Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: PklKDx1Y5Yy2dzyC+/FK2tUQeaCprVxDnAWscDmSYhw=
Subject key identifier: E9:BD:6D:64:8D:89:FA:17:D3:FA:E4:2E:BF:F7:50:FC:45:B8:3F:17
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 0194BBCDC2B272FC02C0E8FFF928B246F864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: gsw1LuEnemMD9n08nGzq3Fby0oShfGX2H+T2vS+OqEs=)
2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:b2:72:fc:02:c0:e8:ff:f9:28:b2:46:f8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=e9bd6d648d89fa17d3fae42ebff750fc45b83f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:4a:4d:30:b2:2c:42:98:6f:52:2b:94:65:
a0:70:58:90:7f:43:6d:c6:c9:ee:db:e3:fe:6d:bc:
97:62:2e:a3:ad:a7:63:91:71:94:41:2e:e6:30:03:
50:f5:0a:be:77:2c:c9:7e:fc:a1:8a:76:7a:bf:76:
b0:0b:cf:d3:8a:c4:6b:e2:34:6c:e1:cd:2c:78:20:
97:01:a4:be:4c:15:c7:fc:87:8a:02:c1:a4:d1:fb:
7d:76:0a:c2:76:4f:fc:db:a5:28:cd:06:ae:10:d7:
65:c1:2a:1e:6b:c9:ce:6e:73:f5:be:a0:66:04:d0:
e9:f7:fa:b5:32:25:3c:dc:d7:3b:07:b7:d3:80:44:
7e:6a:dd:36:a2:f8:df:7e:ba:bf:c8:8f:09:56:b3:
11:db:43:3c:5e:2a:2d:e6:d1:e0:ad:fb:57:af:8a:
59:89:a6:cb:59:11:1d:37:86:53:2c:3c:d7:4c:9b:
a7:c2:26:e2:f6:af:6d:3c:7b:22:03:30:ea:21:d8:
da:1d:3b:67:dc:3d:aa:a4:34:6e:44:e0:48:57:d9:
a8:4e:3b:58:f6:ad:fa:c3:cf:34:16:4b:fb:93:ff:
da:c1:ab:3b:63:e8:08:cd:d8:39:6e:f3:f1:9a:c0:
10:fe:08:d0:68:b1:65:ef:d5:2d:4a:ba:df:3e:1e:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:6D:64:8D:89:FA:17:D3:FA:E4:2E:BF:F7:50:FC:45:B8:3F:17
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cb:b4:2c:1d:60:68:7b:bc:7c:78:30:03:ed:83:f9:b6:08:
b4:f3:dd:49:47:40:1a:1f:6f:9c:16:c2:11:5f:13:af:0f:a1:
57:53:aa:b2:34:14:38:4b:57:dd:1d:98:0f:92:c3:a5:90:53:
68:97:88:d5:c4:d1:43:cf:d5:0d:9c:43:b4:f8:5b:1a:8e:23:
fc:46:a7:90:04:50:ff:c1:ef:7a:dc:a5:a5:04:a7:f2:2b:21:
08:81:bd:ac:de:b2:0b:63:bd:ac:5e:78:d9:cc:d7:d3:ff:25:
70:4f:7b:cb:0c:56:f2:4f:33:c7:e6:52:bb:f8:80:8a:09:03:
d8:a5:8b:3d:67:9a:cf:62:a3:be:17:ea:ce:7b:04:1a:4e:ee:
34:e9:06:dc:d7:05:ac:9d:8b:37:b4:99:a3:99:07:a7:59:39:
24:0f:3d:68:49:5e:17:65:46:81:1b:05:64:fb:db:ce:04:29:
8e:0e:81:db:4a:0b:08:8e:00:34:94:39:e1:ef:64:1d:8e:8e:
d7:fd:55:3f:8f:85:df:d6:b6:df:bc:9c:36:8b:13:25:4c:c2:
4e:57:8f:bc:ea:fe:9e:f1:80:dc:2f:ad:e1:05:d1:b2:f7:2d:
8f:49:86:47:7f:bb:2c:56:6b:74:e7:b1:a7:3b:fe:7b:71:83:
8f:cc:da:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcKycvwCwOj/+SiyRvhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTU5MWU1NDkwM2QyZjllYTg0MGExNDY5NTViYTM0NTll
MzNlYTEwHhcNMjUwMTMxMTAwMDExWhcNMjUwMjAxMTAwMDExWjAzMTEwLwYDVQQD
EyhlOWJkNmQ2NDhkODlmYTE3ZDNmYWU0MmViZmY3NTBmYzQ1YjgzZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpNKTTCyLEKYb1IrlGWgcFiQf0Nt
xsnu2+P+bbyXYi6jradjkXGUQS7mMANQ9Qq+dyzJfvyhinZ6v3awC8/TisRr4jRs
4c0seCCXAaS+TBXH/IeKAsGk0ft9dgrCdk/826UozQauENdlwSoea8nObnP1vqBm
BNDp9/q1MiU83Nc7B7fTgER+at02ovjffrq/yI8JVrMR20M8Xiot5tHgrftXr4pZ
iabLWREdN4ZTLDzXTJunwibi9q9tPHsiAzDqIdjaHTtn3D2qpDRuROBIV9moTjtY
9q36w880Fkv7k//awas7Y+gIzdg5bvPxmsAQ/gjQaLFl79UtSrrfPh5tqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm9bWSNifoX0/rkLr/3UPxFuD8XMB8GA1UdIwQY
MBaAFFHlkeVJA9L56oQKFGlVujRZ4z6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAt
YTY5Y2Q5ZDE1ZTMxLzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83MWE3NDgtYjJiYy00NzI4LTllZjAtYTY5Y2Q5ZDE1ZTMx
LzEvVWVXUjVVa0Qwdm5xaEFvVWFWVzZORm5qUHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcu0LB1g
aHu8fHgwA+2D+bYItPPdSUdAGh9vnBbCEV8Trw+hV1OqsjQUOEtX3R2YD5LDpZBT
aJeI1cTRQ8/VDZxDtPhbGo4j/EankARQ/8HvetylpQSn8ishCIG9rN6yC2O9rF54
2czX0/8lcE97ywxW8k8zx+ZSu/iAigkD2KWLPWeaz2KjvhfqznsEGk7uNOkG3NcF
rJ2LN7SZo5kHp1k5JA89aEleF2VGgRsFZPvbzgQpjg6B20oLCI4ANJQ54e9kHY6O
1/1VP4+F39a237ycNosTJUzCTlePvOr+nvGA3C+t4QXRsvctj0mGR3+7LFZrdOex
pzv+e3GDj8zapQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:17 2025 by rpki-client