Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: utzRX1TdSHK5X2J/sagGkINNOyXnD/Op+wbBfqVp7Sk=
Subject key identifier: F6:93:61:7D:D5:F7:58:C5:2E:32:42:F8:E7:D3:6D:48:46:9B:CF:09
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 0194BD178183885142F73089AE17C552D516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 137D
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: 22X3ZaVPRZZMDmVHnRhRUSntz+oJ4hhkrqY21mmGFKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:83:88:51:42:f7:30:89:ae:17:c5:52:d5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=f693617dd5f758c52e3242f8e7d36d48469bcf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:f2:d5:a9:18:7b:07:15:25:66:95:3c:f7:
5d:09:ff:83:c7:ff:02:21:d8:cd:67:aa:8e:e3:a2:
35:a7:d8:23:6d:04:eb:3e:b8:e7:bb:a3:82:32:b1:
b4:32:8e:21:a2:03:18:35:c3:72:6a:6b:b3:eb:16:
98:ce:d7:af:64:3f:b3:f9:08:c9:c7:25:4b:8c:6c:
09:71:ec:ee:9d:1e:11:cf:34:60:ac:78:20:45:6b:
2b:a3:57:60:5a:78:71:13:12:40:e2:d7:1d:6e:a1:
7e:89:06:7a:0d:78:c0:86:ed:23:08:10:d2:d2:cd:
5d:9b:3a:1c:90:62:23:61:31:1c:7b:68:13:54:7d:
50:18:77:f7:ae:34:ee:76:0b:a9:2e:92:42:d0:83:
84:bb:9e:47:72:a4:9a:76:f0:80:41:71:54:48:94:
08:30:ac:08:af:47:cd:0d:58:69:0f:fb:b9:38:58:
c5:06:04:20:eb:ac:32:7a:de:37:79:29:94:59:d8:
81:cb:ef:0e:ec:1c:e4:c0:23:0c:43:54:43:61:e7:
90:13:fc:dc:5f:6e:d5:6d:05:26:52:0f:64:8c:65:
3c:32:fe:7b:c2:28:be:1d:f9:fe:83:b3:d6:11:3b:
08:1f:a1:9d:82:02:82:f0:ac:22:e3:f4:16:9e:d5:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:61:7D:D5:F7:58:C5:2E:32:42:F8:E7:D3:6D:48:46:9B:CF:09
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:da:2d:0d:32:22:9a:95:7f:f9:6f:d3:64:61:28:11:17:53:
1e:64:96:e7:af:6f:dc:44:89:e8:23:d5:de:7e:95:0a:4f:6f:
41:65:01:4e:00:12:28:ed:db:40:8b:95:7e:d2:bc:f5:b3:3e:
81:1b:c2:7a:dc:ca:e8:0e:48:8b:bd:9c:ee:45:87:ed:d4:cb:
fd:f3:8c:34:4a:39:19:49:50:ff:87:c4:0c:db:3b:3f:8f:5a:
14:26:0f:c9:84:9f:dd:89:45:a8:69:4a:e3:21:0d:55:f6:ba:
e0:56:9b:f0:be:42:0c:b9:97:a7:c8:04:ff:02:fe:e7:7e:8f:
8d:89:62:98:c9:31:84:3c:b1:d5:a9:ec:ab:50:88:f7:ff:c4:
b0:eb:e1:07:e4:a6:18:bf:7a:44:ba:99:dc:db:5f:d2:e5:10:
d1:ef:93:87:8f:bc:e1:72:69:6a:b0:c5:0c:ff:b3:10:e0:0c:
ba:47:a2:19:aa:9c:2c:5f:3d:b8:0a:67:60:e5:4a:e1:7b:7a:
c7:06:b8:24:ba:ac:cb:8e:e7:eb:0f:59:84:13:97:53:1c:aa:
b8:5d:9e:88:04:6c:ba:cf:c9:cd:75:d4:81:81:95:bb:4c:20:
a9:a3:5a:0a:84:67:63:e7:b3:59:63:e3:76:cf:3c:b5:e6:7c:
5b:17:98:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4GDiFFC9zCJrhfFUtUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTEyOGRjYjY4MTBmZmRjNTAyYmEzMDQ3Y2Q0MTkxMzJk
YTIyNzQwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EyhmNjkzNjE3ZGQ1Zjc1OGM1MmUzMjQyZjhlN2QzNmQ0ODQ2OWJjZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQTy1akYewcVJWaVPPddCf+Dx/8C
IdjNZ6qO46I1p9gjbQTrPrjnu6OCMrG0Mo4hogMYNcNyamuz6xaYztevZD+z+QjJ
xyVLjGwJcezunR4RzzRgrHggRWsro1dgWnhxExJA4tcdbqF+iQZ6DXjAhu0jCBDS
0s1dmzockGIjYTEce2gTVH1QGHf3rjTudgupLpJC0IOEu55HcqSadvCAQXFUSJQI
MKwIr0fNDVhpD/u5OFjFBgQg66wyet43eSmUWdiBy+8O7BzkwCMMQ1RDYeeQE/zc
X27VbQUmUg9kjGU8Mv57wii+Hfn+g7PWETsIH6GdggKC8Kwi4/QWntVcUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaTYX3V91jFLjJC+OfTbUhGm88JMB8GA1UdIwQY
MBaAFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct
ZWRmN2JiNjUzZjEzLzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz
LzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9otDTIi
mpV/+W/TZGEoERdTHmSW569v3ESJ6CPV3n6VCk9vQWUBTgASKO3bQIuVftK89bM+
gRvCetzK6A5Ii72c7kWH7dTL/fOMNEo5GUlQ/4fEDNs7P49aFCYPyYSf3YlFqGlK
4yENVfa64Fab8L5CDLmXp8gE/wL+536PjYlimMkxhDyx1ansq1CI9//EsOvhB+Sm
GL96RLqZ3Ntf0uUQ0e+Th4+84XJparDFDP+zEOAMukeiGaqcLF89uApnYOVK4Xt6
xwa4JLqsy47n6w9ZhBOXUxyquF2eiARsus/JzXXUgYGVu0wgqaNaCoRnY+ezWWPj
ds88teZ8WxeYnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:52 2025 by rpki-client