Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json)
Hash identifier: nPeqBZkT9MgQ6jfZmHx+M7dn36CFbBsB/5WPFjvqaQY=
Subject key identifier: 9D:09:CD:06:C0:4C:6A:31:D6:71:16:18:2F:F8:E0:66:E9:3B:CA:A8
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0194BCE0B3B01CA6DA27E3CF650BCCAA43B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
Manifest number: 10A3
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 1-0RU5-UH22DOsQOFsaTxG_A9jv8.roa (hash: fqVefE6RlaYUPduGoWsI2YNic7R0MJ4+DTDKQ/JK4rc=)
2: 1-FdAmS5arjzjLAT6dSpDv5Zz5Yo.roa (hash: 5R9Ps8+XKEvJyKNmQySRtdXFtn/oxvTrhdjJdae+0Mc=)
3: 3zDvKjYX5qyyRWMCbEyCJb1whcI.roa (hash: UgMcPhJl2XRyl5iipWHUcO/ZAIUXrG8hPqC4bk4RBnI=)
4: 7lxVna_a0xg23I1zjghxq6R0RXo.roa (hash: tXqQs9pDj0utpLVKfAdmZ32ratdKDLdXwvY9QAYFHbQ=)
5: 8neCxhaAsYaJYU9S15NmrANTFco.roa (hash: 4Xxa8uO6V7yLYBbylJYWkJX0nrzIRa0JN8AeDSSd+ak=)
6: G71A0KnC09evxucNClMqoIzm0gk.roa (hash: xmVP8Or773i49cOPEZFSShv2rrcCsXJL/4gK3rngMPc=)
7: J9EfRVewePQYGlLe8kNseKQHxJk.roa (hash: 9VVRmDPU/cfVWvE65Fl3QvG+s92pe334/sHSfdMSMFU=)
8: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (hash: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=)
9: KpqhmDN4PwGeQOyx1F2chMnA50g.roa (hash: DNgLDFTg3cwMMhN86OnAoSqZ+ZXAhdxntU2zCCbmG4E=)
10: LouV9CNyeDg8LwFm0WQg3Epf8sM.roa (hash: riVTvdLY1eaWT/u45Jf1fSb9f2SlRG/qD/bZHRckGb8=)
11: Mfo7R7gopyPTlMmDcWLmCSJEQ9c.roa (hash: lnUgFSwWDSxWpJ7BpdFvzXn5DXbhFX/tQ/ISSHNrHhQ=)
12: TZnMCWCDD7gEt2iDrVgun6OOwPs.roa (hash: SXv2dOCtyEflvEs/51vkBcKAPnsJErnwyCUiGSJl1Gs=)
13: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (hash: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=)
14: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: ihkuq53GN8OX9teI6NIGbyd+AeBCx6m3P9obRbrrIYc=)
15: UiGDNpiOvn7k0ncYojvTrTGPaRI.roa (hash: z5BbYVimuEj1Af7LeozvflRAWH8pKR5QSKb/hMDIkRk=)
16: UqRTo9zfPVco3yYn5nw6sqcSIPY.roa (hash: /Dt51aOP8kus3h99adWYkONhAkJ+yJWSL0c8KmtagW0=)
17: VnKbkzMWAdNyZPCEQCwxH17zOTU.roa (hash: M1ZyqSf62mnrFwNeiW1+tjvlZxQ3ALH4X2u5wgU4NPE=)
18: VnUCLOk43hyNzCSF7hsRXgxGJl0.roa (hash: ccd3ocgNQxALPht/wppekhUkjG1RoZqQ19sXODzwQkQ=)
19: VrfKhffMAf4Uvkpb8ofkfZeUFEw.roa (hash: zqmGRjYelZvEgqgfx0ULu1HC84g9WGPNJ1jU5jROgUk=)
20: Xmv46alzrB60JmjVYvB6COzgMjA.roa (hash: hA/zNdXVXqQjvFAUICGet5aUd1QUuqsgENdS1uEiVVY=)
21: ce8k7XCQyghvYHchvwALfCrVJwg.roa (hash: yQNx287pWR7HRDZfUEYypC3YO0EWbPD76GUoO2g6XzE=)
22: dK1BXPCUXOQRT5oOEUWvGxP9gQk.roa (hash: Ys5B95zExSqqxQNADZXH3Qy0NLQy7XLhKxBDY3n6xFE=)
23: j-nqL0xN6WbmkmqvTYJrSA6qGCQ.roa (hash: Qw7R/IgYTVpT3XgGSpkjT+8JID4fe8wv1odGKPFhq/M=)
24: jdQZdakevZhVtKrglfN2RFnzQcI.roa (hash: YWgCWrFOGK/KKipBlp5lhfep+s/kMG6GomEIbVictxA=)
25: mI-_CctqZI0K2tk6hRHxlecB4_0.roa (hash: L5SL5l2FWo7G2VvQUQ1QwP0hC9pB98xkcansR+H3uHU=)
26: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (hash: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=)
27: yz5Oj1IRN47m7-hfoNRLKR-QsFQ.roa (hash: AJUnhFM68923GYadc3urgh5yRRol8KdV+S2IVDVlxow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:b0:1c:a6:da:27:e3:cf:65:0b:cc:aa:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=9d09cd06c04c6a31d67116182ff8e066e93bcaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:69:91:70:dc:ca:91:0e:7a:d0:c7:b6:89:
a0:ad:7e:d1:3c:89:8e:23:1c:2f:4d:9c:e7:c7:2f:
c7:ae:7e:5f:bf:d4:2a:cf:2d:2a:1d:3c:cd:39:02:
3a:da:fb:e2:48:bd:5b:bd:53:03:6b:ab:ba:31:9f:
9a:c2:72:72:81:50:88:22:68:00:7b:49:9a:3f:f2:
3a:32:96:d4:1b:86:9f:f7:7a:78:05:07:a0:38:66:
d5:61:73:8b:f1:ea:74:b0:2f:b0:85:76:a7:c5:8e:
3f:4e:5a:eb:9c:1c:41:91:9a:a6:05:74:6b:35:a2:
28:93:1e:24:9a:64:17:fd:fc:0d:d7:23:8e:ee:bc:
79:f5:ac:3c:d5:9b:2a:42:45:e3:60:6a:c2:48:87:
41:6b:09:8f:76:ef:0c:29:42:bd:3a:52:38:31:55:
43:34:10:f3:51:bd:10:55:e9:19:1d:50:32:cb:6d:
c8:6d:ae:7d:a0:d7:fb:d1:a8:f8:d5:04:58:f8:43:
60:ca:da:c3:a1:3f:05:a7:64:9b:4b:5e:80:66:e5:
39:88:8b:92:15:4f:36:40:fd:e9:4c:38:08:cc:90:
bb:06:39:ea:7c:5a:b1:e9:a5:96:4d:04:0f:12:32:
57:ae:bb:6d:1e:c8:7a:e0:86:68:78:2b:25:0e:8d:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:CD:06:C0:4C:6A:31:D6:71:16:18:2F:F8:E0:66:E9:3B:CA:A8
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a6:69:09:dc:78:5d:d2:3f:c6:36:26:69:8b:56:85:7b:27:
48:52:74:c5:e9:56:09:e5:23:b5:71:38:36:63:df:1e:f5:e7:
a6:c5:cc:a1:f6:b1:9f:06:65:29:58:95:8a:e7:ea:43:9f:69:
13:7e:45:3c:b9:3c:13:78:18:46:1b:b7:34:92:31:f0:9e:4f:
12:c1:c5:eb:cc:f5:e4:64:1c:17:3c:30:82:73:66:58:c0:2a:
90:f0:4e:c4:b3:3e:11:7f:1a:7c:b0:95:29:26:4b:ef:18:4f:
12:b8:82:7d:a3:d7:76:b5:be:be:0a:f9:1a:9a:3b:c5:8e:91:
8d:14:44:5f:b3:bb:0a:e4:22:1e:a7:93:cb:a2:48:ba:b7:7c:
f9:6c:7b:d0:50:b7:a7:3b:3e:e6:f1:ec:1d:3f:9c:f4:7c:60:
5f:f6:74:b6:4a:b8:f4:4e:83:6a:2d:cd:26:2d:b9:06:73:0b:
1f:54:0e:68:3e:98:86:22:03:e1:5d:66:4c:9c:ca:19:2c:d0:
d5:b1:bf:6e:1f:5a:9d:01:03:bb:17:a1:18:71:b4:df:76:4f:
2c:19:8a:77:5e:0e:1b:90:3d:bd:f2:1b:8c:6c:5a:e1:ab:57:
03:7e:c2:67:b7:ad:f0:a2:01:2c:66:6d:98:43:b1:cc:e3:8f:
8f:ff:9d:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LOwHKbaJ+PPZQvMqkOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwMTMxMTUwMDMwWhcNMjUwMjAxMTUwMDMwWjAzMTEwLwYDVQQD
Eyg5ZDA5Y2QwNmMwNGM2YTMxZDY3MTE2MTgyZmY4ZTA2NmU5M2JjYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1pkXDcypEOetDHtomgrX7RPImO
IxwvTZznxy/Hrn5fv9Qqzy0qHTzNOQI62vviSL1bvVMDa6u6MZ+awnJygVCIImgA
e0maP/I6MpbUG4af93p4BQegOGbVYXOL8ep0sC+whXanxY4/TlrrnBxBkZqmBXRr
NaIokx4kmmQX/fwN1yOO7rx59aw81ZsqQkXjYGrCSIdBawmPdu8MKUK9OlI4MVVD
NBDzUb0QVekZHVAyy23Iba59oNf70aj41QRY+ENgytrDoT8Fp2SbS16AZuU5iIuS
FU82QP3pTDgIzJC7BjnqfFqx6aWWTQQPEjJXrrttHsh64IZoeCslDo14mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0JzQbATGox1nEWGC/44GbpO8qoMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaZpCdx4
XdI/xjYmaYtWhXsnSFJ0xelWCeUjtXE4NmPfHvXnpsXMofaxnwZlKViViufqQ59p
E35FPLk8E3gYRhu3NJIx8J5PEsHF68z15GQcFzwwgnNmWMAqkPBOxLM+EX8afLCV
KSZL7xhPEriCfaPXdrW+vgr5Gpo7xY6RjRREX7O7CuQiHqeTy6JIurd8+Wx70FC3
pzs+5vHsHT+c9HxgX/Z0tkq49E6Dai3NJi25BnMLH1QOaD6YhiID4V1mTJzKGSzQ
1bG/bh9anQEDuxehGHG033ZPLBmKd14OG5A9vfIbjGxa4atXA37CZ7et8KIBLGZt
mEOxzOOPj/+dcA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:58 2025 by rpki-client