Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
File: 1UbiRDDbqJvc4ixr8ygYy95rvKA.mft (raw, json)
Hash identifier: q85PJQFL0iyW2L6+KRDcPl9rreKUkpggd/X9kRAo144=
Subject key identifier: 5B:95:99:FC:BE:AA:B5:F7:71:E9:6C:60:8C:13:BA:F3:D6:E8:EB:89
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 0194BD174C13075A45A9DEBFC38C812E711F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 1UbiRDDbqJvc4ixr8ygYy95rvKA.crl (hash: DHKww5LBTRxLFHIyR27UOKmTRL7La6VO0Qrf8QggqTA=)
2: uv22mTMk0LoSy-CXGbpeTi_cOpw.roa (hash: 2QrupXJ+8Kz2Vd606/D0/U753yg1bCscNq3qhZhPAaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:13:07:5a:45:a9:de:bf:c3:8c:81:2e:71:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=5b9599fcbeaab5f771e96c608c13baf3d6e8eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:ad:fc:60:ad:37:03:64:bd:67:38:15:8d:
4c:1c:ed:91:37:9b:9f:da:24:fb:01:82:2e:8e:a5:
dc:e3:d6:12:a7:20:7c:da:ff:89:80:01:28:2f:2b:
91:81:12:2c:00:38:d0:8a:da:cf:27:84:21:34:0a:
b6:10:10:47:d0:02:e0:e4:bc:4f:3c:a7:96:a8:82:
8a:9c:2c:b5:14:6f:fa:8f:d6:56:da:f2:c8:f4:85:
0b:af:40:d0:d6:99:a1:b5:7d:79:8d:15:e4:23:d4:
46:ee:c9:ab:7a:a0:27:c9:42:11:80:07:73:e7:a1:
fc:79:4a:d9:4f:61:43:c4:7e:36:88:d9:d7:91:71:
47:88:d6:3b:69:be:59:f2:67:02:2f:97:3f:76:bc:
07:42:b5:34:d2:21:08:72:0a:87:ff:a1:72:93:08:
d9:ad:d6:2f:b1:5e:19:9a:39:ef:1d:a1:48:6f:ad:
35:3e:fb:4f:9c:68:ab:ac:e7:63:78:bc:66:fb:94:
a7:be:3b:49:6f:19:db:c0:7d:78:af:d0:c7:d6:87:
bd:fa:2d:3a:bc:b8:be:19:6f:9d:e9:05:57:6b:7d:
a2:03:66:9d:7f:48:9a:43:69:3a:2d:c6:2f:60:48:
c7:71:e5:90:3c:80:d6:e9:27:b8:9e:b3:dc:f4:37:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:99:FC:BE:AA:B5:F7:71:E9:6C:60:8C:13:BA:F3:D6:E8:EB:89
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:96:ec:a0:31:95:cf:02:96:35:b9:f6:90:8c:89:2b:17:
22:fb:61:91:d0:08:e5:21:35:69:48:1b:db:13:03:5e:cc:14:
2b:82:67:3a:ce:67:ff:97:68:99:fe:11:eb:36:f3:17:80:f2:
96:6c:6f:99:5e:44:81:76:68:ef:79:36:14:e2:ab:fc:73:77:
e9:74:ff:d6:13:25:b4:05:c5:9b:77:13:b4:5d:80:a0:e6:00:
75:44:19:d8:b0:fb:41:2e:91:23:9c:11:ab:fb:8a:c4:f5:71:
58:1c:17:b4:99:d5:11:99:3e:60:76:9f:63:89:8b:13:3f:11:
96:b7:c3:b7:2a:6f:07:df:9a:28:e6:5b:6e:ec:0f:54:4d:a8:
63:da:2d:69:ca:a1:3f:3c:7c:39:a6:bf:b6:e8:d9:56:ee:1a:
46:06:03:f6:ee:d0:52:64:6f:fa:05:36:0a:34:3b:b2:0b:01:
3c:92:8d:aa:2b:46:bd:8b:7a:ae:ba:97:fc:9d:b7:3f:f4:92:
37:cf:e1:29:c6:f2:c5:c4:e8:e8:2f:b3:d2:d2:30:cd:90:17:
08:0a:71:ad:26:37:37:2d:4c:c9:2c:c5:19:f3:41:f4:bf:5a:
0e:ce:ca:29:92:ad:10:c1:b0:3b:26:cd:fd:c9:c6:0f:1f:11:
08:b9:f5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0wTB1pFqd6/w4yBLnEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDZlMjQ0MzBkYmE4OWJkY2UyMmM2YmYzMjgxOGNiZGU2
YmJjYTAwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
Eyg1Yjk1OTlmY2JlYWFiNWY3NzFlOTZjNjA4YzEzYmFmM2Q2ZThlYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC2t/GCtNwNkvWc4FY1MHO2RN5uf
2iT7AYIujqXc49YSpyB82v+JgAEoLyuRgRIsADjQitrPJ4QhNAq2EBBH0ALg5LxP
PKeWqIKKnCy1FG/6j9ZW2vLI9IULr0DQ1pmhtX15jRXkI9RG7smreqAnyUIRgAdz
56H8eUrZT2FDxH42iNnXkXFHiNY7ab5Z8mcCL5c/drwHQrU00iEIcgqH/6FykwjZ
rdYvsV4ZmjnvHaFIb601PvtPnGirrOdjeLxm+5SnvjtJbxnbwH14r9DH1oe9+i06
vLi+GW+d6QVXa32iA2adf0iaQ2k6LcYvYEjHceWQPIDW6Se4nrPc9DcD8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuVmfy+qrX3celsYIwTuvPW6OuJMB8GA1UdIwQY
MBaAFNVG4kQw26ib3OIsa/MoGMvea7ygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjkt
ZDA2Y2ZhMjI2YzY0LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lY2UyYzQtMDE1YS00YmZhLWIyYjktZDA2Y2ZhMjI2YzY0
LzEvMVViaVJERGJxSnZjNGl4cjh5Z1l5OTVydktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaqW7KAx
lc8CljW59pCMiSsXIvthkdAI5SE1aUgb2xMDXswUK4JnOs5n/5domf4R6zbzF4Dy
lmxvmV5EgXZo73k2FOKr/HN36XT/1hMltAXFm3cTtF2AoOYAdUQZ2LD7QS6RI5wR
q/uKxPVxWBwXtJnVEZk+YHafY4mLEz8RlrfDtypvB9+aKOZbbuwPVE2oY9otacqh
Pzx8Oaa/tujZVu4aRgYD9u7QUmRv+gU2CjQ7sgsBPJKNqitGvYt6rrqX/J23P/SS
N8/hKcbyxcTo6C+z0tIwzZAXCApxrSY3Ny1MySzFGfNB9L9aDs7KKZKtEMGwOybN
/cnGDx8RCLn1AQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:17 2025 by rpki-client