Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: PbQZcn1Ox9QjrAxRS8letsOv0oJ5HObWbcJzVAz5TG4=
Subject key identifier: B0:EC:6C:02:87:D2:7C:F8:F1:1F:B9:B6:06:E4:33:22:A5:08:61:5B
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 0194BC3BFB2641FABA33146A8AF52FA0C756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 5F
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: bT2PFVgYXy/mMhFqXm1Jcl67Brlf80NbRfGmQ9YxCFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:26:41:fa:ba:33:14:6a:8a:f5:2f:a0:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=b0ec6c0287d27cf8f11fb9b606e43322a508615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:85:16:2e:d4:03:41:a0:cd:22:c7:0d:c3:
c0:b0:54:53:40:87:67:06:d8:a2:6d:b5:b4:ab:29:
ce:10:86:ca:88:63:41:0d:47:af:4a:16:c6:94:7f:
30:16:1e:23:85:e0:e6:48:55:35:aa:71:f5:30:c5:
0c:2d:b2:94:70:8f:51:b8:3b:e1:13:86:de:c7:cb:
57:f4:46:d4:3e:89:09:4c:be:29:0b:6d:d3:36:a9:
3c:06:88:e9:22:23:ad:fa:c5:fc:18:d4:97:5b:86:
d8:c2:ea:1a:fe:24:f7:c5:86:57:59:76:3d:49:7d:
59:14:0f:7e:88:31:58:d6:ec:84:b4:9f:16:78:4d:
bb:34:01:5b:b7:aa:a3:17:ba:f2:42:87:e0:08:d1:
b6:92:a9:fd:90:a3:2c:1e:1c:2e:b2:57:79:c3:f6:
8d:5f:7b:f3:75:59:d1:20:26:2a:05:f3:37:91:74:
d7:85:2e:13:7c:d8:24:32:f6:58:ad:70:4e:10:ff:
6a:c7:ae:a5:a8:7a:a4:cc:96:75:cf:d5:38:89:77:
46:7a:6e:fb:65:6b:97:25:59:67:a6:2b:ae:a4:99:
f2:83:f9:ac:e1:bf:e1:1e:fb:37:89:2a:03:23:c9:
74:f6:dd:2c:5c:d4:b5:5a:c5:c9:35:85:35:5b:c0:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:6C:02:87:D2:7C:F8:F1:1F:B9:B6:06:E4:33:22:A5:08:61:5B
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f3:46:d1:68:0d:2f:93:5d:98:28:ff:11:2f:f1:91:16:fb:
2b:77:3a:c3:a1:6e:e7:0b:7c:09:b9:2c:9e:41:55:96:e5:1c:
80:2e:2e:63:e3:40:dd:a4:59:1d:a0:6a:08:19:93:e1:00:80:
67:14:f3:89:63:5f:15:a3:ae:f1:3d:bf:86:ce:23:48:95:80:
3d:6d:1e:a2:c2:4f:bc:4b:01:34:28:a8:18:a4:5e:10:63:ce:
de:50:17:88:31:75:d4:55:2e:33:fe:97:54:b3:ac:98:54:4b:
37:79:d6:63:20:77:23:97:41:79:55:78:38:5c:bb:4d:21:3e:
36:f5:d5:bb:38:23:ca:62:9e:58:18:94:50:83:17:76:16:39:
67:71:08:5f:db:18:f5:40:5f:70:9a:ff:39:44:6d:05:00:76:
55:77:17:ca:33:78:0e:87:75:cd:ae:b3:ec:3c:d2:10:c9:56:
fe:13:31:0c:68:b5:bf:4d:01:b3:50:10:57:d3:df:0f:c6:40:
cc:62:36:66:6c:fc:18:0b:35:23:a4:37:16:51:7e:c1:5a:70:
3a:ee:4b:8b:cf:24:eb:36:80:e6:28:71:08:9c:d4:7e:ba:58:
1b:45:7f:41:3f:91:c3:18:c9:70:2e:16:6e:72:e4:73:0d:98:
39:55:e8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/smQfq6MxRqivUvoMdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMDNiYjRmMTk1ODExZjhkNzcyM2NhMDFhMGIyZmZiZGVi
NzVhMWIwHhcNMjUwMTMxMTIwMDM0WhcNMjUwMjAxMTIwMDM0WjAzMTEwLwYDVQQD
EyhiMGVjNmMwMjg3ZDI3Y2Y4ZjExZmI5YjYwNmU0MzMyMmE1MDg2MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp2FFi7UA0GgzSLHDcPAsFRTQIdn
BtiibbW0qynOEIbKiGNBDUevShbGlH8wFh4jheDmSFU1qnH1MMUMLbKUcI9RuDvh
E4bex8tX9EbUPokJTL4pC23TNqk8BojpIiOt+sX8GNSXW4bYwuoa/iT3xYZXWXY9
SX1ZFA9+iDFY1uyEtJ8WeE27NAFbt6qjF7ryQofgCNG2kqn9kKMsHhwusld5w/aN
X3vzdVnRICYqBfM3kXTXhS4TfNgkMvZYrXBOEP9qx66lqHqkzJZ1z9U4iXdGem77
ZWuXJVlnpiuupJnyg/ms4b/hHvs3iSoDI8l09t0sXNS1WsXJNYU1W8B+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDsbAKH0nz48R+5tgbkMyKlCGFbMB8GA1UdIwQY
MBaAFFIDu08ZWBH413I8oBoLL/vet1obMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wYTkyYTEtZTU5NC00MWVlLTg1NWMt
MmJhNmEwMjJkNGM5LzEvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wYTkyYTEtZTU5NC00MWVlLTg1NWMtMmJhNmEwMjJkNGM5
LzEvVWdPN1R4bFlFZmpYY2p5Z0dnc3YtOTYzV2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvNG0WgN
L5NdmCj/ES/xkRb7K3c6w6Fu5wt8CbksnkFVluUcgC4uY+NA3aRZHaBqCBmT4QCA
ZxTziWNfFaOu8T2/hs4jSJWAPW0eosJPvEsBNCioGKReEGPO3lAXiDF11FUuM/6X
VLOsmFRLN3nWYyB3I5dBeVV4OFy7TSE+NvXVuzgjymKeWBiUUIMXdhY5Z3EIX9sY
9UBfcJr/OURtBQB2VXcXyjN4Dod1za6z7DzSEMlW/hMxDGi1v00Bs1AQV9PfD8ZA
zGI2Zmz8GAs1I6Q3FlF+wVpwOu5Li88k6zaA5ihxCJzUfrpYG0V/QT+RwxjJcC4W
bnLkcw2YOVXoQg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:38:51 2025 by rpki-client