Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: uUQPULPvCsX2MOFsPe/HAIbSFhxh2/sdgtu3zw4/dtQ=
Subject key identifier: 5C:B6:D2:C8:EC:69:08:97:55:1C:83:81:DA:91:5B:EF:C1:22:D2:3F
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 0194BC7291C74EFB33F34FF6ABFC7A69CB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: /B/vQlHeb0IU3VTL0QICa/NYL4HPQS1v6PEpZVRvZhQ=)
2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:91:c7:4e:fb:33:f3:4f:f6:ab:fc:7a:69:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=5cb6d2c8ec690897551c8381da915befc122d23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:78:ea:a6:35:ae:aa:f8:83:e6:d5:dd:a9:
8a:e6:09:31:22:c4:65:c2:32:95:aa:0d:e8:20:1e:
09:6f:30:07:84:ee:7e:54:a0:b2:b8:ed:1f:72:83:
83:01:c1:e5:7e:92:d2:fe:b4:b7:fa:87:7a:a5:fc:
92:9e:f1:7a:57:84:12:94:01:ee:ba:fe:a5:73:ed:
77:84:28:65:32:34:4e:49:84:15:3d:12:63:11:a5:
8b:56:59:3b:d6:86:c3:c0:d6:61:b9:ef:97:1b:f4:
c8:ac:cb:9f:94:f3:15:c1:b6:0c:ee:8a:76:94:25:
94:62:31:a5:55:9e:a6:ab:b6:25:fe:80:b9:82:a5:
b9:5a:3d:9b:3c:ef:fb:00:aa:92:5e:6b:ad:ce:8d:
02:bb:98:91:1e:b0:32:92:9e:23:b0:3c:12:b0:ed:
94:8d:43:01:39:82:4b:42:af:8f:74:74:a7:53:e8:
8d:68:be:38:1b:59:bc:6a:ab:1e:f5:d6:46:49:0b:
32:8f:9f:0e:ac:fd:8f:e7:c0:b0:88:f8:ff:ae:ef:
61:dd:15:a6:44:81:7d:35:4c:11:5e:36:30:d0:77:
fd:79:26:ed:06:b4:2e:83:52:66:f3:2c:24:f1:03:
16:80:8e:71:2a:c9:18:94:bc:96:04:50:3b:44:16:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:D2:C8:EC:69:08:97:55:1C:83:81:DA:91:5B:EF:C1:22:D2:3F
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f0:5a:8f:31:22:0e:27:32:d5:25:6b:4e:e7:93:4a:3a:5a:
b2:66:f5:ff:1f:49:fd:fe:37:86:cc:c1:67:be:86:20:f6:d0:
a1:98:1e:0a:2c:92:87:ec:8b:9e:c3:9b:5f:6b:cb:80:2c:fe:
30:88:89:cc:98:00:90:4a:c1:8b:fb:98:82:0b:88:50:89:25:
14:bf:ba:a6:9d:33:75:98:75:62:57:ec:94:a9:a9:6d:0f:51:
5a:c8:fa:6c:3b:bf:b6:f9:20:a9:94:db:e6:65:95:8f:54:98:
4a:25:ff:3d:59:17:ec:0f:ac:6d:99:8e:a8:d0:26:37:76:f0:
54:2f:7b:53:8e:fd:29:02:e4:54:d9:23:b2:72:13:86:59:f7:
8f:a0:6a:c3:fe:6f:6b:f2:9c:7a:22:62:44:dc:fb:82:41:a7:
82:60:99:d5:25:03:85:b1:57:5a:bd:a8:c0:c2:3e:55:01:86:
9a:8e:01:92:cc:74:fd:34:ad:fd:2d:e8:d9:c1:f2:58:fc:db:
a6:83:4c:3d:7d:1a:c7:a6:08:ed:14:a4:21:fa:84:86:b0:49:
18:e7:a5:75:48:5c:7f:6c:ae:48:b9:30:f2:55:7c:67:2d:b6:
2c:10:14:91:f5:95:83:23:02:a0:08:16:f8:42:3a:54:9b:1e:
86:68:be:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpHHTvsz80/2q/x6acs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1
ZDY2ZjkwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
Eyg1Y2I2ZDJjOGVjNjkwODk3NTUxYzgzODFkYTkxNWJlZmMxMjJkMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46F46qY1rqr4g+bV3amK5gkxIsRl
wjKVqg3oIB4JbzAHhO5+VKCyuO0fcoODAcHlfpLS/rS3+od6pfySnvF6V4QSlAHu
uv6lc+13hChlMjROSYQVPRJjEaWLVlk71obDwNZhue+XG/TIrMuflPMVwbYM7op2
lCWUYjGlVZ6mq7Yl/oC5gqW5Wj2bPO/7AKqSXmutzo0Cu5iRHrAykp4jsDwSsO2U
jUMBOYJLQq+PdHSnU+iNaL44G1m8aqse9dZGSQsyj58OrP2P58CwiPj/ru9h3RWm
RIF9NUwRXjYw0Hf9eSbtBrQug1Jm8ywk8QMWgI5xKskYlLyWBFA7RBY3swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy20sjsaQiXVRyDgdqRW+/BItI/MB8GA1UdIwQY
MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt
NzlkOTM0ZTRhOTlhLzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh
LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/BajzEi
Dicy1SVrTueTSjpasmb1/x9J/f43hszBZ76GIPbQoZgeCiySh+yLnsObX2vLgCz+
MIiJzJgAkErBi/uYgguIUIklFL+6pp0zdZh1YlfslKmpbQ9RWsj6bDu/tvkgqZTb
5mWVj1SYSiX/PVkX7A+sbZmOqNAmN3bwVC97U479KQLkVNkjsnIThln3j6Bqw/5v
a/KceiJiRNz7gkGngmCZ1SUDhbFXWr2owMI+VQGGmo4Bksx0/TSt/S3o2cHyWPzb
poNMPX0ax6YI7RSkIfqEhrBJGOeldUhcf2yuSLkw8lV8Zy22LBAUkfWVgyMCoAgW
+EI6VJsehmi+wA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client