Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: 336st1CEm5Vame0Ce5Ko1Z1ldyPMDr4BS+2cyxhxI9s=
Subject key identifier: ED:A8:8B:24:51:7C:A8:40:1E:8C:7D:11:CB:38:FB:83:BE:52:6A:6C
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 0194BC3BDE006ACDF3AF3F5338B945D8EDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: 6jPf1HkWbnMrYATsGa4eZezVqnTJiQD0CN3h68d72kI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:00:6a:cd:f3:af:3f:53:38:b9:45:d8:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=eda88b24517ca8401e8c7d11cb38fb83be526a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:a6:9b:c8:91:a0:45:8a:26:c0:12:c1:64:
78:39:ff:8f:92:cd:fa:a4:9d:d1:48:ec:5c:81:9a:
e1:b5:3d:f4:ef:73:6e:c2:1a:5c:30:f7:70:8b:00:
62:24:c7:3f:77:d3:4d:ea:48:da:53:21:d4:2d:f5:
f8:7f:05:e0:84:94:a2:38:9d:6b:b3:a9:44:67:b7:
d2:70:ef:25:ba:7d:a7:29:ce:98:7e:d2:87:e9:a1:
4a:08:07:85:16:99:23:20:54:9d:57:23:54:4b:d5:
56:16:fe:72:0c:49:93:56:71:c0:b6:21:ef:dd:43:
8f:77:31:1a:e4:7b:d3:76:28:19:96:b6:4d:f4:07:
e9:47:d8:ba:16:e5:fa:4d:6c:af:95:5c:f2:ec:ad:
e6:e2:61:27:72:e4:71:b4:c0:2e:25:9c:b5:7a:e2:
76:6c:3a:1f:35:a8:08:06:32:4e:ef:ec:fb:e4:e3:
a8:59:22:d9:d5:b0:2d:ee:00:d9:08:c4:8c:23:79:
c0:0c:b2:db:75:25:09:6f:b2:6b:e9:78:01:f3:27:
00:a7:9b:eb:b3:fc:65:91:fd:ab:89:b6:cf:75:d5:
b8:7f:91:23:52:a1:66:96:da:82:53:4c:24:67:79:
89:15:b9:4b:87:cc:15:56:f9:ef:43:06:fc:8e:3c:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:8B:24:51:7C:A8:40:1E:8C:7D:11:CB:38:FB:83:BE:52:6A:6C
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:60:d1:1d:cf:c9:6a:9d:be:af:0e:01:d0:b8:31:22:ed:
2f:4e:89:c2:55:d8:77:fb:b8:be:d6:39:9d:ad:b0:c9:1f:4a:
d1:94:fe:51:82:87:4a:1e:36:7a:57:44:50:3b:8d:a1:41:75:
3b:20:7a:01:60:3c:1d:dd:a1:e3:c8:1d:0b:91:55:a1:72:32:
43:88:53:75:92:51:81:20:ec:b9:67:35:ec:9b:43:45:7a:8b:
84:49:d7:06:af:0a:c8:d0:34:f0:da:d3:06:fd:04:03:16:81:
76:57:db:6f:70:9a:37:f6:33:a1:42:10:9b:a4:7d:93:c1:c5:
20:c0:64:e8:a9:53:2c:63:0f:cf:30:5c:f7:d2:84:28:32:92:
13:4e:75:61:66:54:5b:87:12:27:ea:c5:9d:6f:01:41:f1:f8:
3e:33:ea:25:f3:89:21:62:d2:25:8a:93:19:a4:2c:3d:bb:f0:
95:c9:c0:4f:80:00:b5:5d:40:cc:0b:05:2d:17:9b:24:df:e3:
c0:68:7b:4f:75:00:7a:c3:74:08:60:6d:5d:67:0c:ad:2e:40:
19:59:61:05:88:c5:32:b3:32:e5:4b:f5:16:98:75:a6:cc:fc:
9c:ee:8f:8c:7f:9e:cd:81:08:c6:58:78:1c:11:92:e7:3d:3d:
b6:6d:9c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O94Aas3zrz9TOLlF2O31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
EyhlZGE4OGIyNDUxN2NhODQwMWU4YzdkMTFjYjM4ZmI4M2JlNTI2YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI+mm8iRoEWKJsASwWR4Of+Pks36
pJ3RSOxcgZrhtT3073NuwhpcMPdwiwBiJMc/d9NN6kjaUyHULfX4fwXghJSiOJ1r
s6lEZ7fScO8lun2nKc6YftKH6aFKCAeFFpkjIFSdVyNUS9VWFv5yDEmTVnHAtiHv
3UOPdzEa5HvTdigZlrZN9AfpR9i6FuX6TWyvlVzy7K3m4mEncuRxtMAuJZy1euJ2
bDofNagIBjJO7+z75OOoWSLZ1bAt7gDZCMSMI3nADLLbdSUJb7Jr6XgB8ycAp5vr
s/xlkf2ribbPddW4f5EjUqFmltqCU0wkZ3mJFblLh8wVVvnvQwb8jjw8IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2oiyRRfKhAHox9Ecs4+4O+UmpsMB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfBg0R3P
yWqdvq8OAdC4MSLtL06JwlXYd/u4vtY5na2wyR9K0ZT+UYKHSh42eldEUDuNoUF1
OyB6AWA8Hd2h48gdC5FVoXIyQ4hTdZJRgSDsuWc17JtDRXqLhEnXBq8KyNA08NrT
Bv0EAxaBdlfbb3CaN/YzoUIQm6R9k8HFIMBk6KlTLGMPzzBc99KEKDKSE051YWZU
W4cSJ+rFnW8BQfH4PjPqJfOJIWLSJYqTGaQsPbvwlcnAT4AAtV1AzAsFLRebJN/j
wGh7T3UAesN0CGBtXWcMrS5AGVlhBYjFMrMy5Uv1Fph1psz8nO6PjH+ezYEIxlh4
HBGS5z09tm2cwA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:54 2025 by rpki-client