Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
File: UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft (raw, json)
Hash identifier: NPWcotYsdcpFejlwG58J8n9PMkBPteDqGEAIO/ViFkw=
Subject key identifier: 41:0B:3E:16:43:1B:CD:05:84:B2:73:13:B6:27:40:AF:3B:F4:95:58
Authority key identifier: 50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
Certificate issuer: /CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Certificate serial: 0194BC04F23DA6C29E973FF2AFDE6E4D9D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
Manifest number: 0D02
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl (hash: +ncUL7ShoaBDAmt1Pl4UidrPyunNN+UhUKOwdNTT/oM=)
2: e0sBEXc_XekpdrNMJVIp_Pl3SBY.roa (hash: M7R6DXKCTjS+VvD5Kv8ntaZtUcFfoiyAh38NJJRxUkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:3d:a6:c2:9e:97:3f:f2:af:de:6e:4d:9d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509fe7e8b9de675913121e7ebb4226b62d03b1cb
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=410b3e16431bcd0584b27313b62740af3bf49558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:2e:80:b3:fc:81:bc:e5:66:dd:07:1b:5c:
87:e3:d3:9d:c2:b6:bd:3d:94:49:9f:c2:61:c8:87:
22:3e:3b:b2:ea:7e:78:7a:c1:32:b6:45:36:f4:0b:
98:47:b9:8c:bc:3c:4a:c4:67:f5:e2:8f:68:75:8b:
f4:52:7d:bf:ad:73:c9:a2:00:02:18:af:0e:02:2c:
39:ff:e0:44:9c:8f:2c:00:9c:35:6d:b7:15:e4:fc:
ca:10:a8:f2:28:07:81:1f:1f:50:09:6a:50:6a:12:
2b:d5:67:f9:84:9e:ae:d1:66:01:2f:36:16:f7:e8:
64:1f:2f:e9:6a:39:50:a3:a3:52:60:af:e9:c7:92:
ca:ac:a8:49:df:8e:44:73:b7:1a:83:fc:f5:6d:68:
de:10:a8:70:49:65:ff:09:1f:83:96:f5:6d:18:c7:
62:55:5a:ea:22:79:8e:38:46:7a:7e:45:9a:97:3d:
b3:e5:8b:2f:da:ff:49:d1:96:9a:b5:a5:10:5e:12:
37:e2:6b:26:d6:81:57:09:3c:66:5c:a8:52:f7:05:
e5:e1:0a:69:5c:a8:ae:62:29:ef:b3:09:c5:d8:ab:
4f:cd:86:bd:13:fc:c5:13:da:08:f6:7a:5d:1e:90:
53:d6:46:a0:05:e5:76:e0:d9:3e:79:4e:80:e5:20:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:3E:16:43:1B:CD:05:84:B2:73:13:B6:27:40:AF:3B:F4:95:58
X509v3 Authority Key Identifier:
keyid:50:9F:E7:E8:B9:DE:67:59:13:12:1E:7E:BB:42:26:B6:2D:03:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ_n6LneZ1kTEh5-u0Imti0Dscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7473ac-8437-4c21-ac13-0b477ca73ac6/1/UJ_n6LneZ1kTEh5-u0Imti0Dscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:51:ac:e2:45:57:e0:de:4b:7f:53:5a:cc:15:7c:b2:22:f1:
13:f2:67:17:ba:55:03:60:da:90:60:86:85:09:de:fd:94:2d:
95:eb:13:39:97:5d:e5:33:8f:45:f2:9e:68:68:d6:14:6d:fb:
d5:f3:fa:04:41:4f:21:06:b3:90:13:51:8f:ec:b7:8a:5f:1e:
51:b4:5b:38:1c:db:a0:cf:5f:04:58:d4:a4:8a:7a:f7:e3:89:
d0:f1:17:9d:82:12:60:fc:e2:09:5f:d1:f9:f9:ca:89:98:17:
62:ff:ba:e2:d8:5e:27:d0:b7:9c:49:81:f9:f0:3e:c5:b1:1e:
f6:3c:c5:63:08:e5:db:49:c3:ee:aa:54:e6:fb:45:28:97:9d:
b8:86:81:3d:7a:22:a8:51:1b:b5:bb:e0:20:f0:fc:6a:71:85:
72:6d:28:a4:b0:5c:6b:83:cc:30:59:63:28:b9:f7:6e:1b:e8:
e4:3a:99:cb:32:75:e7:6a:bf:51:47:7d:2c:b0:f3:11:ea:dc:
5b:20:d2:46:f6:4a:a5:20:e8:f7:5c:c5:d8:8d:25:e4:8f:a2:
26:2a:26:4b:77:70:d2:38:c0:98:85:6c:fa:39:f6:55:08:5e:
d3:d9:9d:16:e2:86:90:5c:91:06:14:7f:7b:ac:dc:06:85:0d:
32:1a:e5:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPI9psKelz/yr95uTZ1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWZlN2U4YjlkZTY3NTkxMzEyMWU3ZWJiNDIyNmI2MmQw
M2IxY2IwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
Eyg0MTBiM2UxNjQzMWJjZDA1ODRiMjczMTNiNjI3NDBhZjNiZjQ5NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWIugLP8gbzlZt0HG1yH49Odwra9
PZRJn8JhyIciPjuy6n54esEytkU29AuYR7mMvDxKxGf14o9odYv0Un2/rXPJogAC
GK8OAiw5/+BEnI8sAJw1bbcV5PzKEKjyKAeBHx9QCWpQahIr1Wf5hJ6u0WYBLzYW
9+hkHy/pajlQo6NSYK/px5LKrKhJ345Ec7cag/z1bWjeEKhwSWX/CR+DlvVtGMdi
VVrqInmOOEZ6fkWalz2z5Ysv2v9J0ZaataUQXhI34msm1oFXCTxmXKhS9wXl4Qpp
XKiuYinvswnF2KtPzYa9E/zFE9oI9npdHpBT1kagBeV24Nk+eU6A5SAB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEELPhZDG80FhLJzE7YnQK879JVYMB8GA1UdIwQY
MBaAFFCf5+i53mdZExIefrtCJrYtA7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMt
MGI0NzdjYTczYWM2LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NDczYWMtODQzNy00YzIxLWFjMTMtMGI0NzdjYTczYWM2
LzEvVUpfbjZMbmVaMWtURWg1LXUwSW10aTBEc2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1Gs4kVX
4N5Lf1NazBV8siLxE/JnF7pVA2DakGCGhQne/ZQtlesTOZdd5TOPRfKeaGjWFG37
1fP6BEFPIQazkBNRj+y3il8eUbRbOBzboM9fBFjUpIp69+OJ0PEXnYISYPziCV/R
+fnKiZgXYv+64theJ9C3nEmB+fA+xbEe9jzFYwjl20nD7qpU5vtFKJeduIaBPXoi
qFEbtbvgIPD8anGFcm0opLBca4PMMFljKLn3bhvo5DqZyzJ152q/UUd9LLDzEerc
WyDSRvZKpSDo91zF2I0l5I+iJiomS3dw0jjAmIVs+jn2VQhe09mdFuKGkFyRBhR/
e6zcBoUNMhrlwA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:23 2025 by rpki-client