Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: W5167Scq+nmQymHM+5RB/JSpUS87a41z/m32NZnmpM8=
Subject key identifier: 50:7D:8B:E7:85:2E:3F:45:68:61:EE:A7:B6:39:95:9F:DF:BE:61:5C
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 0194BC7309714E83CDC19FA925F446392B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 10BC
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: hZqz9ky9yu55iM86/CqG2654RoYQj03k5YBmsfPrIXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:09:71:4e:83:cd:c1:9f:a9:25:f4:46:39:2b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=507d8be7852e3f456861eea7b639959fdfbe615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:22:5e:f8:1b:42:45:2f:8e:67:d3:42:e8:
ca:d4:f2:d9:9a:b6:f9:8b:51:6a:a5:cf:e0:8d:8c:
97:08:1b:14:9a:1a:c5:78:a1:8b:5d:db:64:31:3e:
36:97:91:97:75:74:09:00:3a:00:18:7f:64:1d:04:
34:e4:36:a4:65:c6:22:63:87:94:66:06:1b:57:61:
a3:a1:25:5c:a1:f6:bc:c7:a1:22:91:25:fe:5c:99:
7e:92:18:8a:39:7c:5a:e5:43:4c:38:f8:b9:af:39:
50:81:02:c1:71:15:ac:03:98:f8:4a:ab:6a:59:96:
08:d0:fd:4e:20:74:19:aa:44:16:8c:17:b5:3b:0f:
70:6c:f2:fe:b4:d1:15:97:ae:c9:73:73:1a:05:0b:
3e:ae:18:5b:05:5b:95:00:49:cc:af:b9:7f:5b:96:
7a:0e:35:60:4e:fc:92:4d:21:5c:2f:55:ec:f6:7a:
9a:bb:22:b2:93:e8:9c:48:e3:20:39:97:03:ac:c2:
f4:7e:ec:ce:fb:a2:7c:b7:bd:cf:61:83:bf:1d:9b:
c0:a6:a8:bb:6e:ec:14:cc:2d:18:cf:ff:e3:46:b5:
78:df:68:5e:00:43:37:40:04:e3:eb:0a:02:d5:24:
2a:ec:d1:30:54:1d:6e:d5:3e:2b:bf:4e:28:2a:b6:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:8B:E7:85:2E:3F:45:68:61:EE:A7:B6:39:95:9F:DF:BE:61:5C
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:a1:3a:6f:13:aa:39:89:3c:cf:69:b9:3b:18:eb:a4:59:
28:03:21:28:7b:29:84:6f:e3:76:c0:f1:5d:60:99:aa:39:ce:
57:ce:67:fc:24:87:47:48:6c:4f:05:0f:3c:8c:33:c9:4d:5d:
b8:c7:df:41:40:20:06:0d:a4:be:07:ab:03:d7:5d:d0:39:1a:
53:7c:35:b9:91:05:32:b6:f0:04:e0:5d:cf:28:76:c9:cd:52:
6d:20:01:3b:ab:b9:a1:a6:39:ff:d0:c4:10:8a:60:30:65:de:
88:eb:1e:35:c6:d1:a7:25:6f:21:ca:da:7a:12:4b:fa:5c:85:
f4:d6:c8:d5:fa:1d:76:bc:b8:57:d9:91:44:6a:b4:a8:77:47:
5d:37:cf:3f:cf:82:4f:b0:ab:61:04:d5:2c:8f:75:c1:b7:03:
22:8d:7c:17:72:e9:9b:8d:7d:1a:ed:ee:2d:cd:47:9e:6d:f4:
1a:c4:b8:0f:3d:ad:13:74:ce:fc:8f:1e:24:5e:75:8a:f3:11:
7b:ae:51:19:60:ad:e7:43:87:57:88:8a:4c:fb:32:bd:72:43:
68:c8:25:86:c0:c1:6b:58:f1:b1:70:bf:fe:1d:30:74:61:85:
ef:ed:17:97:0a:cf:da:db:ff:ac:92:27:2c:46:5f:6a:3c:97:
77:87:84:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwlxToPNwZ+pJfRGOSsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk
ZWE4ZjYwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
Eyg1MDdkOGJlNzg1MmUzZjQ1Njg2MWVlYTdiNjM5OTU5ZmRmYmU2MTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DsiXvgbQkUvjmfTQujK1PLZmrb5
i1Fqpc/gjYyXCBsUmhrFeKGLXdtkMT42l5GXdXQJADoAGH9kHQQ05DakZcYiY4eU
ZgYbV2GjoSVcofa8x6EikSX+XJl+khiKOXxa5UNMOPi5rzlQgQLBcRWsA5j4Sqtq
WZYI0P1OIHQZqkQWjBe1Ow9wbPL+tNEVl67Jc3MaBQs+rhhbBVuVAEnMr7l/W5Z6
DjVgTvySTSFcL1Xs9nqauyKyk+icSOMgOZcDrML0fuzO+6J8t73PYYO/HZvApqi7
buwUzC0Yz//jRrV432heAEM3QATj6woC1SQq7NEwVB1u1T4rv04oKrbJLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB9i+eFLj9FaGHup7Y5lZ/fvmFcMB8GA1UdIwQY
MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt
ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4
LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH2hOm8T
qjmJPM9puTsY66RZKAMhKHsphG/jdsDxXWCZqjnOV85n/CSHR0hsTwUPPIwzyU1d
uMffQUAgBg2kvgerA9dd0DkaU3w1uZEFMrbwBOBdzyh2yc1SbSABO6u5oaY5/9DE
EIpgMGXeiOseNcbRpyVvIcraehJL+lyF9NbI1foddry4V9mRRGq0qHdHXTfPP8+C
T7CrYQTVLI91wbcDIo18F3Lpm419Gu3uLc1Hnm30GsS4Dz2tE3TO/I8eJF51ivMR
e65RGWCt50OHV4iKTPsyvXJDaMglhsDBa1jxsXC//h0wdGGF7+0XlwrP2tv/rJIn
LEZfajyXd4eEKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client