Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: LR5+ZoxMxCMsfsa/mCyZrV5mnuoPcKx6ztvN7uoB4i0=
Subject key identifier: 53:A7:1F:1B:D4:35:A2:37:ED:AD:E7:AA:2E:A4:D9:0D:47:20:AB:E1
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0194BCA97329E494AC1217D2A13D1998337E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: 1n50FpoS8TdL+hWAp5nU1Aa4j5Ob42yBanrD0mz8cGM=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:29:e4:94:ac:12:17:d2:a1:3d:19:98:33:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=53a71f1bd435a237edade7aa2ea4d90d4720abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:8c:9e:70:c0:1a:8b:d5:e8:f7:d3:fb:eb:
6a:bd:75:94:d9:b2:dc:7a:f1:93:4a:fc:65:7b:d9:
d3:ad:14:63:12:9f:69:b1:fe:17:7d:39:61:f6:61:
60:44:f3:de:26:b8:6e:38:09:9e:10:c9:6a:20:16:
f2:4f:04:0e:a4:f4:f3:72:6b:16:e3:a1:5c:4d:5a:
6b:87:26:e6:cc:66:df:ae:68:75:cf:d1:fb:a9:2b:
bc:13:56:f7:8d:ce:23:e3:f8:95:3e:74:69:9a:96:
d0:2d:d2:91:3c:ab:92:5e:34:68:d2:f8:1a:46:28:
2d:5b:b9:d9:e1:7f:84:fe:4e:30:af:d3:02:82:c9:
0f:ef:3f:38:51:e9:e4:7a:19:7d:87:4c:a9:7a:07:
3b:07:aa:97:66:18:b0:59:89:60:b6:76:3b:41:db:
46:11:f2:0d:a1:e7:30:d3:76:bd:41:68:e8:ea:fa:
95:84:b1:50:26:da:dd:aa:63:4d:de:50:db:82:fe:
01:17:09:c1:14:d5:c8:2d:c3:12:87:73:be:2d:e1:
ea:ca:2d:d8:90:d5:d7:ba:f5:28:b7:fa:a5:68:39:
b1:3c:f3:8d:4a:16:37:81:c0:5e:02:80:79:57:e4:
72:78:0c:3e:11:f4:2b:c9:47:47:86:8c:7b:8b:e6:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:1F:1B:D4:35:A2:37:ED:AD:E7:AA:2E:A4:D9:0D:47:20:AB:E1
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:bc:96:78:42:37:37:d2:73:9e:f4:8c:ec:5c:34:11:76:
d9:e9:68:2d:f5:b7:50:c6:cd:08:3a:bd:fc:98:d3:aa:f9:2c:
f2:12:9a:05:4f:5f:ef:65:f4:77:75:22:39:8d:4e:1f:98:26:
26:5a:42:40:68:79:d0:95:d1:21:d3:ef:35:b2:6a:9d:37:75:
a4:23:ba:5b:55:25:d9:67:94:54:ca:c1:81:06:cb:2b:3f:71:
2f:8c:d3:17:0b:e4:35:01:10:4c:01:25:1a:f5:e6:8f:a0:6a:
1b:46:96:5f:98:de:99:6c:53:0a:8e:44:ac:25:24:75:fd:32:
4b:57:07:a8:5d:9d:8f:5b:23:90:10:ae:ee:26:21:c7:25:f5:
10:23:25:e8:3a:e6:d0:1e:4c:21:bc:8b:97:2a:aa:b9:a6:b2:
95:b0:ac:96:89:8f:97:e2:f5:d9:7b:37:07:32:49:31:c1:62:
58:98:c8:0d:2d:f4:24:81:04:fc:2f:a4:9d:0d:88:6b:a3:87:
f0:13:44:6f:07:da:e2:73:b3:41:f2:b7:31:be:cf:76:03:c9:
a9:c9:3d:b7:10:60:b5:3e:5e:19:51:a9:eb:80:10:69:c8:48:
dd:80:30:76:58:6d:ef:96:4c:0e:6f:f9:6b:99:91:f4:d1:ba:
95:eb:b8:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXMp5JSsEhfSoT0ZmDN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTc2MTkxM2Y1NzVjNDExYzk5MjMyMmViYjA2Y2QyZjM3
ZjAyYTIwHhcNMjUwMTMxMTQwMDA4WhcNMjUwMjAxMTQwMDA4WjAzMTEwLwYDVQQD
Eyg1M2E3MWYxYmQ0MzVhMjM3ZWRhZGU3YWEyZWE0ZDkwZDQ3MjBhYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XKMnnDAGovV6PfT++tqvXWU2bLc
evGTSvxle9nTrRRjEp9psf4XfTlh9mFgRPPeJrhuOAmeEMlqIBbyTwQOpPTzcmsW
46FcTVprhybmzGbfrmh1z9H7qSu8E1b3jc4j4/iVPnRpmpbQLdKRPKuSXjRo0vga
RigtW7nZ4X+E/k4wr9MCgskP7z84Uenkehl9h0ypegc7B6qXZhiwWYlgtnY7QdtG
EfINoecw03a9QWjo6vqVhLFQJtrdqmNN3lDbgv4BFwnBFNXILcMSh3O+LeHqyi3Y
kNXXuvUot/qlaDmxPPONShY3gcBeAoB5V+RyeAw+EfQryUdHhox7i+ZSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOnHxvUNaI37a3nqi6k2Q1HIKvhMB8GA1UdIwQY
MBaAFFNXYZE/V1xBHJkjIuuwbNLzfwKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzct
MDRkZmMzNjYzZTM1LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85ZjAwYTktYjYwZi00ZTMyLTkwMzctMDRkZmMzNjYzZTM1
LzEvVTFkaGtUOVhYRUVjbVNNaTY3QnMwdk5fQXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+S8lnhC
NzfSc570jOxcNBF22eloLfW3UMbNCDq9/JjTqvks8hKaBU9f72X0d3UiOY1OH5gm
JlpCQGh50JXRIdPvNbJqnTd1pCO6W1Ul2WeUVMrBgQbLKz9xL4zTFwvkNQEQTAEl
GvXmj6BqG0aWX5jemWxTCo5ErCUkdf0yS1cHqF2dj1sjkBCu7iYhxyX1ECMl6Drm
0B5MIbyLlyqquaaylbCslomPl+L12Xs3BzJJMcFiWJjIDS30JIEE/C+knQ2Ia6OH
8BNEbwfa4nOzQfK3Mb7PdgPJqck9txBgtT5eGVGp64AQachI3YAwdlht75ZMDm/5
a5mR9NG6leu4dg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:14 2025 by rpki-client