Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: 8OF6FJqiyjwpl70waKeRJDmeQoOHm2kLgI2O+YgVmh0=
Subject key identifier: 15:3D:52:AA:5E:5C:94:42:04:48:64:E2:B5:09:78:C9:3A:E1:09:16
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 0194BD4E6B48C8FF76068674EDEDE9095EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: Bx0I7E4JMMtVJ4vNVV0TmyzFkWP5mpWzGg1rydaL2rI=)
2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:48:c8:ff:76:06:86:74:ed:ed:e9:09:5e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=153d52aa5e5c9442044864e2b50978c93ae10916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:79:4b:da:5f:59:cd:86:30:1a:42:30:da:
74:cb:f2:40:b1:cf:eb:49:73:dc:14:19:b6:3d:c6:
27:b3:5c:03:d0:cf:bf:c3:69:b5:20:26:4a:f2:50:
6d:b8:c7:6f:46:e1:d6:9b:22:2f:fc:83:3e:6f:a1:
8d:30:42:52:a9:a9:e1:c4:f3:ca:60:79:f4:bf:a9:
f5:0d:74:24:4d:46:18:9f:48:d4:e4:f2:5e:6c:2b:
af:d3:f4:c8:4c:23:d1:77:b1:0a:3e:f0:09:b0:2c:
bd:68:7b:87:e9:ad:d0:52:21:a0:d7:a5:48:d0:3f:
5b:cf:72:70:31:d7:e1:3d:8e:6a:6b:d9:02:7a:ab:
df:cb:41:02:aa:f5:34:e8:cc:cd:a2:56:85:ae:c3:
ab:a2:46:ef:7d:7d:e2:b4:36:b3:ea:2b:fb:78:14:
b8:fb:9b:bc:4b:31:9e:99:ca:fa:11:3d:ff:f5:78:
9b:a3:20:d4:04:71:a0:a2:7a:99:71:f4:2a:95:eb:
f8:a6:59:ff:ea:b7:62:58:1a:34:73:fc:18:b2:3f:
94:50:69:53:fc:f5:34:98:c0:4d:99:40:9d:27:7f:
45:9b:57:b3:35:af:b8:d2:ab:9b:34:45:58:1b:d8:
03:94:91:95:d6:bd:23:12:d0:2e:ea:21:ba:1e:2d:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:52:AA:5E:5C:94:42:04:48:64:E2:B5:09:78:C9:3A:E1:09:16
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0d:52:88:fd:ce:8c:4a:fb:27:f4:7e:39:cf:4a:fe:f9:13:
43:4b:a1:7c:32:cf:c8:32:5c:3d:13:b1:cc:7d:28:06:09:1b:
a1:0c:9d:78:5e:b8:bc:26:ad:63:82:e0:49:df:3d:ad:4a:93:
8b:6d:8f:11:14:2f:5c:82:e6:d5:ed:df:e1:5b:9a:d3:da:88:
09:49:28:12:a2:6d:1c:57:a4:8e:6a:2e:f8:22:18:3f:eb:52:
dd:27:1e:e6:c3:62:81:60:4e:35:7f:03:dd:41:99:85:80:93:
4d:90:3c:af:6a:4e:60:d8:5d:33:3c:5a:6f:46:ba:07:8b:f8:
9f:2c:c7:83:bd:23:26:b3:d7:df:07:d3:63:3c:c1:49:92:dc:
a7:22:f5:ae:fe:9b:6f:1c:eb:df:ad:f1:c2:75:0b:3f:64:40:
df:95:a4:8f:16:89:da:16:24:32:cf:8c:e4:50:43:fd:53:6a:
46:a3:d3:66:1f:34:ca:ab:3d:75:e0:5c:df:cf:25:bc:35:8d:
1f:98:7f:d5:7c:6e:72:25:99:5b:13:35:c1:0d:0c:98:37:94:
20:8b:36:9c:f3:c9:52:25:7a:aa:dd:e8:b9:64:ac:61:9f:b1:
6f:08:00:f7:42:d5:02:74:7c:a9:e7:b3:d1:cf:3a:a9:18:d5:
98:b9:4e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmtIyP92BoZ07e3pCV68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjcxOGJhNjgzOTM5N2M2YzU3ZWNlZDZkNTA5NTcxZWFl
Y2VkZGYwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
EygxNTNkNTJhYTVlNWM5NDQyMDQ0ODY0ZTJiNTA5NzhjOTNhZTEwOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnV5S9pfWc2GMBpCMNp0y/JAsc/r
SXPcFBm2PcYns1wD0M+/w2m1ICZK8lBtuMdvRuHWmyIv/IM+b6GNMEJSqanhxPPK
YHn0v6n1DXQkTUYYn0jU5PJebCuv0/TITCPRd7EKPvAJsCy9aHuH6a3QUiGg16VI
0D9bz3JwMdfhPY5qa9kCeqvfy0ECqvU06MzNolaFrsOrokbvfX3itDaz6iv7eBS4
+5u8SzGemcr6ET3/9XiboyDUBHGgonqZcfQqlev4pln/6rdiWBo0c/wYsj+UUGlT
/PU0mMBNmUCdJ39Fm1ezNa+40qubNEVYG9gDlJGV1r0jEtAu6iG6Hi2aHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBU9UqpeXJRCBEhk4rUJeMk64QkWMB8GA1UdIwQY
MBaAFFAnGLpoOTl8bFfs7W1QlXHq7O3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2Ut
Y2Q4MWZjNTgwZjQ3LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDA1YjItZDI4Yi00YmY5LTliY2UtY2Q4MWZjNTgwZjQ3
LzEvVUNjWXVtZzVPWHhzVi16dGJWQ1ZjZXJzN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw1SiP3O
jEr7J/R+Oc9K/vkTQ0uhfDLPyDJcPROxzH0oBgkboQydeF64vCatY4LgSd89rUqT
i22PERQvXILm1e3f4Vua09qICUkoEqJtHFekjmou+CIYP+tS3Sce5sNigWBONX8D
3UGZhYCTTZA8r2pOYNhdMzxab0a6B4v4nyzHg70jJrPX3wfTYzzBSZLcpyL1rv6b
bxzr363xwnULP2RA35WkjxaJ2hYkMs+M5FBD/VNqRqPTZh80yqs9deBc388lvDWN
H5h/1XxuciWZWxM1wQ0MmDeUIIs2nPPJUiV6qt3ouWSsYZ+xbwgA90LVAnR8qeez
0c86qRjVmLlOZg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:06 2025 by rpki-client