Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: stIa5vBM7DD+nSe+6SoVvD3VmSDqS0Cq6R7wJ6Eqc30=
Subject key identifier: BD:CB:72:EA:2B:3B:6F:69:6C:52:B5:6D:2C:61:D1:A6:1A:68:59:C2
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 0194BBCE05CF9669C2911289A4DCFABF89CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: HgUy8C1FhrATHKve8lvG1HA9cA8gvNGl1hLHPuaEfmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:cf:96:69:c2:91:12:89:a4:dc:fa:bf:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=bdcb72ea2b3b6f696c52b56d2c61d1a61a6859c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:fd:78:c9:c8:10:4c:b3:5a:7f:16:00:2a:
3b:03:b5:af:13:6b:9b:dd:fa:1a:0a:cf:89:0c:dd:
42:89:1c:d4:ae:dc:d0:b8:ef:43:61:53:e6:81:d6:
be:f1:89:be:85:80:22:4c:df:06:3f:86:c7:6f:a6:
55:90:ee:f8:75:48:9d:90:4d:61:b5:8f:ae:98:4c:
8c:55:74:a0:24:45:ad:9f:4c:3f:9a:4a:fb:61:8d:
43:2d:6a:1d:86:a7:85:62:5b:f0:1b:c1:2e:29:31:
63:57:be:41:cd:aa:79:03:e5:3e:57:8f:97:f0:6d:
e7:28:87:ec:37:a5:2c:4e:b1:79:1c:99:b5:98:f1:
60:73:23:82:26:1d:69:f3:0c:7d:70:b4:52:97:57:
69:ad:a8:2b:1b:f0:6e:3e:c4:1b:13:f9:49:cb:e6:
2f:4c:38:79:85:fa:96:c2:d0:db:5f:ff:33:08:74:
17:be:68:85:5c:46:77:4b:c5:67:80:c6:41:19:61:
68:13:eb:c8:1b:12:18:a9:ec:b4:2c:cb:31:f6:18:
e5:23:a4:5a:ff:eb:e8:7f:cc:09:53:99:39:1d:e8:
0c:b8:31:9c:b8:de:5f:e4:d5:82:55:0a:10:d9:df:
cc:d4:40:25:c8:ab:f8:69:01:8d:ee:cd:40:8b:ea:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:72:EA:2B:3B:6F:69:6C:52:B5:6D:2C:61:D1:A6:1A:68:59:C2
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:86:a7:15:e6:84:94:46:fa:8e:46:41:df:ea:06:6d:18:8d:
6d:7c:95:a1:45:51:f7:5e:34:9d:5a:24:27:d8:81:67:ea:44:
82:55:99:8b:77:63:97:96:17:d1:d4:49:47:af:ab:d3:ae:dd:
84:73:f3:36:20:46:0e:36:eb:37:e5:fc:c4:39:ff:de:a1:13:
aa:87:e1:75:02:cd:ea:6b:c3:0d:22:18:67:d7:e2:1d:f8:c5:
7c:7d:95:48:cf:5a:fa:27:1c:14:f4:b5:f9:83:01:40:02:2b:
90:c6:68:76:63:54:12:ac:bb:9a:d3:91:ed:81:8e:03:f8:0b:
ac:65:86:bc:94:f1:5d:26:2d:25:9a:8f:54:15:6a:97:07:08:
8e:91:ea:26:80:f5:8d:f2:e3:c6:84:dd:48:b7:5b:70:85:5f:
0b:86:a5:7c:34:46:ec:99:6f:bf:c3:20:54:25:a5:d2:b2:53:
82:ae:e5:a7:e2:b6:cb:22:f4:ac:07:b0:03:6d:ab:73:f9:c5:
e1:c6:6d:63:76:64:4f:55:96:a2:99:02:88:4f:24:a7:df:9f:
51:f5:74:3f:28:e0:5d:b5:55:76:e2:df:85:3c:d7:c0:9b:1b:
c3:01:ab:bf:1d:65:1d:92:84:f5:c1:cb:77:fd:f4:6d:69:64:
fe:63:e1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgXPlmnCkRKJpNz6v4nOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDMyYmRiMTI4Yzg2ZTAwYjIxYzc3OTU5YTgwMTFjNDBk
MDY1MGMwHhcNMjUwMTMxMTAwMDI4WhcNMjUwMjAxMTAwMDI4WjAzMTEwLwYDVQQD
EyhiZGNiNzJlYTJiM2I2ZjY5NmM1MmI1NmQyYzYxZDFhNjFhNjg1OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDz9eMnIEEyzWn8WACo7A7WvE2ub
3foaCs+JDN1CiRzUrtzQuO9DYVPmgda+8Ym+hYAiTN8GP4bHb6ZVkO74dUidkE1h
tY+umEyMVXSgJEWtn0w/mkr7YY1DLWodhqeFYlvwG8EuKTFjV75Bzap5A+U+V4+X
8G3nKIfsN6UsTrF5HJm1mPFgcyOCJh1p8wx9cLRSl1dpragrG/BuPsQbE/lJy+Yv
TDh5hfqWwtDbX/8zCHQXvmiFXEZ3S8VngMZBGWFoE+vIGxIYqey0LMsx9hjlI6Ra
/+vof8wJU5k5HegMuDGcuN5f5NWCVQoQ2d/M1EAlyKv4aQGN7s1Ai+pDswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3LcuorO29pbFK1bSxh0aYaaFnCMB8GA1UdIwQY
MBaAFLkDK9sSjIbgCyHHeVmoARxA0GUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYt
ZmU4NDZmNzVkMTcwLzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYtZmU4NDZmNzVkMTcw
LzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4anFeaE
lEb6jkZB3+oGbRiNbXyVoUVR9140nVokJ9iBZ+pEglWZi3djl5YX0dRJR6+r067d
hHPzNiBGDjbrN+X8xDn/3qETqofhdQLN6mvDDSIYZ9fiHfjFfH2VSM9a+iccFPS1
+YMBQAIrkMZodmNUEqy7mtOR7YGOA/gLrGWGvJTxXSYtJZqPVBVqlwcIjpHqJoD1
jfLjxoTdSLdbcIVfC4alfDRG7Jlvv8MgVCWl0rJTgq7lp+K2yyL0rAewA22rc/nF
4cZtY3ZkT1WWopkCiE8kp9+fUfV0PyjgXbVVduLfhTzXwJsbwwGrvx1lHZKE9cHL
d/30bWlk/mPh0w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:53 2025 by rpki-client