Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: T3gxYY8uox7LEJSWjmi2XUeOLdBL+BJGmIIBSWtdmqk=
Subject key identifier: 57:58:93:C1:F9:C3:02:BC:19:81:44:1D:8E:04:D1:AE:DF:9C:C7:7D
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0194BD4EBED6274581227239168B9B55775E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0A7A
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: Gg5CjMV5RfwMVx6L6xfE5K7uo1teM9/WL1rMp0FElFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:d6:27:45:81:22:72:39:16:8b:9b:55:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=575893c1f9c302bc1981441d8e04d1aedf9cc77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:85:10:e2:20:12:2d:22:22:ac:bf:80:29:
9c:16:fa:0b:5a:97:6f:fb:62:fe:81:76:6e:cd:90:
fa:ff:81:db:72:9a:f5:c0:b0:4a:1d:9f:ca:f1:34:
c0:6e:f2:91:c7:21:73:46:86:29:a2:6c:40:c9:14:
92:4e:07:60:af:04:5f:ba:fb:ce:98:3c:a3:a0:64:
9d:c3:ac:4c:1e:41:1d:c6:cf:bf:1a:2a:af:03:53:
f2:b0:b8:24:ae:3c:64:8a:86:c6:50:14:77:e6:33:
4b:82:9b:14:22:f4:05:31:e2:97:ad:21:25:e8:1a:
cd:3a:f2:a1:e2:fc:cd:79:c3:fa:12:59:6b:92:d4:
56:38:ac:3b:91:4d:80:64:eb:95:ab:be:03:68:ba:
57:eb:64:9c:df:c1:5d:19:d8:0f:d7:1f:e9:da:c8:
11:6d:3d:04:2f:69:07:bb:f8:b5:10:07:8c:b0:a6:
f0:e1:1d:26:ea:0d:e8:8d:09:bf:ed:30:b0:c0:7a:
b8:f9:50:d5:40:bc:18:72:68:cc:b6:20:42:01:aa:
e3:46:8c:91:d4:f9:43:b6:88:0f:94:73:d8:23:b7:
9e:9b:1a:fb:75:23:e2:fb:9e:ae:a3:46:53:d5:bf:
a9:b9:a0:c2:91:25:22:22:0a:22:32:5d:04:23:4d:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:93:C1:F9:C3:02:BC:19:81:44:1D:8E:04:D1:AE:DF:9C:C7:7D
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:cd:80:93:ab:e3:ca:11:61:8e:ef:35:46:fd:5c:cc:36:
39:1e:db:98:7c:7a:ad:06:5c:f2:da:2f:3c:29:cf:70:88:90:
b9:e9:2e:1b:a0:16:57:96:fb:91:79:67:b9:a3:92:9d:c2:61:
ca:b1:7a:b9:17:c7:36:b5:b4:81:36:66:af:e6:12:8b:44:ee:
aa:f0:c0:59:a6:3b:de:22:19:2b:d1:5a:7e:27:6b:b8:df:64:
3a:7d:b5:b9:66:14:77:28:44:bd:a6:59:76:6b:15:d2:2b:65:
fb:1a:1e:6c:b2:63:bc:fb:52:82:a9:df:c7:4b:57:08:c5:e9:
41:68:e7:cd:8e:69:62:18:ce:dc:d6:e8:4d:7a:14:d1:9b:64:
e9:8e:d2:b1:78:77:93:37:77:de:a5:1f:f7:85:c2:6b:33:14:
6b:16:58:5b:05:bd:31:00:bb:fb:fa:c6:80:2f:2b:33:40:ed:
e9:f8:89:03:ad:71:ec:cd:00:1e:a2:49:20:f7:c3:aa:3e:f7:
62:ef:08:cd:b1:39:04:55:f2:43:64:92:4a:dd:c0:71:d9:ad:
9d:4e:4f:fd:ef:2e:3e:41:6c:e2:ff:a1:49:03:8d:88:e3:df:
55:90:18:87:6a:3f:3f:53:11:92:27:fd:9e:2f:ca:b2:67:d6:
2a:fa:e5:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr7WJ0WBInI5FoubVXdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4
MjhkZWEwHhcNMjUwMTMxMTcwMDQxWhcNMjUwMjAxMTcwMDQxWjAzMTEwLwYDVQQD
Eyg1NzU4OTNjMWY5YzMwMmJjMTk4MTQ0MWQ4ZTA0ZDFhZWRmOWNjNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uGFEOIgEi0iIqy/gCmcFvoLWpdv
+2L+gXZuzZD6/4Hbcpr1wLBKHZ/K8TTAbvKRxyFzRoYpomxAyRSSTgdgrwRfuvvO
mDyjoGSdw6xMHkEdxs+/GiqvA1PysLgkrjxkiobGUBR35jNLgpsUIvQFMeKXrSEl
6BrNOvKh4vzNecP6EllrktRWOKw7kU2AZOuVq74DaLpX62Sc38FdGdgP1x/p2sgR
bT0EL2kHu/i1EAeMsKbw4R0m6g3ojQm/7TCwwHq4+VDVQLwYcmjMtiBCAarjRoyR
1PlDtogPlHPYI7eemxr7dSPi+56uo0ZT1b+puaDCkSUiIgoiMl0EI0207QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdYk8H5wwK8GYFEHY4E0a7fnMd9MB8GA1UdIwQY
MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct
ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1
LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRjNgJOr
48oRYY7vNUb9XMw2OR7bmHx6rQZc8tovPCnPcIiQuekuG6AWV5b7kXlnuaOSncJh
yrF6uRfHNrW0gTZmr+YSi0TuqvDAWaY73iIZK9FafidruN9kOn21uWYUdyhEvaZZ
dmsV0itl+xoebLJjvPtSgqnfx0tXCMXpQWjnzY5pYhjO3NboTXoU0Ztk6Y7SsXh3
kzd33qUf94XCazMUaxZYWwW9MQC7+/rGgC8rM0Dt6fiJA61x7M0AHqJJIPfDqj73
Yu8IzbE5BFXyQ2SSSt3AcdmtnU5P/e8uPkFs4v+hSQONiOPfVZAYh2o/P1MRkif9
ni/KsmfWKvrlrw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client