Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: V6SWrIpYF80H4eocnGxpLgoHY69MyB6Gcb5uJeFNrZE=
Subject key identifier: 59:71:94:A1:7E:F2:21:4C:3E:0B:C0:0F:5A:42:79:54:22:5B:D4:6A
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0194BC04B65AF05D6B90B45428E9E5C03D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0A14
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: QAlZxJpPNS1rmQL4HuNAcE7lmik.roa (hash: S0+MsekOjpK1fn9TgliC/Ks4ugN2LoEukjLPMsOlGQY=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: r9gmLLpqgSyv1N1dD9xg9kyjqAiEzIe/aPgwos+LZ30=)
3: __wa1ugjEpkqV5KApoV9xJeah8c.roa (hash: uBEDsXg7FqO+SBefSZJvvf0ta/Y6RQbfHx/stJzTEQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:5a:f0:5d:6b:90:b4:54:28:e9:e5:c0:3d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=597194a17ef2214c3e0bc00f5a427954225bd46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:c5:e1:b0:77:3e:5f:ac:ae:a0:24:38:42:
a7:36:2c:e5:72:04:e0:96:4d:05:d8:c9:0e:c4:dc:
a2:55:9f:d6:8d:8a:71:3e:b9:1c:76:c8:53:6b:04:
df:fc:f8:3e:25:57:9d:14:06:f5:07:1e:bb:fa:bb:
ee:61:c9:68:7e:04:11:62:a6:69:e9:6e:4c:4e:f3:
f7:66:39:0a:66:85:8f:87:4d:36:61:fe:ac:7c:58:
fa:dd:a7:f6:cf:71:30:e1:94:87:aa:17:37:69:1d:
67:fc:d6:39:80:af:ce:bb:12:eb:4f:0a:44:20:57:
00:cf:e4:a9:28:30:60:f1:40:81:7d:bb:23:c9:7e:
3e:e7:a0:3e:2a:73:18:9f:89:90:c3:c2:61:d4:62:
1c:5f:6b:89:0f:e6:2c:12:d0:ca:c8:9a:dc:17:d7:
75:3f:e7:20:63:50:5f:d9:9d:0e:de:0f:6a:8a:4c:
d8:e4:fb:a4:42:dd:31:5f:87:b5:27:88:5c:8f:b1:
30:9c:8d:e0:55:83:8f:f3:2c:8f:6b:b2:de:93:be:
e1:11:af:49:07:6e:e6:57:db:1c:e0:5d:3f:e2:b2:
3d:e6:43:89:e5:fb:52:20:e9:56:a7:73:cf:2a:71:
67:36:e1:b3:45:7b:68:96:6f:51:21:e9:e2:84:21:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:94:A1:7E:F2:21:4C:3E:0B:C0:0F:5A:42:79:54:22:5B:D4:6A
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:7b:0a:5b:aa:5a:c8:74:11:b7:7f:48:26:ea:5b:9a:40:
87:e5:67:ae:06:e3:2b:fc:ea:c4:62:84:7b:38:f0:e2:51:11:
fc:ef:01:21:6d:15:15:26:58:14:a4:63:4f:aa:8e:9b:53:40:
56:de:2c:07:82:59:1b:a9:93:71:3e:0f:3b:72:e5:bd:9b:40:
8b:2e:55:f3:66:5f:23:e1:8c:92:1a:74:9c:8d:f7:31:d6:6d:
ea:cd:f4:d5:0b:1d:ca:7b:37:7d:05:0f:27:24:b2:4e:20:19:
b4:5d:9f:3a:50:7a:c6:27:a5:e2:4f:6d:62:01:ed:10:13:3b:
73:c5:95:33:e4:1f:fc:c1:36:a0:e8:53:05:35:b5:04:23:24:
a1:4b:a1:78:e4:f9:5e:3c:71:3c:07:35:96:d2:2e:15:47:8a:
70:56:74:6a:b3:42:13:dd:2a:05:4d:96:8b:0f:27:94:d9:7c:
4e:b4:56:0a:e4:bf:6c:e7:72:b7:8e:14:4f:38:66:32:95:c0:
c1:9e:aa:8c:c3:42:d1:59:db:e9:fd:a7:c4:9d:7c:a9:d8:d6:
b7:56:74:49:0d:32:f7:54:ca:40:19:ac:e0:be:19:04:d8:00:
43:45:0e:a9:d4:2b:c3:4d:42:96:0f:1c:75:0b:bd:6e:73:d6:
b2:41:39:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLZa8F1rkLRUKOnlwD1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0
OWI1ZTIwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
Eyg1OTcxOTRhMTdlZjIyMTRjM2UwYmMwMGY1YTQyNzk1NDIyNWJkNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyPF4bB3Pl+srqAkOEKnNizlcgTg
lk0F2MkOxNyiVZ/WjYpxPrkcdshTawTf/Pg+JVedFAb1Bx67+rvuYclofgQRYqZp
6W5MTvP3ZjkKZoWPh002Yf6sfFj63af2z3Ew4ZSHqhc3aR1n/NY5gK/OuxLrTwpE
IFcAz+SpKDBg8UCBfbsjyX4+56A+KnMYn4mQw8Jh1GIcX2uJD+YsEtDKyJrcF9d1
P+cgY1Bf2Z0O3g9qikzY5PukQt0xX4e1J4hcj7EwnI3gVYOP8yyPa7Lek77hEa9J
B27mV9sc4F0/4rI95kOJ5ftSIOlWp3PPKnFnNuGzRXtolm9RIenihCG7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlxlKF+8iFMPgvAD1pCeVQiW9RqMB8GA1UdIwQY
MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt
MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm
LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhZ7Cluq
Wsh0Ebd/SCbqW5pAh+VnrgbjK/zqxGKEezjw4lER/O8BIW0VFSZYFKRjT6qOm1NA
Vt4sB4JZG6mTcT4PO3LlvZtAiy5V82ZfI+GMkhp0nI33MdZt6s301Qsdyns3fQUP
JySyTiAZtF2fOlB6xiel4k9tYgHtEBM7c8WVM+Qf/ME2oOhTBTW1BCMkoUuheOT5
XjxxPAc1ltIuFUeKcFZ0arNCE90qBU2Wiw8nlNl8TrRWCuS/bOdyt44UTzhmMpXA
wZ6qjMNC0Vnb6f2nxJ18qdjWt1Z0SQ0y91TKQBms4L4ZBNgAQ0UOqdQrw01Clg8c
dQu9bnPWskE5NQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:12 2025 by rpki-client