Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: jntXyB/SYUWm5UpSHorrpQcpRAJIkklW78yeuWYoN9w=
Subject key identifier: 24:1A:7F:08:3A:2F:32:FF:9C:BB:2A:08:75:3E:CD:E3:9C:9A:9F:16
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 0194BD8558F193BD3A8158689AABC1E99663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: PXVhFKpPYf8ov6hSzlAGwA9/pK5pXQ+I/aRwu60icnM=)
2: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:f1:93:bd:3a:81:58:68:9a:ab:c1:e9:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=241a7f083a2f32ff9cbb2a08753ecde39c9a9f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:8a:7b:90:8b:9e:85:0f:33:cf:39:50:e5:
ba:06:a8:ac:6e:03:2e:b6:0e:e3:6c:08:85:17:f6:
61:9e:20:7d:70:a9:b2:14:a8:c4:15:45:75:55:64:
2a:ea:c1:7a:1d:dc:d9:87:81:e2:2a:cb:62:8f:c7:
58:cc:6d:bc:00:1c:78:c7:45:03:3d:5f:fb:a4:0c:
53:64:58:d9:d9:17:bc:02:81:18:1c:8e:1a:0a:2a:
63:15:f6:50:9b:d3:4e:7c:0c:a3:68:f4:9d:29:88:
6c:e1:40:d5:2f:be:1e:90:27:a1:83:d4:4c:04:4d:
cc:fe:f3:5c:41:96:d6:ac:6e:ed:3e:e8:d4:66:b9:
be:0f:a8:ca:c6:10:69:65:66:c4:04:86:96:23:7b:
42:d8:6f:4c:ca:09:73:e7:7d:42:bc:88:0b:0e:1f:
19:5a:a1:5d:b6:1b:05:f9:9b:18:c1:f8:7c:1f:43:
cb:fe:c9:2f:5f:34:8f:91:cf:07:fc:a8:e8:73:df:
8b:ed:80:57:b7:88:2e:f6:08:c2:ae:95:a1:86:8a:
82:8c:33:52:9e:01:58:b1:9a:68:3e:61:c4:da:01:
80:61:c2:02:72:84:e5:57:65:9b:df:46:97:f7:e0:
1a:3f:d4:37:0d:b0:53:84:28:d5:6e:3f:bb:89:1e:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:7F:08:3A:2F:32:FF:9C:BB:2A:08:75:3E:CD:E3:9C:9A:9F:16
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9f:1d:30:ae:6e:21:1b:4f:7f:5c:09:fc:93:05:e8:0d:30:
7e:cd:5b:91:72:9a:b7:b7:e5:d5:6b:52:49:9d:c5:34:65:b7:
9c:26:72:a8:e1:1a:86:04:44:61:d0:41:d8:1d:3d:8d:e4:a4:
89:f7:e2:70:1c:99:6b:a6:27:b6:88:41:f3:86:42:8c:66:96:
59:5f:9b:74:b9:26:aa:ad:6c:1e:75:1d:01:04:fc:7c:4d:d9:
51:68:f9:43:60:b6:58:9e:86:5f:19:34:7f:ac:3a:35:6d:db:
54:30:c2:d6:72:b2:a4:68:ae:6f:e9:b0:f1:60:8f:04:14:16:
c6:09:35:79:6c:e3:9f:a7:9e:f6:84:61:7a:1c:8c:65:85:f3:
d6:c5:ff:ce:ae:a6:15:2f:f8:e0:de:e4:d1:46:e1:ca:d2:a2:
ce:b9:5a:11:12:ae:f9:9e:04:45:b5:42:ef:96:be:d9:e9:7e:
d8:6b:61:a0:08:ec:b4:11:7c:b9:88:76:09:6a:62:56:c9:0a:
bf:d2:c0:07:fb:b9:7e:14:05:ff:2b:79:f2:28:6a:96:cf:e9:
52:83:e7:52:34:53:19:f6:ae:3b:7b:01:b5:a4:dc:f3:0c:03:
37:2d:c9:07:1e:3a:69:25:99:83:45:78:e0:f2:89:90:ee:d1:
22:ac:5b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVjxk706gVhomqvB6ZZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EygyNDFhN2YwODNhMmYzMmZmOWNiYjJhMDg3NTNlY2RlMzljOWE5ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c6Ke5CLnoUPM885UOW6BqisbgMu
tg7jbAiFF/ZhniB9cKmyFKjEFUV1VWQq6sF6HdzZh4HiKstij8dYzG28ABx4x0UD
PV/7pAxTZFjZ2Re8AoEYHI4aCipjFfZQm9NOfAyjaPSdKYhs4UDVL74ekCehg9RM
BE3M/vNcQZbWrG7tPujUZrm+D6jKxhBpZWbEBIaWI3tC2G9Myglz531CvIgLDh8Z
WqFdthsF+ZsYwfh8H0PL/skvXzSPkc8H/Kjoc9+L7YBXt4gu9gjCrpWhhoqCjDNS
ngFYsZpoPmHE2gGAYcICcoTlV2Wb30aX9+AaP9Q3DbBThCjVbj+7iR7JdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQafwg6LzL/nLsqCHU+zeOcmp8WMB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZ8dMK5u
IRtPf1wJ/JMF6A0wfs1bkXKat7fl1WtSSZ3FNGW3nCZyqOEahgREYdBB2B09jeSk
ifficByZa6YntohB84ZCjGaWWV+bdLkmqq1sHnUdAQT8fE3ZUWj5Q2C2WJ6GXxk0
f6w6NW3bVDDC1nKypGiub+mw8WCPBBQWxgk1eWzjn6ee9oRhehyMZYXz1sX/zq6m
FS/44N7k0UbhytKizrlaERKu+Z4ERbVC75a+2el+2GthoAjstBF8uYh2CWpiVskK
v9LAB/u5fhQF/yt58ihqls/pUoPnUjRTGfauO3sBtaTc8wwDNy3JBx46aSWZg0V4
4PKJkO7RIqxb+A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:47 2025 by rpki-client