Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: a2JZQ5hzCrSVDF6RqNNzroZn6aLK3hVKLmBnMsXvz14=
Subject key identifier: FE:61:65:B5:3E:06:A7:59:AD:9F:D0:EB:44:8B:B7:F9:E5:BD:A5:4E
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 0194BD177E791C5D0FC639B1E41252AA2664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0DD2
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: c+tak2t4h0iYJxGo5bt9B/hcQxdTJGzUdx7VvWBAFjk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:79:1c:5d:0f:c6:39:b1:e4:12:52:aa:26:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=fe6165b53e06a759ad9fd0eb448bb7f9e5bda54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:88:03:43:71:37:c1:6c:58:af:c3:72:a8:
0d:f9:13:ba:e7:9f:35:67:cc:c5:8a:08:b5:e5:43:
79:a4:8b:cf:72:31:2a:f8:ad:fc:9f:fb:84:16:9c:
79:41:5d:04:f1:e5:ad:94:94:c1:62:32:32:05:64:
10:5a:fc:83:01:93:f9:d7:d2:6f:f1:ef:93:c8:de:
14:6a:6c:77:57:68:17:76:7d:14:3a:8c:ce:5e:f1:
6c:db:ac:19:75:51:09:47:55:aa:fa:8d:ce:30:3c:
42:6c:3c:43:d3:73:63:4e:97:9d:e0:6f:f1:aa:8f:
88:e1:18:08:2b:c7:61:cb:ef:5b:3b:7e:0f:3c:be:
d8:4b:08:9a:b0:0b:f8:50:93:f0:6f:ff:1e:1b:ed:
60:50:e9:69:ea:8d:1b:61:bd:75:9f:50:8d:48:38:
bc:89:0c:1f:b4:12:14:e5:34:77:20:49:22:ce:89:
b9:0d:5a:88:b6:e8:dd:a6:50:d5:a2:90:5c:77:0f:
a9:49:3d:fa:45:6b:37:d6:cb:a6:3b:a0:0b:7f:26:
49:eb:30:10:6d:4d:71:3a:76:68:60:09:59:b6:e8:
c9:83:55:a5:92:d7:bc:e8:89:50:bb:ab:02:8b:57:
34:cd:4c:ac:48:b7:27:c4:2b:db:a1:6e:c9:02:69:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:65:B5:3E:06:A7:59:AD:9F:D0:EB:44:8B:B7:F9:E5:BD:A5:4E
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6b:b0:41:62:89:44:3a:a0:f4:c6:3f:fc:f5:7a:5b:6b:72:
17:47:03:0d:62:53:df:81:8b:a0:64:ad:e7:8c:e7:6f:58:df:
a2:db:41:fe:4e:6f:6f:da:e2:d1:53:99:2d:1e:1b:83:51:21:
b8:d7:11:da:2a:25:7c:69:71:c4:f8:d0:d2:df:7d:37:07:7f:
5d:75:0d:39:f1:10:70:4d:8f:ac:4f:e0:0a:32:e2:e2:27:76:
de:df:c3:61:e6:15:00:a6:8b:17:ec:09:3f:e1:56:e7:2b:d4:
08:92:4c:f9:31:7b:ef:99:b9:37:0f:d4:54:36:3f:63:50:bc:
46:54:96:79:51:8b:cd:e7:cc:c5:6e:db:66:41:43:4a:8a:29:
31:a4:34:07:d6:a3:84:e8:bf:a8:d2:3b:e4:09:41:7c:db:fa:
e1:2d:05:f1:5d:d1:1d:88:37:2a:a5:5e:84:07:cf:60:03:c3:
8c:c0:89:11:e0:55:e1:63:df:e8:a8:34:0c:29:d9:c4:a9:41:
06:dc:d5:d9:bd:5e:0f:de:fe:cc:79:d3:7d:a5:9f:35:0c:2f:
fd:ca:eb:a4:cd:ea:c3:af:60:0f:0c:7a:5f:53:e8:ee:e3:87:
bb:d3:b8:97:99:3e:e9:f8:7f:39:7b:25:e2:4b:9e:4e:0d:79:
9b:88:a3:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F355HF0Pxjmx5BJSqiZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTNiNzRhNDY4NWMxYzE0YWI5ZTE5MjE3YWFiMTQxNjM0
MTExZDYwHhcNMjUwMTMxMTYwMDIxWhcNMjUwMjAxMTYwMDIxWjAzMTEwLwYDVQQD
EyhmZTYxNjViNTNlMDZhNzU5YWQ5ZmQwZWI0NDhiYjdmOWU1YmRhNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sWIA0NxN8FsWK/DcqgN+RO65581
Z8zFigi15UN5pIvPcjEq+K38n/uEFpx5QV0E8eWtlJTBYjIyBWQQWvyDAZP519Jv
8e+TyN4Uamx3V2gXdn0UOozOXvFs26wZdVEJR1Wq+o3OMDxCbDxD03NjTped4G/x
qo+I4RgIK8dhy+9bO34PPL7YSwiasAv4UJPwb/8eG+1gUOlp6o0bYb11n1CNSDi8
iQwftBIU5TR3IEkizom5DVqItujdplDVopBcdw+pST36RWs31sumO6ALfyZJ6zAQ
bU1xOnZoYAlZtujJg1Wlkte86IlQu6sCi1c0zUysSLcnxCvboW7JAmlaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5hZbU+BqdZrZ/Q60SLt/nlvaVOMB8GA1UdIwQY
MBaAFLuTt0pGhcHBSrnhkheqsUFjQRHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTIt
MzcwNmIxZmNkNmNiLzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTItMzcwNmIxZmNkNmNi
LzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWuwQWKJ
RDqg9MY//PV6W2tyF0cDDWJT34GLoGSt54znb1jfottB/k5vb9ri0VOZLR4bg1Eh
uNcR2iolfGlxxPjQ0t99Nwd/XXUNOfEQcE2PrE/gCjLi4id23t/DYeYVAKaLF+wJ
P+FW5yvUCJJM+TF775m5Nw/UVDY/Y1C8RlSWeVGLzefMxW7bZkFDSoopMaQ0B9aj
hOi/qNI75AlBfNv64S0F8V3RHYg3KqVehAfPYAPDjMCJEeBV4WPf6Kg0DCnZxKlB
BtzV2b1eD97+zHnTfaWfNQwv/crrpM3qw69gDwx6X1Po7uOHu9O4l5k+6fh/OXsl
4kueTg15m4ijUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:46 2025 by rpki-client