Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: ePG+ZXt9XqRVV82qDQE1cWB3DMKav1kvesU4WSGslcE=
Subject key identifier: 0A:74:22:C9:14:58:46:50:E7:36:D1:88:03:D5:A6:20:AE:4D:41:87
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0194BCA9AACBA6BB5993A3C9F674B592F847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0289
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: bOlbi1Joa/uxqWVODJVIVfSY1WjqZW8jK7O7+VDeJu8=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:cb:a6:bb:59:93:a3:c9:f6:74:b5:92:f8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=0a7422c914584650e736d18803d5a620ae4d4187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:d1:06:43:a9:30:20:e4:0e:26:86:7a:eb:
81:0b:39:7c:74:a1:36:cf:aa:80:f7:d5:b4:3d:9a:
4e:5e:52:de:3c:45:0f:ec:fc:fb:10:f3:56:e6:26:
98:97:99:5a:f6:06:9b:87:3a:66:31:0c:b2:4d:6a:
db:13:00:6a:1d:49:c6:59:bc:0d:90:ce:37:dd:00:
18:b6:59:f4:55:8b:6a:58:e5:03:1c:b8:8e:82:00:
08:00:4d:05:21:ef:78:e4:5a:80:66:e1:ea:ac:ea:
12:42:a8:0e:2b:3d:fd:0d:64:59:5a:4b:6d:05:7b:
ed:5e:c7:d3:85:6d:9b:81:f2:9d:71:b9:12:45:58:
2d:b7:85:f5:61:25:c2:3a:23:d9:50:83:20:78:d6:
ea:eb:b7:88:61:de:56:e8:ce:d1:61:e3:27:ef:74:
e4:3e:72:6a:ae:88:47:f0:33:f4:43:4d:b1:86:3d:
db:ab:fc:df:37:0f:37:cb:52:f3:14:2f:d0:16:46:
b5:ce:b9:15:35:6e:87:12:c5:22:06:0b:9f:82:a0:
5c:53:32:63:69:f3:67:84:4f:4c:61:a0:14:45:09:
9b:37:27:67:ae:87:f7:1f:3f:f6:90:e2:6a:e1:a1:
8b:cf:d4:00:92:05:9c:b6:76:19:d5:b0:95:7f:a4:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:74:22:C9:14:58:46:50:E7:36:D1:88:03:D5:A6:20:AE:4D:41:87
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:41:51:4f:3f:7e:b0:99:ab:b8:4f:28:51:cc:af:fa:84:2d:
11:8b:57:4b:5f:c1:f5:b6:a9:07:f6:c4:37:35:06:09:e9:88:
2b:36:9b:30:70:0f:9d:2c:8f:c4:29:12:04:c3:d0:af:26:6c:
de:be:de:0b:35:e0:65:99:13:e3:57:34:fe:f9:b7:13:7a:fc:
1f:3f:ff:33:c8:55:15:3a:a7:e9:f4:05:7f:76:1e:30:76:1f:
d5:10:87:9c:1d:b6:50:4b:98:ad:5d:6b:44:64:2e:01:be:99:
d2:70:be:24:d6:df:58:de:a1:28:9f:ac:68:a0:bb:4e:d4:03:
dd:f4:dc:e5:5a:bf:2e:e7:e9:eb:15:62:ca:e9:03:b7:ed:64:
fa:b8:cd:c4:45:04:a0:38:fd:70:6f:9c:05:2c:36:81:1a:e7:
d0:52:84:8b:cf:f1:4d:be:0b:b7:3f:c3:a9:50:d4:5d:c2:d5:
59:4b:a0:9e:e5:84:b6:1d:e2:3e:1d:cb:17:a7:23:4e:1e:e0:
6b:bd:1b:52:54:b6:48:c9:fb:e4:17:a1:26:ea:90:7b:10:9a:
bc:cc:10:a3:25:36:fa:c2:e6:e7:40:44:8b:e0:f9:e3:60:93:
55:d0:8b:b0:d0:58:c9:8f:2e:5a:59:95:b4:c4:35:29:f6:ac:
ac:b0:86:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qarLprtZk6PJ9nS1kvhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EygwYTc0MjJjOTE0NTg0NjUwZTczNmQxODgwM2Q1YTYyMGFlNGQ0MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg3RBkOpMCDkDiaGeuuBCzl8dKE2
z6qA99W0PZpOXlLePEUP7Pz7EPNW5iaYl5la9gabhzpmMQyyTWrbEwBqHUnGWbwN
kM433QAYtln0VYtqWOUDHLiOggAIAE0FIe945FqAZuHqrOoSQqgOKz39DWRZWktt
BXvtXsfThW2bgfKdcbkSRVgtt4X1YSXCOiPZUIMgeNbq67eIYd5W6M7RYeMn73Tk
PnJqrohH8DP0Q02xhj3bq/zfNw83y1LzFC/QFka1zrkVNW6HEsUiBgufgqBcUzJj
afNnhE9MYaAURQmbNydnrof3Hz/2kOJq4aGLz9QAkgWctnYZ1bCVf6RnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAp0IskUWEZQ5zbRiAPVpiCuTUGHMB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkFRTz9+
sJmruE8oUcyv+oQtEYtXS1/B9bapB/bENzUGCemIKzabMHAPnSyPxCkSBMPQryZs
3r7eCzXgZZkT41c0/vm3E3r8Hz//M8hVFTqn6fQFf3YeMHYf1RCHnB22UEuYrV1r
RGQuAb6Z0nC+JNbfWN6hKJ+saKC7TtQD3fTc5Vq/Lufp6xViyukDt+1k+rjNxEUE
oDj9cG+cBSw2gRrn0FKEi8/xTb4Ltz/DqVDUXcLVWUugnuWEth3iPh3LF6cjTh7g
a70bUlS2SMn75BehJuqQexCavMwQoyU2+sLm50BEi+D542CTVdCLsNBYyY8uWlmV
tMQ1KfasrLCGJg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client