Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: h14QG2ULFptHj7Npwb0AS/DcoH4E0P+bduf4GKqZizM=
Subject key identifier: D7:6C:B5:6A:46:A8:5A:1A:88:9B:5A:1A:40:6C:C3:E7:B0:10:91:61
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 0194BCE0AD711D2F4D54FD8240E3C9BDAB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 0D2A
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 0GO9N8_ZU6mLb9HyR_ryM-55D8I.roa (hash: S6Bg53x69SGVZZJx8hMBIVFU+2Kh/XK3EVv62pKG+EU=)
2: Q5_xDrZBGlwnEe-JRBQNOkYuKX8.roa (hash: 2EnqMwQmcwDGxfkhN6xhrYLquapliDnIs7szXzYdX/g=)
3: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: t207vi4mroHJ1uK9+KbKH28Na9Kzq7vZFfq8fNmErM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:71:1d:2f:4d:54:fd:82:40:e3:c9:bd:ab:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=d76cb56a46a85a1a889b5a1a406cc3e7b0109161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:3b:ec:20:42:a3:2c:0f:8b:28:f5:f0:c5:
e0:0d:36:8a:d9:74:1e:65:70:c8:0e:03:71:7b:d4:
5a:42:71:dd:84:82:44:2e:73:8c:b1:62:ac:66:00:
24:32:b1:3f:29:ad:29:5c:69:80:df:43:a9:01:79:
fc:89:a0:d4:fe:6a:09:a7:55:5d:94:55:a6:a9:45:
4c:e1:2d:ed:2e:aa:03:c3:d6:c9:a0:86:d7:c8:67:
44:53:56:88:c6:a6:69:2d:a4:0b:db:dd:65:32:fc:
f3:7d:5a:86:ca:2d:b1:a8:6e:19:ad:2c:6a:bb:66:
fc:ef:92:32:d2:2a:13:4e:ab:62:08:9a:84:e0:a2:
5e:b3:88:b0:10:33:fe:c3:37:00:85:33:55:5e:93:
27:0f:86:62:7a:f2:92:54:ba:aa:6a:39:60:c2:b4:
c2:f7:0c:b9:f5:ab:09:e9:00:30:32:6e:30:36:fd:
07:9f:f4:fb:1c:01:49:56:43:85:4a:35:a1:0b:87:
0a:03:27:d5:43:94:39:2c:e7:6f:b7:c9:a8:7e:04:
b0:7a:ed:c1:23:07:c0:55:02:6f:45:ba:18:4c:65:
e6:38:5d:36:ec:ab:fa:4b:07:06:7f:c7:f6:db:5c:
12:bc:e8:2b:e4:07:5d:ac:bb:49:06:2b:bd:d9:b3:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:B5:6A:46:A8:5A:1A:88:9B:5A:1A:40:6C:C3:E7:B0:10:91:61
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b1:a2:93:7c:a4:6e:b2:34:79:76:3b:22:c0:a1:1f:ce:76:
f7:30:d3:c3:1c:98:16:ac:b8:d5:82:69:26:4f:96:89:a0:74:
75:d8:2f:29:50:49:33:cd:40:27:6b:a6:09:58:1d:67:f2:f8:
fb:f3:c4:94:de:3a:01:61:26:95:6a:6a:f2:02:1e:a8:a2:bb:
da:85:05:bb:ac:5d:54:93:ac:b4:09:ec:a0:d3:84:74:38:bf:
f2:03:12:e4:ee:bf:18:9b:66:e5:1e:a9:cc:07:2b:17:93:71:
7f:70:8b:51:a1:15:c9:85:20:b6:e0:49:c4:77:1f:24:a0:7e:
1f:04:e8:ad:9e:8e:c5:7f:51:ca:5b:45:e5:ca:e4:cc:e6:50:
63:60:ea:d4:5c:62:6e:42:47:c2:d7:4b:2b:1e:11:8d:0f:ad:
d3:ba:eb:ee:c2:89:00:07:df:fc:ef:b9:99:12:2c:cb:d6:88:
44:ad:a4:f3:70:de:cc:56:a5:9d:12:a7:56:b7:94:87:73:69:
9d:fa:de:92:ce:54:de:be:34:af:ec:a9:be:63:f8:2e:74:ce:
32:57:44:f5:ab:e0:10:c7:97:aa:8f:44:56:4d:d5:cf:6a:09:
72:9f:99:ae:2e:37:74:44:5c:27:2b:fd:73:8c:6f:5e:09:cc:
4b:3b:ae:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84K1xHS9NVP2CQOPJvasVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWJjNjNlNjhjOTA5MzJiNGZjMjg5OTdmYzNiZjc4ZGUz
YjM3NDMwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
EyhkNzZjYjU2YTQ2YTg1YTFhODg5YjVhMWE0MDZjYzNlN2IwMTA5MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEM77CBCoywPiyj18MXgDTaK2XQe
ZXDIDgNxe9RaQnHdhIJELnOMsWKsZgAkMrE/Ka0pXGmA30OpAXn8iaDU/moJp1Vd
lFWmqUVM4S3tLqoDw9bJoIbXyGdEU1aIxqZpLaQL291lMvzzfVqGyi2xqG4ZrSxq
u2b875Iy0ioTTqtiCJqE4KJes4iwEDP+wzcAhTNVXpMnD4ZievKSVLqqajlgwrTC
9wy59asJ6QAwMm4wNv0Hn/T7HAFJVkOFSjWhC4cKAyfVQ5Q5LOdvt8mofgSweu3B
IwfAVQJvRboYTGXmOF027Kv6SwcGf8f221wSvOgr5AddrLtJBiu92bPzHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdstWpGqFoaiJtaGkBsw+ewEJFhMB8GA1UdIwQY
MBaAFFCbxj5oyQkytPwomX/Dv3jeOzdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDkt
MTZlZDNjZDBjNzJhLzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zNGM1YjItYjZlMy00YjIzLWE2MDktMTZlZDNjZDBjNzJh
LzEvVUp2R1BtakpDVEswX0NpWmY4T19lTjQ3TjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLGik3yk
brI0eXY7IsChH8529zDTwxyYFqy41YJpJk+WiaB0ddgvKVBJM81AJ2umCVgdZ/L4
+/PElN46AWEmlWpq8gIeqKK72oUFu6xdVJOstAnsoNOEdDi/8gMS5O6/GJtm5R6p
zAcrF5Nxf3CLUaEVyYUgtuBJxHcfJKB+HwTorZ6OxX9RyltF5crkzOZQY2Dq1Fxi
bkJHwtdLKx4RjQ+t07rr7sKJAAff/O+5mRIsy9aIRK2k83DezFalnRKnVreUh3Np
nfreks5U3r40r+ypvmP4LnTOMldE9avgEMeXqo9EVk3Vz2oJcp+Zri43dERcJyv9
c4xvXgnMSzuumA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:31 2025 by rpki-client