Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: akXAlqkJYZUStj7mpkP2PYLdU8doQtEi11WDkfgzUAA=
Subject key identifier: 54:27:6D:EE:CF:21:69:C2:55:D7:CF:0C:75:C7:E2:4A:58:FF:14:8B
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 0194BC049E0C976D8121B4DDC9CC6C3281D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 1177
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: PIuhmSEWTGx5rW394gQnfYEnnitNUyLQJSJoKlQRNog=)
2: lbTglUB_cuWwuUtQ0HuYFd1iErc.roa (hash: SqLRBaYjg0lLeWRsw+zkUvg9dbqxK2qZeJXDb+7pMGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9e:0c:97:6d:81:21:b4:dd:c9:cc:6c:32:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=54276deecf2169c255d7cf0c75c7e24a58ff148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:f3:d0:01:06:db:10:f2:f5:5b:4b:95:28:
32:e4:c5:5e:a1:d8:c7:06:ad:ab:51:7d:83:b0:d8:
32:89:0d:9a:d0:42:40:17:66:7f:ef:2c:5d:1a:f9:
39:d0:ae:05:74:2f:54:8b:93:74:6d:b5:7a:b2:eb:
b1:e7:f4:75:bc:ad:f5:76:8e:93:6b:a6:5a:c3:35:
a8:69:66:d0:65:a9:27:8a:e3:9f:f3:4b:86:7c:72:
33:f0:27:bf:b3:bf:1b:62:c4:73:65:9e:7e:28:e6:
80:89:4f:7b:b5:cb:55:1f:40:f5:d1:9d:b6:d8:ef:
60:fc:de:13:a0:31:0e:81:31:ab:04:25:2b:38:13:
47:8d:3a:4b:e8:75:f6:1e:1f:34:d6:18:cb:d8:9b:
66:d5:e0:cf:72:b3:8e:10:29:99:ca:3e:28:d3:c6:
70:d4:6b:59:1e:73:e7:db:90:2b:3f:9e:c7:08:9b:
7f:89:d7:21:10:90:0a:41:93:0d:51:c4:0b:69:a6:
ae:f4:3f:50:ae:7a:a9:1f:c3:97:bf:7e:43:a4:c9:
1b:59:f0:1f:f6:fe:a0:a5:36:4b:85:91:2e:ef:06:
dc:b9:50:ea:d9:af:27:57:f7:2c:48:e6:b5:ee:70:
d9:cc:aa:2b:17:45:18:fd:ee:d1:8e:a7:65:20:61:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:6D:EE:CF:21:69:C2:55:D7:CF:0C:75:C7:E2:4A:58:FF:14:8B
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:92:12:33:d0:ff:01:e7:a0:70:bc:4e:24:9c:c2:ad:fa:
36:ee:91:87:a5:ef:71:92:98:b6:01:a6:85:42:cc:4a:e8:0a:
8d:31:3a:9d:28:24:c5:3b:5a:a9:21:62:ed:1d:26:82:45:67:
9b:2b:58:f0:36:f4:88:bc:f4:7e:a0:12:86:73:bd:1b:19:01:
50:0d:38:7a:e8:77:bd:e7:9c:30:66:7e:57:34:33:4e:18:2a:
b6:e7:19:28:53:8d:ca:0c:34:54:ad:7f:f9:b6:d4:a8:7a:2f:
9c:d6:ff:d5:bf:76:be:67:c0:1e:c2:52:08:90:40:0d:d4:36:
e7:a2:64:ba:8b:4f:97:b5:15:44:86:08:ec:16:6a:3b:40:d5:
89:76:72:48:0c:b4:f4:28:14:69:cd:2c:b7:bb:08:e3:b4:17:
4c:b6:e4:39:4a:6e:e0:fa:a0:72:ce:be:3d:2d:ab:9f:7e:27:
f2:a5:97:09:2b:42:6a:be:b1:a9:be:21:9a:6b:3e:14:ac:13:
c9:bc:4c:d4:0a:54:47:99:26:9f:51:a5:8b:9f:aa:9f:20:fa:
96:3e:36:26:fe:13:0b:42:f3:d4:9e:04:2e:2c:83:12:3e:02:
71:a7:cd:0e:2c:57:7f:1d:08:7e:68:a8:40:1d:2e:f9:ee:45:
c0:de:e2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BJ4Ml22BIbTdycxsMoHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjhiNGNlYTk0Yzg2N2QzNGMyYmZmOWFjZTc2NDBiZmY1
MWQwNmIwHhcNMjUwMTMxMTEwMDA2WhcNMjUwMjAxMTEwMDA2WjAzMTEwLwYDVQQD
Eyg1NDI3NmRlZWNmMjE2OWMyNTVkN2NmMGM3NWM3ZTI0YTU4ZmYxNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIrz0AEG2xDy9VtLlSgy5MVeodjH
Bq2rUX2DsNgyiQ2a0EJAF2Z/7yxdGvk50K4FdC9Ui5N0bbV6suux5/R1vK31do6T
a6ZawzWoaWbQZakniuOf80uGfHIz8Ce/s78bYsRzZZ5+KOaAiU97tctVH0D10Z22
2O9g/N4ToDEOgTGrBCUrOBNHjTpL6HX2Hh801hjL2Jtm1eDPcrOOECmZyj4o08Zw
1GtZHnPn25ArP57HCJt/idchEJAKQZMNUcQLaaau9D9QrnqpH8OXv35DpMkbWfAf
9v6gpTZLhZEu7wbcuVDq2a8nV/csSOa17nDZzKorF0UY/e7RjqdlIGGgtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQnbe7PIWnCVdfPDHXH4kpY/xSLMB8GA1UdIwQY
MBaAFFO4tM6pTIZ9NMK/+aznZAv/UdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQt
OTY1ZjE3NjM3ODJjLzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQtOTY1ZjE3NjM3ODJj
LzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1iSEjPQ
/wHnoHC8TiScwq36Nu6Rh6XvcZKYtgGmhULMSugKjTE6nSgkxTtaqSFi7R0mgkVn
mytY8Db0iLz0fqAShnO9GxkBUA04euh3veecMGZ+VzQzThgqtucZKFONygw0VK1/
+bbUqHovnNb/1b92vmfAHsJSCJBADdQ256JkuotPl7UVRIYI7BZqO0DViXZySAy0
9CgUac0st7sI47QXTLbkOUpu4Pqgcs6+PS2rn34n8qWXCStCar6xqb4hmms+FKwT
ybxM1ApUR5kmn1Gli5+qnyD6lj42Jv4TC0Lz1J4ELiyDEj4CcafNDixXfx0Ifmio
QB0u+e5FwN7ihg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:26 2025 by rpki-client