Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier: /ZD3mlIaJFS+W9ecQm9smYJ+zQJlzGR7nKXwMqaeIaI=
Subject key identifier: 60:FE:D8:23:01:88:64:15:68:4F:21:8B:29:A0:FF:09:4D:5A:63:68
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial: 0194BCE0CEB89E65F1C94867AEDD5E8A30A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number: 1352
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: A9EB0hl3tAiiFe6jaadv7Te0OtybHU/LJC90nwI+ojg=)
2: zpBMm6HxMUHmJwqr2rmSKoKB2bg.roa (hash: FLvqa8zzZ3ZZAEci8ilv1vdBvy58LVCZTsnN+c5v/BA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:b8:9e:65:f1:c9:48:67:ae:dd:5e:8a:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=60fed82301886415684f218b29a0ff094d5a6368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:5f:0d:f8:bc:f6:98:9a:6f:f1:40:19:3e:
9f:60:84:ea:ce:ff:fb:ae:ec:b5:77:91:69:ca:e0:
18:2e:87:81:2f:21:e7:78:ff:e4:58:1f:22:29:20:
84:da:db:f2:92:c5:4f:b3:4f:87:62:17:4a:72:da:
ef:f4:70:29:97:bf:23:05:ef:02:d7:7a:10:2c:c7:
19:ce:06:2b:78:f2:58:6d:26:c0:7d:17:c0:12:5e:
c4:50:c2:c5:8a:e2:88:7b:a3:4e:33:91:f1:0e:0b:
4c:94:ec:68:71:b5:ee:d6:dd:63:88:a0:12:70:09:
7d:86:69:63:b9:3c:5e:2d:f5:82:39:55:3f:9a:42:
49:03:aa:58:b6:96:f3:fc:57:81:f8:15:41:a5:e7:
e3:bd:38:79:7e:9e:f8:0a:c8:7a:e0:4b:fb:19:d6:
09:50:f9:8d:8a:6c:42:14:9d:d4:97:42:b3:fe:85:
5e:30:f1:20:21:a4:83:aa:88:c3:6d:e6:b6:0f:1f:
0f:a0:0b:bb:a2:6b:c9:40:77:48:6d:50:11:e6:28:
b1:4b:33:41:85:02:b1:67:e2:ea:55:0b:d6:b8:43:
8a:52:e5:3c:c8:80:ee:8b:7d:b7:dc:51:43:3d:95:
2d:90:0b:24:bd:9f:16:d0:f8:46:12:1e:08:21:5a:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FE:D8:23:01:88:64:15:68:4F:21:8B:29:A0:FF:09:4D:5A:63:68
X509v3 Authority Key Identifier:
keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:33:75:a5:55:01:46:f9:c7:a7:d5:60:bd:e0:ff:94:fd:
8c:3a:00:38:39:7e:8b:48:56:6f:4e:da:23:b5:79:8d:87:fa:
bb:2a:9b:52:79:e8:d5:26:af:ff:52:05:b8:f8:8b:ab:36:f8:
9e:ed:df:5b:20:0b:4d:f8:61:18:2f:ab:a8:22:8e:9a:a6:99:
f0:ba:44:53:de:20:6a:5d:36:e8:c2:06:5e:c3:e7:de:81:bd:
ee:fa:11:a0:43:8a:dd:a7:57:10:46:e3:bb:25:14:08:8a:0b:
0e:87:54:2e:70:60:73:ef:d9:5a:37:ae:ca:97:ce:38:e7:06:
1e:0b:a3:74:60:1f:8b:61:69:42:24:82:d1:7d:9c:06:49:8f:
2d:1c:cf:9a:9d:82:e7:f9:6a:96:09:fc:f8:6e:b8:a9:ff:5f:
4c:15:8e:fc:69:7c:db:10:49:9c:01:88:ee:88:84:41:9c:80:
1a:ff:21:e6:da:c4:f9:e8:4f:fd:2f:5a:d3:28:55:48:32:aa:
93:e6:b7:e1:5b:9b:6f:86:08:b7:a4:87:49:e2:78:7b:94:4f:
8c:e2:ba:03:89:89:a4:5e:6e:da:d4:53:ee:48:fd:9d:ac:fa:
08:6b:0b:b8:88:d7:53:2f:c6:f6:f3:b8:4a:fa:52:d0:71:04:
d4:0f:b8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M64nmXxyUhnrt1eijClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMmNmMWVkMTA1YzVjMWRjNTI3YmNkMGYxNDlmZTk0NDll
YmQzMjYwHhcNMjUwMTMxMTUwMDM3WhcNMjUwMjAxMTUwMDM3WjAzMTEwLwYDVQQD
Eyg2MGZlZDgyMzAxODg2NDE1Njg0ZjIxOGIyOWEwZmYwOTRkNWE2MzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qFfDfi89piab/FAGT6fYITqzv/7
ruy1d5FpyuAYLoeBLyHneP/kWB8iKSCE2tvyksVPs0+HYhdKctrv9HApl78jBe8C
13oQLMcZzgYrePJYbSbAfRfAEl7EUMLFiuKIe6NOM5HxDgtMlOxocbXu1t1jiKAS
cAl9hmljuTxeLfWCOVU/mkJJA6pYtpbz/FeB+BVBpefjvTh5fp74Csh64Ev7GdYJ
UPmNimxCFJ3Ul0Kz/oVeMPEgIaSDqojDbea2Dx8PoAu7omvJQHdIbVAR5iixSzNB
hQKxZ+LqVQvWuEOKUuU8yIDui3233FFDPZUtkAskvZ8W0PhGEh4IIVoaAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD+2CMBiGQVaE8hiymg/wlNWmNoMB8GA1UdIwQY
MBaAFLss8e0QXFwdxSe80PFJ/pRJ69MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMt
NzUxYzc0ZTY3ZDM4LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMtNzUxYzc0ZTY3ZDM4
LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpMzdaVV
AUb5x6fVYL3g/5T9jDoAODl+i0hWb07aI7V5jYf6uyqbUnno1Sav/1IFuPiLqzb4
nu3fWyALTfhhGC+rqCKOmqaZ8LpEU94gal026MIGXsPn3oG97voRoEOK3adXEEbj
uyUUCIoLDodULnBgc+/ZWjeuypfOOOcGHgujdGAfi2FpQiSC0X2cBkmPLRzPmp2C
5/lqlgn8+G64qf9fTBWO/Gl82xBJnAGI7oiEQZyAGv8h5trE+ehP/S9a0yhVSDKq
k+a34Vubb4YIt6SHSeJ4e5RPjOK6A4mJpF5u2tRT7kj9naz6CGsLuIjXUy/G9vO4
SvpS0HEE1A+4Uw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:39 2025 by rpki-client