Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: lVh5Q279ViFd3OMgiD7UO7TWSmEJoeWD5E1i8wM74kw=
Subject key identifier: 98:37:04:5E:87:BF:4C:80:52:E6:9E:6D:46:6E:57:0B:EE:84:55:31
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 0194BBCED08B69489F1A1E016DBE69833329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: TWL0sQO+nzDRew5LIB9d/a8pAeOyYA9qOXT8Nayhv8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:8b:69:48:9f:1a:1e:01:6d:be:69:83:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=9837045e87bf4c8052e69e6d466e570bee845531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:f0:71:80:43:cf:c6:c3:4f:fa:4d:3d:30:
a4:aa:ad:f1:9c:dd:90:85:1c:66:4f:6e:55:72:da:
84:c3:69:2f:8a:f3:b7:c3:48:3b:86:ce:ac:77:9c:
59:05:3a:2e:09:33:6f:07:e6:79:46:97:4e:42:6f:
47:dd:a2:c0:89:c0:3c:ca:1c:a0:8c:ea:df:1c:ea:
49:32:8e:0f:93:ca:08:9e:fe:0d:e2:f2:dd:38:ab:
9c:fc:bf:b6:dd:e4:08:8e:82:11:30:ce:eb:53:86:
1c:52:2a:16:89:5e:4c:d0:0f:e5:1c:a1:12:d4:c6:
38:e4:fa:71:e0:b3:bc:31:f2:b3:0f:ce:19:8c:73:
6d:72:1b:18:00:08:5b:55:ef:15:86:35:78:96:19:
9c:76:b9:96:6a:58:77:a7:4e:7f:67:ab:29:5a:f8:
e6:e1:4d:d9:a9:96:a8:91:5a:4f:53:11:1d:51:71:
a2:dd:77:9a:e3:80:72:a6:3d:8a:de:aa:9d:71:8b:
5f:9d:d8:52:bb:e4:d8:ce:2f:96:31:6a:c6:5c:3d:
42:5a:dd:3d:eb:52:76:4a:06:f1:cb:d3:26:37:09:
2c:a0:3c:d0:7b:1f:1d:ec:0d:5f:8c:2f:11:0e:ed:
a2:fe:98:16:a8:cd:f6:19:28:a7:5f:44:0a:39:45:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:04:5E:87:BF:4C:80:52:E6:9E:6D:46:6E:57:0B:EE:84:55:31
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e1:76:6a:a5:51:92:c6:7d:e0:da:9b:62:09:b2:3f:d1:ce:
08:15:5a:0b:82:a9:80:93:b3:a5:dc:51:4d:a7:dd:7c:05:a6:
7d:90:90:68:49:d1:72:72:13:82:76:c9:37:03:5e:6c:b8:00:
87:f3:f5:67:ff:67:9b:24:3e:95:5e:d0:f1:87:f8:a6:5b:ac:
13:f0:d6:4f:4e:4c:b5:8d:8d:eb:77:3c:8b:20:5d:5d:e0:e8:
f9:54:e7:cf:1d:05:45:a0:b6:d1:fa:92:13:46:63:bc:3e:d4:
cf:f7:1f:2a:d4:e1:ad:a6:68:65:45:6c:10:65:a1:a2:cd:33:
1f:c4:92:14:97:24:2b:d9:c7:7f:1c:37:a6:e6:73:6d:fb:cc:
bf:5e:5a:97:57:4d:63:9e:e3:05:00:20:35:37:8c:7b:2b:e6:
a2:a9:f7:31:4c:a8:ee:66:33:6e:15:ed:b7:cf:69:cb:a9:2e:
f3:ff:33:3e:7b:24:96:19:96:80:19:cd:73:c8:a5:41:78:c6:
0d:bd:34:fe:89:f5:1a:15:2c:a2:7f:77:1f:53:ca:45:04:a7:
f9:0e:b5:40:64:3a:13:e3:15:85:51:ee:bd:d9:ff:3c:40:f4:
42:fb:0e:bc:2e:b1:87:5b:26:64:0d:14:3b:d7:fb:3f:e7:ac:
f6:c9:ef:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztCLaUifGh4Bbb5pgzMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNDc2MzE4ZDcxYmY2NThmOWE4NDVmNTRhYjI3YmQ4OTk4
OTI0MzcwHhcNMjUwMTMxMTAwMTIwWhcNMjUwMjAxMTAwMTIwWjAzMTEwLwYDVQQD
Eyg5ODM3MDQ1ZTg3YmY0YzgwNTJlNjllNmQ0NjZlNTcwYmVlODQ1NTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwDwcYBDz8bDT/pNPTCkqq3xnN2Q
hRxmT25VctqEw2kvivO3w0g7hs6sd5xZBTouCTNvB+Z5RpdOQm9H3aLAicA8yhyg
jOrfHOpJMo4Pk8oInv4N4vLdOKuc/L+23eQIjoIRMM7rU4YcUioWiV5M0A/lHKES
1MY45Ppx4LO8MfKzD84ZjHNtchsYAAhbVe8VhjV4lhmcdrmWalh3p05/Z6spWvjm
4U3ZqZaokVpPUxEdUXGi3Xea44Bypj2K3qqdcYtfndhSu+TYzi+WMWrGXD1CWt09
61J2Sgbxy9MmNwksoDzQex8d7A1fjC8RDu2i/pgWqM32GSinX0QKOUXWCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg3BF6Hv0yAUuaebUZuVwvuhFUxMB8GA1UdIwQY
MBaAFFFHYxjXG/ZY+ahF9Uqye9iZiSQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUt
NjM3OTljMDI2YTU3LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82MjA3ZTgtZWViNS00MzM0LThkZmUtNjM3OTljMDI2YTU3
LzEvVVVkakdOY2I5bGo1cUVYMVNySjcySm1KSkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuF2aqVR
ksZ94NqbYgmyP9HOCBVaC4KpgJOzpdxRTafdfAWmfZCQaEnRcnITgnbJNwNebLgA
h/P1Z/9nmyQ+lV7Q8Yf4plusE/DWT05MtY2N63c8iyBdXeDo+VTnzx0FRaC20fqS
E0ZjvD7Uz/cfKtThraZoZUVsEGWhos0zH8SSFJckK9nHfxw3puZzbfvMv15al1dN
Y57jBQAgNTeMeyvmoqn3MUyo7mYzbhXtt89py6ku8/8zPnsklhmWgBnNc8ilQXjG
Db00/on1GhUson93H1PKRQSn+Q61QGQ6E+MVhVHuvdn/PED0QvsOvC6xh1smZA0U
O9f7P+es9snvOw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:58 2025 by rpki-client