Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: k85itSStQmKfqgmv0YQtuBvQLpGbHYajgbiaV4INrDU=
Subject key identifier: F8:67:A9:26:61:28:E3:FF:9F:9A:5D:5D:FF:1E:6E:21:F7:29:B7:BD
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0194BD17679070CC3D4866C9138F7750BCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: LKxh+QAZsk5TrfFMvscVThbk1FZ734EB6kdiv8yJ7SA=)
3: pleHW6nWDcc0xfnD71P7Zj02Qrw.roa (hash: jUunyevGvx7qOlFlsS+9kK0/bbvq3BE2/HQ+8URjUz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:67:90:70:cc:3d:48:66:c9:13:8f:77:50:bc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=f867a9266128e3ff9f9a5d5dff1e6e21f729b7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:27:b0:ad:60:bb:29:9c:31:6a:9f:9c:33:
01:80:3e:81:17:8d:f9:65:ac:c4:11:90:66:35:81:
69:a8:50:c6:07:fc:7e:d3:5a:7f:76:a4:34:de:f2:
43:6f:6b:af:6e:e1:8c:02:cf:fc:a5:c0:c8:20:3a:
4b:cd:c9:76:b3:e9:f5:1b:b2:a2:92:df:2b:6d:9b:
3e:eb:7c:47:51:50:00:24:64:37:4a:8b:9b:88:43:
d0:d3:69:03:83:c3:09:fb:96:47:54:e1:07:db:8f:
15:28:8d:1a:41:8a:c5:a3:c6:cf:2b:72:29:62:e8:
97:60:a7:54:22:f6:3a:a3:8c:64:5c:b8:b4:40:52:
7e:a0:91:25:ee:9c:be:6e:0f:fa:fe:59:b5:dc:3e:
d7:0a:af:ea:f5:ac:55:de:6a:86:96:2c:2e:34:7b:
38:47:bf:54:84:63:f4:68:a9:b6:62:ef:07:b2:c7:
fe:d6:87:61:62:e9:1f:fd:5d:a2:62:7c:2b:b2:50:
83:d2:72:c4:98:23:db:c5:88:f4:c9:be:83:dd:84:
ad:3c:b1:ca:8d:12:40:6b:a2:b6:15:95:26:98:b3:
b8:68:ce:c1:30:87:14:96:c1:6f:66:ac:8e:e9:63:
2f:c6:f6:b7:08:20:f4:d7:cc:bf:57:1d:36:38:cc:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:67:A9:26:61:28:E3:FF:9F:9A:5D:5D:FF:1E:6E:21:F7:29:B7:BD
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d6:21:fc:2e:5f:57:e9:b8:aa:10:85:1c:cc:8c:0b:d8:a2:
17:9a:95:c9:fd:7a:f9:0c:5c:81:39:8b:d2:cc:a0:df:41:42:
ad:34:8b:35:b9:7c:73:fd:99:1a:bd:c4:bd:7b:f7:13:90:30:
3a:9d:af:fd:10:4d:a2:76:2a:d7:93:77:eb:ec:c2:6c:fc:c6:
cf:54:3b:f1:10:9f:07:14:45:db:86:93:36:cb:29:61:64:cd:
4e:6f:a6:ce:ab:1e:af:83:af:e1:47:5d:a1:32:3a:42:d8:8a:
20:17:05:36:24:87:93:8f:b6:67:08:0a:d3:31:3f:65:4f:22:
46:0f:39:10:c1:6a:60:0b:1c:b9:82:4d:b8:a0:67:03:08:c5:
50:e6:00:70:85:88:54:48:72:3d:0a:26:e9:59:94:9d:fa:33:
13:69:d7:1b:73:4f:63:84:f0:15:55:27:b4:b5:a0:5e:18:71:
7b:63:fb:a9:fd:5c:45:78:f3:cf:df:30:0b:fc:1b:25:d3:a0:
ee:15:d2:f2:ce:63:c5:33:09:b6:0c:ef:77:ea:ca:45:a9:37:
22:d2:a3:18:e7:3d:92:da:b6:81:7b:62:55:bc:e4:b0:65:4e:
35:04:05:65:23:64:c1:e2:b1:5f:78:33:ad:53:11:e0:02:81:
3d:9c:74:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2eQcMw9SGbJE493ULyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzM2VlYWQ0MTNhMTcwNWZiZmNiMmFkYmU5MGM2OWYwNTVl
Mjc1ZGEwHhcNMjUwMTMxMTYwMDE1WhcNMjUwMjAxMTYwMDE1WjAzMTEwLwYDVQQD
EyhmODY3YTkyNjYxMjhlM2ZmOWY5YTVkNWRmZjFlNmUyMWY3MjliN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKEnsK1guymcMWqfnDMBgD6BF435
ZazEEZBmNYFpqFDGB/x+01p/dqQ03vJDb2uvbuGMAs/8pcDIIDpLzcl2s+n1G7Ki
kt8rbZs+63xHUVAAJGQ3SoubiEPQ02kDg8MJ+5ZHVOEH248VKI0aQYrFo8bPK3Ip
YuiXYKdUIvY6o4xkXLi0QFJ+oJEl7py+bg/6/lm13D7XCq/q9axV3mqGliwuNHs4
R79UhGP0aKm2Yu8Hssf+1odhYukf/V2iYnwrslCD0nLEmCPbxYj0yb6D3YStPLHK
jRJAa6K2FZUmmLO4aM7BMIcUlsFvZqyO6WMvxva3CCD018y/Vx02OMx+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhnqSZhKOP/n5pdXf8ebiH3Kbe9MB8GA1UdIwQY
MBaAFFM+6tQToXBfv8sq2+kMafBV4nXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAt
ZDAxN2MxNzU5NjM5LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80OGYxYzYtMTEzNC00OTY5LWFmNjAtZDAxN2MxNzU5NjM5
LzEvVXo3cTFCT2hjRi1feXlyYjZReHA4RlhpZGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9Yh/C5f
V+m4qhCFHMyMC9iiF5qVyf16+QxcgTmL0syg30FCrTSLNbl8c/2ZGr3EvXv3E5Aw
Op2v/RBNonYq15N36+zCbPzGz1Q78RCfBxRF24aTNsspYWTNTm+mzqser4Ov4Udd
oTI6QtiKIBcFNiSHk4+2ZwgK0zE/ZU8iRg85EMFqYAscuYJNuKBnAwjFUOYAcIWI
VEhyPQom6VmUnfozE2nXG3NPY4TwFVUntLWgXhhxe2P7qf1cRXjzz98wC/wbJdOg
7hXS8s5jxTMJtgzvd+rKRak3ItKjGOc9ktq2gXtiVbzksGVONQQFZSNkweKxX3gz
rVMR4AKBPZx0Kg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:28 2025 by rpki-client