Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: w604mitn1LCg3CzbsZUm4QMR6pRoHVqZQ/AnW7+Xydg=
Subject key identifier: 70:E5:77:AA:DE:DD:27:CC:DD:6E:FA:C6:F7:68:42:0E:3F:0D:EE:FD
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 0194BC3C534FADA8A9B569746C083C01F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 1270
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: /6bsPVHMjH5qvxMqMKv/v1jUQXq7WDHx5ksjpf+5Fdc=)
2: XpE48l5Z-Wb2Vn0CLwPo8gsOr4s.roa (hash: djc9x/B/+sXS1Vob6TutbRwsB59VzX1QfQ0IVU657BQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:4f:ad:a8:a9:b5:69:74:6c:08:3c:01:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=70e577aadedd27ccdd6efac6f768420e3f0deefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:6d:dd:e0:05:51:8c:82:9c:05:d4:d7:3c:
12:2c:a2:27:14:65:fe:ca:9d:27:9f:03:84:47:c4:
1c:5b:20:b6:59:5f:57:a0:73:22:37:63:35:09:58:
d0:49:0e:d7:f0:59:eb:d6:19:82:bf:4b:d7:ac:ff:
f9:a6:d7:46:4e:d9:3f:b8:66:81:41:fc:4c:c7:22:
77:4d:74:a7:27:ca:51:15:87:93:0e:02:8b:12:f1:
22:cc:38:bc:14:f1:1a:c6:91:6b:40:5a:57:6e:79:
ed:48:9e:aa:28:cd:ac:1a:aa:89:ed:e4:c2:92:d9:
68:19:61:3f:93:d4:9b:5b:3e:2f:2d:b1:d4:31:af:
c1:e6:fb:17:07:b3:93:a3:f9:11:09:6b:d3:f4:35:
3a:07:d0:d7:0c:4a:ac:08:51:37:c6:57:ed:c9:e3:
ee:78:6c:3f:60:1d:4e:ca:be:ed:b9:00:cc:21:2e:
56:03:ec:75:4a:aa:98:df:1a:b0:11:a9:53:60:ec:
b8:83:40:31:21:74:6f:ac:2a:50:c2:17:66:ae:0f:
6b:3c:47:89:18:ec:e6:68:59:1b:7b:6e:38:b9:39:
f4:35:8b:c9:8f:0d:79:4e:ac:37:88:5d:8c:da:6f:
73:dd:e9:a6:bb:71:20:e2:0c:34:0a:8d:a5:28:c3:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E5:77:AA:DE:DD:27:CC:DD:6E:FA:C6:F7:68:42:0E:3F:0D:EE:FD
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ed:44:ba:ae:52:ed:d5:8e:6a:d0:52:4b:29:a2:57:94:ac:
37:d8:98:bc:90:06:64:7e:46:ed:08:99:b5:28:d4:dd:2a:3d:
12:e5:cd:4d:7e:e8:4a:5d:78:ce:b4:11:63:57:fa:42:4e:35:
26:20:86:49:f8:8a:47:bf:10:f8:d7:db:4a:7c:66:7f:21:ee:
33:1a:18:7e:84:9d:ac:f8:ee:61:7a:9f:4d:75:ab:5c:9f:e7:
6f:dc:ce:aa:96:b4:83:5c:36:18:70:7e:bd:d8:73:c7:cd:a7:
91:8e:3e:95:56:3b:d7:db:30:cc:09:26:c5:99:77:f6:b5:f2:
16:60:ba:63:95:33:e6:b5:c0:7c:62:75:c9:bb:fc:e7:64:bd:
cb:39:5d:0e:e2:f4:94:ea:67:d9:f8:8c:3d:7f:e0:34:d2:5d:
24:32:b7:37:ff:ad:ef:87:87:00:d0:1b:64:0d:f8:5a:e6:29:
61:88:98:f2:98:7b:b9:a1:cb:4d:ba:1a:34:32:5e:22:b0:10:
a0:74:f5:c7:41:1c:03:2a:02:ce:7a:86:7f:25:94:19:3f:01:
6e:9b:a4:2e:da:0c:fc:1e:a7:d8:05:d4:9e:a0:e3:b4:37:c5:
4c:c8:50:b5:00:c7:94:0d:ff:7e:56:00:f2:f2:76:da:9e:89:
29:30:b6:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFNPraiptWl0bAg8AfiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYWI5NjUzOGM3NjRkMjMyMDVkMzMyYmUxMzdiZGUwNDYy
ZjFiOGMwHhcNMjUwMTMxMTIwMDU3WhcNMjUwMjAxMTIwMDU3WjAzMTEwLwYDVQQD
Eyg3MGU1NzdhYWRlZGQyN2NjZGQ2ZWZhYzZmNzY4NDIwZTNmMGRlZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dlt3eAFUYyCnAXU1zwSLKInFGX+
yp0nnwOER8QcWyC2WV9XoHMiN2M1CVjQSQ7X8Fnr1hmCv0vXrP/5ptdGTtk/uGaB
QfxMxyJ3TXSnJ8pRFYeTDgKLEvEizDi8FPEaxpFrQFpXbnntSJ6qKM2sGqqJ7eTC
ktloGWE/k9SbWz4vLbHUMa/B5vsXB7OTo/kRCWvT9DU6B9DXDEqsCFE3xlftyePu
eGw/YB1Oyr7tuQDMIS5WA+x1SqqY3xqwEalTYOy4g0AxIXRvrCpQwhdmrg9rPEeJ
GOzmaFkbe244uTn0NYvJjw15Tqw3iF2M2m9z3emmu3Eg4gw0Co2lKMO7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDld6re3SfM3W76xvdoQg4/De79MB8GA1UdIwQY
MBaAFFKrllOMdk0jIF0zK+E3veBGLxuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUt
MzhhZDQxNzlmZjI5LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xOWI4MTItYjFhNC00OTJhLThiNDUtMzhhZDQxNzlmZjI5
LzEvVXF1V1U0eDJUU01nWFRNcjRUZTk0RVl2RzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+1Euq5S
7dWOatBSSymiV5SsN9iYvJAGZH5G7QiZtSjU3So9EuXNTX7oSl14zrQRY1f6Qk41
JiCGSfiKR78Q+NfbSnxmfyHuMxoYfoSdrPjuYXqfTXWrXJ/nb9zOqpa0g1w2GHB+
vdhzx82nkY4+lVY719swzAkmxZl39rXyFmC6Y5Uz5rXAfGJ1ybv852S9yzldDuL0
lOpn2fiMPX/gNNJdJDK3N/+t74eHANAbZA34WuYpYYiY8ph7uaHLTboaNDJeIrAQ
oHT1x0EcAyoCznqGfyWUGT8BbpukLtoM/B6n2AXUnqDjtDfFTMhQtQDHlA3/flYA
8vJ22p6JKTC2xw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:49:47 2025 by rpki-client