Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: q30AzUMqYzvHpFbGWSb5JMVNRHrJmgjlAVXKRFYrLtQ=
Subject key identifier: 4D:5C:D4:4D:6B:66:4F:A4:F8:BB:34:86:B0:C2:EC:07:29:69:2B:6C
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 0194BCE07B2C723B014AA5C618390C0463C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 040A
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: AlkZJ5y5SgK5NicIMpQu5G4y-kk.roa (hash: 6pDsa6TgLwnLkjOOWWhXhHFWrv8bvlopmayBUNqycZY=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: Vk2tmqQ07EMPNb4wgyCM3olMrBzTpM7Wth2KxiICQMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7b:2c:72:3b:01:4a:a5:c6:18:39:0c:04:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=4d5cd44d6b664fa4f8bb3486b0c2ec0729692b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:7a:ed:03:91:e7:7e:6a:7e:a1:3c:71:e7:
39:0f:97:59:81:e0:cb:ac:ec:ce:3c:80:b6:e9:1a:
da:90:cb:2d:d4:e0:1a:8c:48:44:0b:a8:b6:bf:cd:
6d:98:db:5e:83:d3:00:ad:a8:0e:c2:f0:a5:cb:36:
bd:df:5f:3b:7f:97:a6:62:ca:07:cb:b2:98:8d:9c:
ce:5a:5f:73:fe:4e:54:6c:16:26:e0:a4:8e:1f:9d:
f5:b6:f3:51:2b:75:5a:93:50:67:33:67:5e:5a:31:
e3:75:e3:7d:56:f3:8c:86:22:8f:f3:21:b4:5b:96:
2b:c7:0a:2e:e6:87:d7:ea:4f:72:61:86:11:91:73:
49:f6:00:30:c5:97:b9:bf:d9:24:10:2f:0c:19:27:
a3:1a:ac:64:0b:7d:75:d6:87:db:51:a0:71:69:94:
ce:26:99:8b:8a:9e:f9:26:bf:88:0d:e2:e4:04:bc:
8b:e3:38:7c:5c:83:43:2c:6b:a5:f4:81:b0:99:50:
fc:6e:c8:3b:ea:85:95:ef:65:67:fb:ba:d1:5b:c5:
39:9a:c4:e3:04:d3:87:8f:9b:98:f1:d7:34:f4:04:
38:23:c2:6e:24:73:16:51:e0:91:ef:de:65:7f:03:
75:5b:9d:12:52:df:5c:dd:c8:66:8e:bd:04:aa:8c:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:D4:4D:6B:66:4F:A4:F8:BB:34:86:B0:C2:EC:07:29:69:2B:6C
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:96:9d:f8:a4:b9:4d:f1:9f:da:2c:5f:bb:4b:0b:2b:fa:91:
ff:f4:a4:f3:fd:a6:4e:7a:0c:a7:c8:73:44:a3:b8:bd:de:05:
1f:d8:bd:c6:b8:ff:61:64:d8:ce:06:22:aa:82:3a:5b:5b:a5:
97:29:a2:f8:60:cc:71:30:56:42:39:1a:2b:f9:5e:12:5e:09:
87:9e:61:55:b1:89:3b:d5:5e:7e:4b:90:63:05:5f:91:1f:f5:
a4:85:32:e7:f1:e0:14:b0:1f:4f:99:4f:f7:e3:47:40:23:7e:
c7:53:a2:50:c1:b4:14:a2:92:08:12:9e:8e:1a:0b:35:26:69:
a3:c4:d6:9f:29:c8:ce:ba:ec:41:d3:f1:7c:d8:50:ce:02:bc:
9e:e3:c1:f0:61:05:3f:32:0a:f5:b1:d9:29:5e:0b:02:f0:3b:
47:21:ec:2a:aa:e1:6e:e1:f7:5c:3c:93:b4:d3:24:96:22:89:
a4:4b:ba:ef:4c:99:f2:a6:95:78:85:50:57:47:62:33:27:63:
28:6c:e0:4a:12:7f:bb:a8:7d:9a:22:34:45:94:2f:22:1e:ba:
12:f0:9c:d9:49:f7:67:11:f6:1f:1f:62:15:d9:95:41:8a:b1:
b1:43:8f:b0:25:16:80:ad:3f:6b:36:60:93:51:78:fb:cd:e1:
5b:98:73:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HsscjsBSqXGGDkMBGPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDQzMzg2NTk4NWE3YmI1ZTI2OWMzNzk0YWU2ZjE2NGNm
YzJkZGIwHhcNMjUwMTMxMTUwMDE1WhcNMjUwMjAxMTUwMDE1WjAzMTEwLwYDVQQD
Eyg0ZDVjZDQ0ZDZiNjY0ZmE0ZjhiYjM0ODZiMGMyZWMwNzI5NjkyYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNx67QOR535qfqE8cec5D5dZgeDL
rOzOPIC26RrakMst1OAajEhEC6i2v81tmNteg9MAragOwvClyza93187f5emYsoH
y7KYjZzOWl9z/k5UbBYm4KSOH531tvNRK3Vak1BnM2deWjHjdeN9VvOMhiKP8yG0
W5Yrxwou5ofX6k9yYYYRkXNJ9gAwxZe5v9kkEC8MGSejGqxkC3111ofbUaBxaZTO
JpmLip75Jr+IDeLkBLyL4zh8XINDLGul9IGwmVD8bsg76oWV72Vn+7rRW8U5msTj
BNOHj5uY8dc09AQ4I8JuJHMWUeCR795lfwN1W50SUt9c3chmjr0EqoxPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1c1E1rZk+k+Ls0hrDC7AcpaStsMB8GA1UdIwQY
MBaAFLpEM4ZZhae7XiacN5SubxZM/C3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYjMyMTktYzY0Yi00NzBlLTgzNDEt
M2ExMjAyNzQwMGU2LzEvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hYjMyMTktYzY0Yi00NzBlLTgzNDEtM2ExMjAyNzQwMGU2
LzEvdWtRemhsbUZwN3RlSnB3M2xLNXZGa3o4TGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZad+KS5
TfGf2ixfu0sLK/qR//Sk8/2mTnoMp8hzRKO4vd4FH9i9xrj/YWTYzgYiqoI6W1ul
lymi+GDMcTBWQjkaK/leEl4Jh55hVbGJO9VefkuQYwVfkR/1pIUy5/HgFLAfT5lP
9+NHQCN+x1OiUMG0FKKSCBKejhoLNSZpo8TWnynIzrrsQdPxfNhQzgK8nuPB8GEF
PzIK9bHZKV4LAvA7RyHsKqrhbuH3XDyTtNMkliKJpEu670yZ8qaVeIVQV0diMydj
KGzgShJ/u6h9miI0RZQvIh66EvCc2Un3ZxH2Hx9iFdmVQYqxsUOPsCUWgK0/azZg
k1F4+83hW5hzfQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:12 2025 by rpki-client