0:bd:91:e5:d1:b2:55:ab:1b:d7:75:11:51:31:
de:40:82:0e:cc:13:6f:10:ac:37:a8:dc:25:e4:4a:
a8:2f:f2:09:ea:a1:b6:95:27:48:43:4a:25:3f:62:
78:65:25:71:d0:00:db:36:4a:b6:7a:48:ce:c5:4b:
1a:c0:6a:39:c3:31:86:a4:7e:1d:b9:e9:c2:ca:ff:
1a:01:1e:aa:0c:60:42:b3:50:d7:23:be:e5:02:be:
a6:8e:43:78:09:fb:d7:06:e3:27:53:d6:ca:8e:f0:
64:cc:e9:bd:29:b3:6b:37:e2:09:47:c9:dc:ee:00:
7b:14:e5:57:a5:b1:0b:b0:d5:70:93:fd:54:79:10:
79:88:1c:68:86:f0:44:29:af:36:69:9d:53:25:af:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A4:C3:76:F5:A6:24:DB:48:ED:BE:EC:68:84:C6:22:C2:3C:ED:A8
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:33:f3:ec:3e:a9:03:db:ed:05:e2:8b:74:b2:b1:14:1d:ff:
f6:5f:12:5e:9e:e5:59:21:77:cc:c7:3f:6d:85:64:25:43:d3:
19:f8:61:d8:a5:f2:79:de:34:b2:6a:ac:d1:33:5e:53:38:bf:
d8:dc:05:23:53:a3:06:0a:2b:1f:90:fe:9b:02:5d:d1:0a:a0:
27:10:7a:4d:2e:ad:fc:76:32:4e:c4:fb:3e:48:8c:da:e1:4f:
d0:1e:f4:f3:0e:19:67:ef:27:55:7a:c1:c8:40:99:e6:87:aa:
19:ef:cf:20:82:b0:f5:20:4e:94:69:75:42:9a:5e:03:e5:91:
96:b1:a6:46:54:3f:30:3f:eb:f8:2c:4f:f1:c6:a3:0f:bf:62:
88:ad:68:ce:3c:96:a8:3f:b6:b3:09:5b:55:81:5b:32:9c:cc:
dd:5e:c8:3b:fe:d7:bb:f9:43:ea:42:58:47:d3:5f:79:ac:fe:
8e:48:ae:f9:db:74:49:1c:96:60:69:f3:20:46:1d:62:50:8a:
ea:7b:b1:3b:90:65:6f:97:8b:a2:ff:4a:15:3c:cb:ec:60:30:
3c:bd:32:7a:9b:7f:41:85:bb:14:84:cf:d8:0f:3a:f0:20:51:
12:95:60:b6:06:de:c2:7d:60:d0:d6:3a:ca:21:fa:52:63:76:
60:7e:b5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhESmCQxW8lJRXZhsgULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZWE1YWNiNDQ3YjJjZWI5MzJhMDNmMjkwMDgyZGM3NmY4
ZTQwZTMwHhcNMjUwMTMxMTQwMDQ5WhcNMjUwMjAxMTQwMDQ5WjAzMTEwLwYDVQQD
EyhiZmE0YzM3NmY1YTYyNGRiNDhlZGJlZWM2ODg0YzYyMmMyM2NlZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u0qhcZk1aHtVkLl2pOE1nG/eFR9
ejQpinbIoZlCQJUaQqkLzXJPldoYPC2/F2hrhukChTfW9qGbDTHh7Op64BiBJV52
qNRDAYjDL63Eyp5S7XMPOnpdIBCp1euaQHS2PBwoZPJYiZK+wL2R5dGyVasb13UR
UTHeQIIOzBNvEKw3qNwl5EqoL/IJ6qG2lSdIQ0olP2J4ZSVx0ADbNkq2ekjOxUsa
wGo5wzGGpH4duenCyv8aAR6qDGBCs1DXI77lAr6mjkN4CfvXBuMnU9bKjvBkzOm9
KbNrN+IJR8nc7gB7FOVXpbELsNVwk/1UeRB5iBxohvBEKa82aZ1TJa8DAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+kw3b1piTbSO2+7GiExiLCPO2oMB8GA1UdIwQY
MBaAFFDqWstEeyzrkyoD8pAILcdvjkDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUt
NWNhOGFjMTgwOTZkLzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xMGVkZWYtMjUzZC00OWIxLTk2OWUtNWNhOGFjMTgwOTZk
LzEvVU9wYXkwUjdMT3VUS2dQeWtBZ3R4Mi1PUU9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTPz7D6p
A9vtBeKLdLKxFB3/9l8SXp7lWSF3zMc/bYVkJUPTGfhh2KXyed40smqs0TNeUzi/
2NwFI1OjBgorH5D+mwJd0QqgJxB6TS6t/HYyTsT7PkiM2uFP0B708w4ZZ+8nVXrB
yECZ5oeqGe/PIIKw9SBOlGl1QppeA+WRlrGmRlQ/MD/r+CxP8cajD79iiK1ozjyW
qD+2swlbVYFbMpzM3V7IO/7Xu/lD6kJYR9Nfeaz+jkiu+dt0SRyWYGnzIEYdYlCK
6nuxO5Blb5eLov9KFTzL7GAwPL0yept/QYW7FITP2A868CBREpVgtgbewn1g0NY6
yiH6UmN2YH61Xg==
-----END CERTIFICATE-----
Generated at Thu May 1 14:43:27 2025 by rpki-client