Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: BuI68/Lvz/I/1aWfib5tLQhKm+SYzdR461gIR60aqz4=
Subject key identifier: 7A:EF:66:24:B7:76:A1:76:68:AC:3F:92:1C:AC:01:39:6F:A0:DC:D6
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 0194BD4E8C55420CBC9B6CB6418C4308EA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 12BB
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: JFTmr1AiSuwS+gRMPR9lNdJ6VFQxhWB8LEqxWOvPHLA=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8c:55:42:0c:bc:9b:6c:b6:41:8c:43:08:ea:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=7aef6624b776a17668ac3f921cac01396fa0dcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:2e:ad:84:51:12:72:3c:f5:73:ed:ac:5a:
6d:46:64:9d:00:f4:57:9a:05:c5:f2:a6:c6:ca:61:
b0:33:33:39:f7:01:92:c0:da:14:97:ab:b5:26:1a:
e6:c5:91:0e:80:da:a2:24:1f:ae:0d:f5:75:93:e8:
bf:fc:0f:bb:b2:13:55:90:21:16:84:9e:51:83:01:
6f:0f:9a:9b:5b:96:d0:c3:dd:26:9e:32:1d:43:3c:
a5:e3:0a:22:07:d6:dc:96:02:78:d8:98:72:65:42:
7c:72:a9:72:57:b3:c5:7f:2e:b3:94:e8:c9:f6:09:
f1:da:3b:a7:17:3f:4f:42:66:d6:60:ea:b3:23:42:
15:f6:80:3f:89:26:a4:73:5e:f6:9c:f3:60:d8:ba:
81:f2:9b:ea:02:46:cd:55:b4:af:1c:0b:85:2c:08:
f9:fe:f6:a5:06:07:a7:00:a0:90:64:92:25:3c:a8:
6e:e3:a1:fc:f2:96:b8:94:1e:43:e5:ea:b4:40:47:
30:7b:63:c0:da:31:7b:a9:85:13:aa:ed:14:d1:96:
ed:49:0d:41:31:d6:00:b1:58:70:e9:c1:63:88:e1:
ee:ff:07:ec:6f:7f:fa:74:ac:b3:68:a1:8d:fc:dc:
5c:05:b4:99:9a:9b:96:99:98:20:75:ba:81:ca:ae:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:66:24:B7:76:A1:76:68:AC:3F:92:1C:AC:01:39:6F:A0:DC:D6
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c7:e7:ba:ee:c2:04:76:67:28:96:24:8f:cc:0f:5b:5f:15:
01:5c:5c:58:4f:fa:c7:9c:02:ab:1c:65:25:4a:d6:29:e4:77:
d7:e9:b3:0e:bb:38:ae:96:75:be:7f:30:8d:79:a7:94:08:84:
32:fc:7b:c9:bc:65:ed:0c:ec:90:d3:6a:22:70:1b:e1:14:71:
31:d1:e3:85:58:95:1b:d7:c8:ed:84:f4:59:75:80:a7:ce:f1:
8c:1c:02:87:78:3f:cf:e2:6c:46:c9:86:c8:93:17:59:a3:4b:
0a:70:8d:83:d5:98:fa:be:23:11:b2:8d:2e:3e:16:f5:64:6d:
e3:a6:e2:42:bd:af:e5:0f:f5:d4:27:dd:83:2f:a0:02:52:7d:
2b:e4:57:2a:b2:b1:b1:e1:59:5b:a5:ec:4b:36:3d:00:99:0d:
dd:7f:c8:2b:ca:8d:55:10:9a:5f:df:bb:d9:9d:92:db:17:59:
a2:cf:3d:a2:42:68:44:11:2c:03:49:e3:d5:d6:c4:96:07:c8:
59:4a:a0:ec:08:08:c8:26:cc:0d:5f:1b:ac:14:c8:98:a4:dd:
3c:2e:84:4f:b0:61:b2:05:13:12:1a:ad:6b:61:f7:5c:2a:36:
7d:92:c5:18:ea:1e:18:62:1c:a6:07:a0:f2:42:9f:7a:78:0b:
f8:50:49:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToxVQgy8m2y2QYxDCOo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzAwNmQ2NDAxZWY0MmZhNTBlMjQwOTU1MDBiMmZkYWZh
ZDViYWEwHhcNMjUwMTMxMTcwMDI5WhcNMjUwMjAxMTcwMDI5WjAzMTEwLwYDVQQD
Eyg3YWVmNjYyNGI3NzZhMTc2NjhhYzNmOTIxY2FjMDEzOTZmYTBkY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt8urYRREnI89XPtrFptRmSdAPRX
mgXF8qbGymGwMzM59wGSwNoUl6u1JhrmxZEOgNqiJB+uDfV1k+i//A+7shNVkCEW
hJ5RgwFvD5qbW5bQw90mnjIdQzyl4woiB9bclgJ42JhyZUJ8cqlyV7PFfy6zlOjJ
9gnx2junFz9PQmbWYOqzI0IV9oA/iSakc172nPNg2LqB8pvqAkbNVbSvHAuFLAj5
/valBgenAKCQZJIlPKhu46H88pa4lB5D5eq0QEcwe2PA2jF7qYUTqu0U0ZbtSQ1B
MdYAsVhw6cFjiOHu/wfsb3/6dKyzaKGN/NxcBbSZmpuWmZggdbqByq43mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrvZiS3dqF2aKw/khysATlvoNzWMB8GA1UdIwQY
MBaAFFDABtZAHvQvpQ4kCVUAsv2vrVuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEt
YzJkY2RjODVlNTg0LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kZmFiMzYtNjU3Zi00ZTAyLTgzNjEtYzJkY2RjODVlNTg0
LzEvVU1BRzFrQWU5Qy1sRGlRSlZRQ3lfYS10VzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcfnuu7C
BHZnKJYkj8wPW18VAVxcWE/6x5wCqxxlJUrWKeR31+mzDrs4rpZ1vn8wjXmnlAiE
Mvx7ybxl7QzskNNqInAb4RRxMdHjhViVG9fI7YT0WXWAp87xjBwCh3g/z+JsRsmG
yJMXWaNLCnCNg9WY+r4jEbKNLj4W9WRt46biQr2v5Q/11Cfdgy+gAlJ9K+RXKrKx
seFZW6XsSzY9AJkN3X/IK8qNVRCaX9+72Z2S2xdZos89okJoRBEsA0nj1dbElgfI
WUqg7AgIyCbMDV8brBTImKTdPC6ET7BhsgUTEhqta2H3XCo2fZLFGOoeGGIcpgeg
8kKfengL+FBJ/A==
-----END CERTIFICATE-----
Generated at Thu May 1 09:24:16 2025 by rpki-client