Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: DWDT4+6IkR6tvoEs2jOm4XDx1Dvzrkrc1vNJ71tND4A=
Subject key identifier: 27:26:9D:0D:A1:98:06:22:8D:C5:36:07:0F:42:38:E7:6E:D9:8F:FF
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 0194BD85672331101A3C4B88BC5C96F47DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: jFuGPgkThXRcVa1uKOn/nNR6xVEZdKEJUW6AUTuuVGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:23:31:10:1a:3c:4b:88:bc:5c:96:f4:7d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=27269d0da19806228dc536070f4238e76ed98fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:08:ff:98:ea:b3:d8:85:02:45:a6:97:2b:
64:62:3f:b5:16:1e:a4:7a:4b:e3:3e:1b:d1:37:64:
2d:c7:d8:e2:d5:6a:a5:50:d2:6f:71:79:6f:30:4c:
16:d6:21:43:f0:8f:46:e9:ac:af:1d:ad:ef:0b:b3:
92:5e:b2:72:9b:7a:3e:89:ad:df:dc:61:d4:43:c5:
c4:e4:a8:c2:8d:c8:45:fc:95:52:4a:d0:a4:fb:43:
84:c9:b1:dc:7d:34:eb:08:4a:aa:2d:43:4f:72:de:
44:d5:73:b2:e4:92:05:a3:cf:4b:e1:3a:91:25:2a:
13:96:21:b1:b4:81:91:f7:6b:45:ba:43:cf:bc:80:
b0:ad:8f:87:e5:66:e7:5b:7d:6b:da:0e:ac:1e:71:
ec:5b:cb:31:23:77:32:6b:a5:24:e3:1b:54:53:6e:
1f:7b:85:9c:6a:5c:20:19:9b:5c:61:b2:5e:fd:31:
38:d9:c1:e1:c0:57:0b:49:97:0d:15:5c:68:cf:4d:
8e:59:48:6d:3a:7d:d3:7d:01:4e:4d:a1:6a:0c:e0:
f6:5e:26:ad:d4:57:57:a2:fe:b9:d9:d6:d1:f8:9e:
ba:ad:dd:04:c3:fb:59:8d:12:8c:e0:cf:c2:15:1a:
b2:ba:fe:1a:85:ce:a1:77:d3:89:1c:d1:ef:a2:a4:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:26:9D:0D:A1:98:06:22:8D:C5:36:07:0F:42:38:E7:6E:D9:8F:FF
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3d:20:01:8a:66:34:44:25:17:9d:15:4a:07:d8:b7:f6:9b:
ec:ec:85:08:f5:e8:3c:8f:f7:a6:bf:a1:87:51:88:fa:0f:3b:
ec:25:ac:e1:bc:df:9d:ef:c2:b0:11:10:61:e6:ef:a9:2e:1f:
eb:6a:69:fe:ad:16:34:ed:40:91:75:a9:01:9a:1f:63:91:43:
cf:51:0d:a1:ce:65:62:f2:1d:97:56:a7:3f:0b:6a:e2:e2:ef:
d8:e4:93:16:dc:bf:fa:78:d3:05:83:ea:c8:69:10:24:7c:5f:
fa:98:42:1f:d6:98:b0:de:de:a3:6b:94:dc:00:94:c0:c7:89:
08:18:30:bf:8f:90:a3:71:0f:98:d5:43:e5:3f:de:28:4f:45:
6d:8e:ff:17:62:63:c3:51:7f:f6:7a:15:34:90:5f:76:16:f7:
0e:f3:12:4e:3e:7d:a5:0f:92:ff:90:46:ad:d2:2f:bd:4e:dd:
e2:d3:a8:b1:15:e0:1c:4f:af:03:4d:77:76:1e:86:55:3f:46:
4f:54:2a:b6:ad:5f:f4:a4:0b:15:4e:fd:2a:0a:33:1d:f7:e8:
39:ce:71:3b:c2:d2:e4:ab:f3:99:7d:63:7c:9b:da:5b:bf:84:
59:aa:7e:54:21:42:37:dc:7f:e9:15:3c:9a:28:07:bc:6a:a7:
99:a6:c2:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWcjMRAaPEuIvFyW9H2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMjY0YzNmMDk4MzFjY2Q4ODk3MTJmNGZhYjVjNWIxYmUw
Y2FkNTYwHhcNMjUwMTMxMTgwMDIzWhcNMjUwMjAxMTgwMDIzWjAzMTEwLwYDVQQD
EygyNzI2OWQwZGExOTgwNjIyOGRjNTM2MDcwZjQyMzhlNzZlZDk4ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VQI/5jqs9iFAkWmlytkYj+1Fh6k
ekvjPhvRN2Qtx9ji1WqlUNJvcXlvMEwW1iFD8I9G6ayvHa3vC7OSXrJym3o+ia3f
3GHUQ8XE5KjCjchF/JVSStCk+0OEybHcfTTrCEqqLUNPct5E1XOy5JIFo89L4TqR
JSoTliGxtIGR92tFukPPvICwrY+H5WbnW31r2g6sHnHsW8sxI3cya6Uk4xtUU24f
e4WcalwgGZtcYbJe/TE42cHhwFcLSZcNFVxoz02OWUhtOn3TfQFOTaFqDOD2Xiat
1FdXov652dbR+J66rd0Ew/tZjRKM4M/CFRqyuv4ahc6hd9OJHNHvoqThVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcmnQ2hmAYijcU2Bw9COOdu2Y//MB8GA1UdIwQY
MBaAFFAmTD8JgxzNiJcS9Pq1xbG+DK1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTIt
NzE0Zjk2MjZkMDIxLzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMTgzNWYtNTA0Zi00NWJkLWEwNTItNzE0Zjk2MjZkMDIx
LzEvVUNaTVB3bURITTJJbHhMMC1yWEZzYjRNclZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArT0gAYpm
NEQlF50VSgfYt/ab7OyFCPXoPI/3pr+hh1GI+g877CWs4bzfne/CsBEQYebvqS4f
62pp/q0WNO1AkXWpAZofY5FDz1ENoc5lYvIdl1anPwtq4uLv2OSTFty/+njTBYPq
yGkQJHxf+phCH9aYsN7eo2uU3ACUwMeJCBgwv4+Qo3EPmNVD5T/eKE9FbY7/F2Jj
w1F/9noVNJBfdhb3DvMSTj59pQ+S/5BGrdIvvU7d4tOosRXgHE+vA013dh6GVT9G
T1Qqtq1f9KQLFU79KgozHffoOc5xO8LS5KvzmX1jfJvaW7+EWap+VCFCN9x/6RU8
migHvGqnmabCNw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:58 2025 by rpki-client