Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
File: U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft (raw, json)
Hash identifier: 7Zg1T1//Tfl0eofUY+Uju35+ykLfl/XtH7g9hYm91pM=
Subject key identifier: 85:3B:A9:FF:26:20:74:E9:44:B8:D0:56:F9:A5:DF:AE:83:44:77:1C
Authority key identifier: 53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
Certificate issuer: /CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Certificate serial: 0194BC3C9926FC2BFC9E29A781C4AF6B587F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
Manifest number: 0CBD
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl (hash: 51qO6u+fME8jhqnaVk3E4AmctnqTW90f6VpUbB2mOd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:99:26:fc:2b:fc:9e:29:a7:81:c4:af:6b:58:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e32c5f895fb12e6d674e0b16f6eee5e512645d
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=853ba9ff262074e944b8d056f9a5dfae8344771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d7:04:9e:f9:f3:17:76:fa:44:00:3b:e5:5e:
8f:8e:95:ee:ab:99:2d:2c:b2:31:a7:66:87:5c:41:
05:ff:73:7c:5c:fd:de:ea:1c:29:ee:1a:9a:3f:13:
25:35:01:17:5f:d9:96:5d:43:76:77:e2:1e:0d:ee:
37:87:83:da:d3:46:3e:6b:b4:b4:89:30:ef:1d:61:
4d:5a:62:3e:75:82:6e:8c:66:13:d9:cc:0a:21:7f:
84:dd:1d:b6:a7:32:cf:21:2b:b7:32:35:b2:21:9c:
f0:17:3f:9c:3b:f2:80:bb:43:fe:37:1a:80:61:ff:
19:c4:2f:8e:e9:76:a3:4b:8f:d4:b5:a1:76:74:94:
7b:f6:da:62:32:7e:6a:30:a5:0e:d1:82:eb:ab:d9:
8d:04:01:ac:73:6a:ed:93:f6:93:46:32:b0:d2:15:
e1:bd:8a:77:90:4a:9b:ba:4a:2b:a3:d1:4b:35:58:
20:f2:52:83:e7:eb:50:53:7d:5a:92:e0:55:3a:4d:
4c:ca:59:7a:62:21:b2:d8:3c:00:ac:f3:57:06:ea:
cc:6f:09:4d:7d:4e:46:25:d8:e0:81:76:63:2f:e4:
0f:2c:7b:9e:a8:af:d0:1c:1b:0f:8c:e7:59:8b:c1:
11:c4:cf:ec:dc:62:f0:80:44:f9:b3:3a:7f:1c:ef:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:A9:FF:26:20:74:E9:44:B8:D0:56:F9:A5:DF:AE:83:44:77:1C
X509v3 Authority Key Identifier:
keyid:53:E3:2C:5F:89:5F:B1:2E:6D:67:4E:0B:16:F6:EE:E5:E5:12:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-MsX4lfsS5tZ04LFvbu5eUSZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/865f08-4633-4edc-bc8d-3084f767c2b6/1/U-MsX4lfsS5tZ04LFvbu5eUSZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:50:56:89:97:c0:61:56:d9:8b:d6:50:55:ba:75:c2:0a:0f:
cb:2d:ad:3d:0d:26:57:23:55:c7:8d:8e:e1:27:b5:67:c6:28:
ef:95:42:28:22:a7:66:1c:57:2e:39:00:13:ec:6c:42:bc:74:
d6:c5:19:01:2e:fe:7a:a7:10:99:57:67:b0:de:cc:3a:70:24:
83:3d:2c:0e:60:04:89:00:4c:f9:a3:5d:12:6d:15:3e:ed:88:
86:1d:bf:4f:52:d6:5f:a6:aa:af:11:97:18:bd:fe:34:53:78:
2e:7c:55:8c:30:c4:9b:11:7e:8d:9b:77:12:0c:23:64:93:c4:
d6:3b:0a:46:9e:17:c9:91:2a:c4:a0:f5:35:43:5d:ea:c7:eb:
40:07:95:f3:76:4d:b5:17:e7:0c:c5:9e:10:6f:b6:58:53:94:
13:6f:1b:19:40:28:7b:03:c4:f9:2d:ea:87:fe:8e:39:e1:82:
55:d9:9d:92:29:f8:63:51:ef:7d:77:66:da:49:48:6a:69:4b:
24:38:51:20:ca:a8:23:93:b7:de:49:e0:3c:17:58:92:d3:24:
2b:82:e8:bb:59:02:ee:22:6b:b2:20:a9:c1:93:22:bf:90:a7:
75:0d:cc:4b:58:99:ac:b3:a9:cf:d7:a4:79:91:10:1b:2e:8d:
a8:5c:c2:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJkm/Cv8nimngcSva1h/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZTMyYzVmODk1ZmIxMmU2ZDY3NGUwYjE2ZjZlZWU1ZTUx
MjY0NWQwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
Eyg4NTNiYTlmZjI2MjA3NGU5NDRiOGQwNTZmOWE1ZGZhZTgzNDQ3NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NcEnvnzF3b6RAA75V6PjpXuq5kt
LLIxp2aHXEEF/3N8XP3e6hwp7hqaPxMlNQEXX9mWXUN2d+IeDe43h4Pa00Y+a7S0
iTDvHWFNWmI+dYJujGYT2cwKIX+E3R22pzLPISu3MjWyIZzwFz+cO/KAu0P+NxqA
Yf8ZxC+O6XajS4/UtaF2dJR79tpiMn5qMKUO0YLrq9mNBAGsc2rtk/aTRjKw0hXh
vYp3kEqbukoro9FLNVgg8lKD5+tQU31akuBVOk1Myll6YiGy2DwArPNXBurMbwlN
fU5GJdjggXZjL+QPLHueqK/QHBsPjOdZi8ERxM/s3GLwgET5szp/HO8F+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU7qf8mIHTpRLjQVvml366DRHccMB8GA1UdIwQY
MBaAFFPjLF+JX7EubWdOCxb27uXlEmRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS1Nc1g0bGZzUzV0WjA0TEZ2YnU1ZVVTWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NjVmMDgtNDYzMy00ZWRjLWJjOGQt
MzA4NGY3NjdjMmI2LzEvVS1Nc1g0bGZzUzV0WjA0TEZ2YnU1ZVVTWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NjVmMDgtNDYzMy00ZWRjLWJjOGQtMzA4NGY3NjdjMmI2
LzEvVS1Nc1g0bGZzUzV0WjA0TEZ2YnU1ZVVTWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFBWiZfA
YVbZi9ZQVbp1wgoPyy2tPQ0mVyNVx42O4Se1Z8Yo75VCKCKnZhxXLjkAE+xsQrx0
1sUZAS7+eqcQmVdnsN7MOnAkgz0sDmAEiQBM+aNdEm0VPu2Ihh2/T1LWX6aqrxGX
GL3+NFN4LnxVjDDEmxF+jZt3EgwjZJPE1jsKRp4XyZEqxKD1NUNd6sfrQAeV83ZN
tRfnDMWeEG+2WFOUE28bGUAoewPE+S3qh/6OOeGCVdmdkin4Y1HvfXdm2klIamlL
JDhRIMqoI5O33kngPBdYktMkK4Lou1kC7iJrsiCpwZMiv5CndQ3MS1iZrLOpz9ek
eZEQGy6NqFzCpg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:41 2025 by rpki-client