Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: 12h80J0BDaGPVq4xaBqwL09PK8NT7Xiw82stehpqLqA=
Subject key identifier: EF:A5:87:5C:A1:87:9B:F6:5E:CB:23:E7:59:78:41:3D:56:46:41:01
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 0194BC3BFB22600260B0416804FD490BB95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: bULplsN0HLhFFMblS5pOSVvLbhvU21yUi5ro8S0VEHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:22:60:02:60:b0:41:68:04:fd:49:0b:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=efa5875ca1879bf65ecb23e75978413d56464101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:0b:ea:2a:2d:f4:ef:7a:60:44:54:52:22:
2b:3b:98:68:33:b7:b4:83:7d:5d:c9:fe:cb:c5:f7:
1a:b0:94:52:c2:89:26:1c:7d:a5:61:34:2f:66:f8:
b2:b8:23:9d:9c:07:62:e8:82:d6:79:69:28:d8:76:
27:3b:3f:ca:a0:f6:2d:07:d1:50:d7:ee:e1:56:8e:
1e:18:94:fc:e2:fb:55:86:43:d2:c4:8f:7f:5b:cf:
a9:06:22:01:45:af:1c:d1:de:57:50:21:10:c1:7a:
d6:06:6f:61:79:97:e8:c3:40:9a:d5:8c:8a:05:71:
6f:03:90:62:1b:68:fd:b3:43:f6:88:4d:0c:fb:63:
c1:b0:c8:38:0d:a3:8d:46:84:ae:f8:22:48:31:eb:
c0:8c:9a:bf:f8:ca:4b:53:09:c6:02:2e:f5:ba:47:
13:40:0b:e8:d4:c9:9b:50:04:59:53:8f:8e:c1:59:
b4:97:4c:ba:3d:d0:63:9d:2c:b5:ef:fc:b2:9b:19:
ed:84:47:6f:17:20:be:f8:76:63:43:a7:3f:cd:7e:
63:a8:d1:73:b9:32:5d:69:b0:a5:dd:7b:54:03:03:
06:00:aa:ae:b3:a2:7e:de:81:af:b1:fc:1f:fc:fe:
94:54:f6:c9:a8:f4:5a:de:c1:78:19:2b:79:e8:5d:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:87:5C:A1:87:9B:F6:5E:CB:23:E7:59:78:41:3D:56:46:41:01
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1d:9f:02:96:6f:bb:4f:2d:a9:2f:87:fb:6c:f5:a4:b0:c1:
ff:9a:af:db:32:22:09:fa:0a:50:5d:c9:d3:ef:3e:fa:b3:32:
30:bd:1b:f3:71:9e:57:d7:a8:23:7d:57:4d:85:6a:4e:9e:de:
98:c3:b3:80:11:33:92:36:b5:2f:5b:66:fa:89:29:22:20:d9:
5c:58:e0:f6:19:19:35:9e:9a:5e:ec:bc:7a:0f:68:f7:9c:6d:
e0:ab:86:46:32:3e:d8:3f:6b:cc:6e:11:4b:07:5a:8f:23:2d:
03:25:2d:4a:b7:cd:d2:71:30:fe:c1:b4:31:38:d9:e7:e2:8a:
60:7b:30:20:df:81:16:6c:53:d9:64:f9:0a:01:c4:02:3e:90:
40:65:32:2d:fa:7e:c7:7a:8b:6b:30:62:65:b9:85:d7:8d:6e:
31:58:20:4f:91:9b:c4:ca:f8:87:6c:ef:4c:f5:d5:a3:17:96:
2a:c1:1a:23:20:53:4d:b2:b8:13:6d:b5:be:3e:09:37:95:43:
26:d1:f5:97:eb:80:e1:44:5f:6b:6e:20:4d:f8:4c:4a:c7:80:
2d:98:5f:b4:97:4b:f5:5b:45:df:d7:40:d0:de:19:32:f8:36:
a8:10:0e:55:12:6e:8f:bc:52:ca:13:d1:d9:29:6f:19:59:7d:
00:5a:d2:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/siYAJgsEFoBP1JC7lfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZGNjOGMzNzcyMTc0ZTQ3YmFjOGI5MzJlNWJlYzdiNDdi
MWQ5MmIwHhcNMjUwMTMxMTIwMDM0WhcNMjUwMjAxMTIwMDM0WjAzMTEwLwYDVQQD
EyhlZmE1ODc1Y2ExODc5YmY2NWVjYjIzZTc1OTc4NDEzZDU2NDY0MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNcL6iot9O96YERUUiIrO5hoM7e0
g31dyf7LxfcasJRSwokmHH2lYTQvZviyuCOdnAdi6ILWeWko2HYnOz/KoPYtB9FQ
1+7hVo4eGJT84vtVhkPSxI9/W8+pBiIBRa8c0d5XUCEQwXrWBm9heZfow0Ca1YyK
BXFvA5BiG2j9s0P2iE0M+2PBsMg4DaONRoSu+CJIMevAjJq/+MpLUwnGAi71ukcT
QAvo1MmbUARZU4+OwVm0l0y6PdBjnSy17/yymxnthEdvFyC++HZjQ6c/zX5jqNFz
uTJdabCl3XtUAwMGAKqus6J+3oGvsfwf/P6UVPbJqPRa3sF4GSt56F2QEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+lh1yhh5v2Xssj51l4QT1WRkEBMB8GA1UdIwQY
MBaAFLvcyMN3IXTke6yLky5b7HtHsdkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUt
ZWQxNDJlNDY0MzM1LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjJjMzMtY2M5Yy00YmFmLWEwZWUtZWQxNDJlNDY0MzM1
LzEvdTl6SXczY2hkT1I3ckl1VExsdnNlMGV4MlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx2fApZv
u08tqS+H+2z1pLDB/5qv2zIiCfoKUF3J0+8++rMyML0b83GeV9eoI31XTYVqTp7e
mMOzgBEzkja1L1tm+okpIiDZXFjg9hkZNZ6aXuy8eg9o95xt4KuGRjI+2D9rzG4R
SwdajyMtAyUtSrfN0nEw/sG0MTjZ5+KKYHswIN+BFmxT2WT5CgHEAj6QQGUyLfp+
x3qLazBiZbmF141uMVggT5GbxMr4h2zvTPXVoxeWKsEaIyBTTbK4E221vj4JN5VD
JtH1l+uA4URfa24gTfhMSseALZhftJdL9VtF39dA0N4ZMvg2qBAOVRJuj7xSyhPR
2SlvGVl9AFrS0g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client