Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File: ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier: pD1u3LjSjbl2Ii6a5ykIl36SumgzgkE37Ep7qxYr4Kk=
Subject key identifier: 14:18:EB:6C:0C:B1:27:63:24:3F:FF:8D:6D:73:51:83:DD:10:3F:E9
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer: /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial: 0194BBCDBBE7B3682DAEDC3F9566E7312FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number: 1109
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: lmg+A60L5ooev1Icl3f76j1v0Y3ong8ZoFeFmRB/q30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:e7:b3:68:2d:ae:dc:3f:95:66:e7:31:2f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=1418eb6c0cb12763243fff8d6d735183dd103fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:25:d8:05:e8:e8:1f:8d:94:f1:d0:40:7f:
be:d8:b8:7c:6c:98:58:90:09:16:2e:c4:01:03:89:
db:b8:13:fc:be:31:cb:bb:e8:76:32:4a:37:cf:b9:
83:9f:f0:57:8a:02:c8:cd:b9:60:79:c4:4b:7e:d1:
e0:9c:a3:a2:e8:86:87:c5:62:17:9e:38:80:cd:fb:
fb:e8:0b:ec:ca:15:70:c6:31:df:e8:d2:e7:03:c7:
ce:94:c2:96:cc:58:45:fc:36:7e:ef:79:57:f1:b5:
ae:48:24:e9:d5:27:f8:22:24:4c:df:be:07:8d:78:
5b:b9:95:fa:32:90:70:8f:d1:54:6f:96:fc:72:5b:
f3:4c:85:6c:f8:55:4f:f9:c9:76:4d:9f:37:d1:c8:
32:b8:ab:0e:a9:de:f5:cc:45:a1:43:e6:6b:38:72:
57:86:2a:f0:ba:ed:f9:29:96:f0:30:38:22:11:55:
5b:f7:84:8c:7f:09:a2:4e:2d:f2:d9:72:36:98:ba:
da:ab:37:a9:86:ba:61:bc:af:4f:39:59:d5:35:95:
48:a0:e4:12:a9:71:d3:e6:fc:85:ad:2d:7e:77:42:
4f:dd:43:e0:66:67:fc:a7:2c:4a:1f:0a:c5:df:a7:
b0:15:43:1b:1c:e5:60:82:54:f5:3a:7c:f5:5e:cc:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:EB:6C:0C:B1:27:63:24:3F:FF:8D:6D:73:51:83:DD:10:3F:E9
X509v3 Authority Key Identifier:
keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:16:b1:c9:40:4c:6e:9e:c9:0f:00:8c:83:2a:5f:32:81:
67:31:05:04:b0:bb:03:8e:f0:6c:75:ca:20:0d:47:a2:f1:f5:
0a:bf:57:58:cb:eb:f7:ac:dc:98:37:85:e5:19:b0:c2:8e:5d:
f8:45:78:07:ad:cf:83:a0:d2:7e:12:e3:6f:b9:38:a9:c8:aa:
1d:68:2e:43:87:73:27:c4:4e:d6:2a:22:69:36:91:b6:5c:75:
c3:04:25:7a:b4:43:00:43:6e:88:53:fc:f0:33:a0:a5:0b:56:
1e:0b:a5:e3:c9:9d:98:9f:a1:c9:37:8e:fa:bd:9d:f5:b8:32:
d6:bb:49:71:58:50:7c:ea:c8:86:16:fe:20:b2:e7:cc:c7:04:
f7:74:1a:92:ce:bf:7a:86:f7:4d:4d:19:c2:5e:79:c6:e6:ad:
ad:7e:bb:2f:8c:50:a0:01:7f:83:92:38:28:2e:b7:3e:12:65:
7e:bc:b2:fd:97:88:50:a4:8b:43:99:2d:78:c7:5c:19:a1:4c:
46:46:eb:41:e3:c9:dc:6c:92:b8:9f:c2:9a:a0:7c:08:f7:d0:
87:a6:38:77:08:a9:cf:77:ec:5d:e8:32:bc:c2:4e:e2:10:ab:
43:ff:21:5e:46:a9:22:ef:38:5d:29:34:2f:21:ab:32:ec:58:
56:e9:d7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbvns2gtrtw/lWbnMS/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMzQ4ZmRlMWIzYWQyMmNmMjhmZTY0MDMwYWUyZmU0ZjIy
Y2I3ZmIwHhcNMjUwMTMxMTAwMDA5WhcNMjUwMjAxMTAwMDA5WjAzMTEwLwYDVQQD
EygxNDE4ZWI2YzBjYjEyNzYzMjQzZmZmOGQ2ZDczNTE4M2RkMTAzZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtawl2AXo6B+NlPHQQH++2Lh8bJhY
kAkWLsQBA4nbuBP8vjHLu+h2Mko3z7mDn/BXigLIzblgecRLftHgnKOi6IaHxWIX
njiAzfv76AvsyhVwxjHf6NLnA8fOlMKWzFhF/DZ+73lX8bWuSCTp1Sf4IiRM374H
jXhbuZX6MpBwj9FUb5b8clvzTIVs+FVP+cl2TZ830cgyuKsOqd71zEWhQ+ZrOHJX
hirwuu35KZbwMDgiEVVb94SMfwmiTi3y2XI2mLraqzephrphvK9POVnVNZVIoOQS
qXHT5vyFrS1+d0JP3UPgZmf8pyxKHwrF36ewFUMbHOVgglT1Onz1XsxiiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQY62wMsSdjJD//jW1zUYPdED/pMB8GA1UdIwQY
MBaAFLo0j94bOtIs8o/mQDCuL+TyLLf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYt
YTU0NzYwMzZmZjMxLzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82N2NhZTgtMmVkMi00NTE3LTliMmYtYTU0NzYwMzZmZjMx
LzEvdWpTUDNoczYwaXp5ai1aQU1LNHY1UElzdF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOa4WsclA
TG6eyQ8AjIMqXzKBZzEFBLC7A47wbHXKIA1HovH1Cr9XWMvr96zcmDeF5Rmwwo5d
+EV4B63Pg6DSfhLjb7k4qciqHWguQ4dzJ8RO1ioiaTaRtlx1wwQlerRDAENuiFP8
8DOgpQtWHgul48mdmJ+hyTeO+r2d9bgy1rtJcVhQfOrIhhb+ILLnzMcE93Qaks6/
eob3TU0Zwl55xuatrX67L4xQoAF/g5I4KC63PhJlfryy/ZeIUKSLQ5kteMdcGaFM
RkbrQePJ3GySuJ/CmqB8CPfQh6Y4dwipz3fsXegyvMJO4hCrQ/8hXkapIu84XSk0
LyGrMuxYVunXDA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:43 2025 by rpki-client