Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: w1YSnWN1MdSxqvpZci7Wms1C5ynl8Q7Hg7voSGgKYQE=
Subject key identifier: 1B:18:93:FC:59:32:E5:16:B3:DA:58:48:6D:55:36:22:A3:8B:A6:C0
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 0194BCA9A5C4BB42EDAD2A7AD64B6EDF3BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: 3bHMC/g/ezQZ+uGAZobMIS9+K5XyWEianbfrvY5tn+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:c4:bb:42:ed:ad:2a:7a:d6:4b:6e:df:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=1b1893fc5932e516b3da58486d553622a38ba6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:82:64:0c:3d:a7:3f:20:7e:65:c7:a9:0d:
1d:9a:07:9b:c4:f4:a3:b0:0e:07:f0:83:1d:90:1a:
48:b0:25:cc:fb:89:05:e3:ff:4d:00:f7:7d:28:42:
b7:1b:8b:1a:27:37:8e:64:b6:ce:40:d5:b2:5f:91:
ef:3f:01:7b:e3:28:bd:71:38:b8:f2:2b:d8:46:dd:
85:86:d1:a1:dc:c2:e0:94:31:cc:0c:63:e3:84:be:
46:dd:7c:e8:00:db:2f:de:6a:7a:4e:ba:42:64:53:
e0:0c:5a:a3:9e:a6:0a:1a:b6:bc:c0:74:d1:3a:49:
6a:cb:bf:a1:33:0d:6c:27:e2:ab:e5:59:01:a7:59:
90:de:78:58:9f:16:c2:65:f2:84:33:f3:d3:56:1c:
bc:95:7b:0c:ac:0b:1a:cf:c5:c2:91:26:45:12:f9:
b9:7b:23:43:ca:b8:a1:f9:bd:9f:93:4b:67:89:70:
ea:c3:a2:21:76:8c:f7:7a:c2:cd:01:24:5e:57:a3:
7b:77:6e:17:99:f3:7c:10:10:4d:f7:53:62:99:88:
82:2a:e5:22:05:99:a3:58:e8:26:8c:c4:2d:9b:f6:
c0:77:c0:af:cd:72:16:f3:b5:25:74:a1:22:d8:58:
f2:07:91:ae:e5:17:95:c8:c7:f4:5e:04:43:ca:b0:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:18:93:FC:59:32:E5:16:B3:DA:58:48:6D:55:36:22:A3:8B:A6:C0
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:ee:28:c9:71:3c:c7:29:19:67:c9:f1:29:00:61:2a:bd:
26:30:46:67:45:64:ec:45:91:86:6d:c1:20:5a:5d:98:e9:51:
e3:16:3f:f6:e2:b9:e1:7d:b5:90:28:27:df:c5:01:f0:7e:2d:
22:09:19:ef:69:25:96:ca:25:a8:be:49:89:30:26:a9:70:1f:
d4:ca:12:15:5b:38:20:c4:b2:7a:03:c6:f2:16:5b:55:ea:dd:
c6:1e:9c:d3:1c:93:5b:8a:ff:2c:df:87:41:c8:84:2a:df:1b:
27:ef:9a:0f:d4:e1:f0:e1:39:7b:f8:3b:b1:8d:c6:5c:ee:1c:
02:0d:a2:ce:09:23:80:9d:41:b9:a6:90:79:46:30:a7:02:75:
b8:6e:cc:f1:2a:db:fe:61:0f:39:21:27:f7:c2:fd:fd:37:d3:
c1:f6:1c:03:90:90:df:3a:68:29:70:f8:02:e0:e5:1c:4e:c0:
53:d0:39:26:0c:6b:08:7e:37:25:90:1c:ed:17:cc:2f:a7:8f:
c4:7d:0e:c7:9e:d4:e6:f8:8d:12:90:76:3f:82:e5:30:a4:d3:
fa:aa:47:5c:53:ac:2a:fe:74:97:47:b0:64:a8:d7:8f:01:0c:
33:d5:b8:cb:12:a9:d2:23:bf:58:88:f1:3d:0b:bb:74:87:61:
8d:f5:9f:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaXEu0LtrSp61ktu3zupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yzg5Y2ZhZGQ1MWY0ZDkyMWJiM2QwYzU1ZjkzMTM2NjNh
NzFjYzQwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
EygxYjE4OTNmYzU5MzJlNTE2YjNkYTU4NDg2ZDU1MzYyMmEzOGJhNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVGCZAw9pz8gfmXHqQ0dmgebxPSj
sA4H8IMdkBpIsCXM+4kF4/9NAPd9KEK3G4saJzeOZLbOQNWyX5HvPwF74yi9cTi4
8ivYRt2FhtGh3MLglDHMDGPjhL5G3XzoANsv3mp6TrpCZFPgDFqjnqYKGra8wHTR
Oklqy7+hMw1sJ+Kr5VkBp1mQ3nhYnxbCZfKEM/PTVhy8lXsMrAsaz8XCkSZFEvm5
eyNDyrih+b2fk0tniXDqw6Ihdoz3esLNASReV6N7d24XmfN8EBBN91NimYiCKuUi
BZmjWOgmjMQtm/bAd8CvzXIW87UldKEi2FjyB5Gu5ReVyMf0XgRDyrACSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsYk/xZMuUWs9pYSG1VNiKji6bAMB8GA1UdIwQY
MBaAFLnInPrdUfTZIbs9DFX5MTZjpxzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQt
MzlkOWUwOTYyNDQwLzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQtMzlkOWUwOTYyNDQw
LzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVzuKMlx
PMcpGWfJ8SkAYSq9JjBGZ0Vk7EWRhm3BIFpdmOlR4xY/9uK54X21kCgn38UB8H4t
IgkZ72kllsolqL5JiTAmqXAf1MoSFVs4IMSyegPG8hZbVerdxh6c0xyTW4r/LN+H
QciEKt8bJ++aD9Th8OE5e/g7sY3GXO4cAg2izgkjgJ1BuaaQeUYwpwJ1uG7M8Srb
/mEPOSEn98L9/TfTwfYcA5CQ3zpoKXD4AuDlHE7AU9A5JgxrCH43JZAc7RfML6eP
xH0Ox57U5viNEpB2P4LlMKTT+qpHXFOsKv50l0ewZKjXjwEMM9W4yxKp0iO/WIjx
PQu7dIdhjfWfxw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:46 2025 by rpki-client