Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: LCrSTMtCRDVQJtQi3l1+ccdlRkUj23MSMZmDk2QUUEI=
Subject key identifier: AB:54:23:AE:FC:55:9B:36:C3:DB:5B:10:A1:FE:3C:BB:9A:87:8A:ED
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 0194BD179B479CABE33ABF9909DBA0274D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 03BD
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: Ls3JgMpLb1IBZ5yatuPQEghMgs8rmcg+OVCz3xI6hhY=)
2: y_KZFLyx6LB5ap_GILmPLg-5ycM.roa (hash: jyTla7fsBC19wAEeiM1utmLy4FEG2TIj9sVLX9ZK0Ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:47:9c:ab:e3:3a:bf:99:09:db:a0:27:4d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=ab5423aefc559b36c3db5b10a1fe3cbb9a878aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:ca:37:f9:d5:5e:bd:02:9b:ed:61:4a:c0:
5c:78:ca:8d:45:3a:4e:eb:f4:5d:77:07:18:c0:5b:
39:0a:cf:62:7c:38:85:47:d5:87:6a:0e:75:1a:49:
c9:6e:c0:f5:8c:ab:3a:3c:92:c5:38:43:9a:52:ce:
a7:4d:cc:15:87:ae:c6:72:13:ed:3d:74:60:8d:26:
4d:bf:fc:e4:4d:ef:eb:16:65:b8:24:88:96:f7:5a:
e2:f4:3e:b7:d2:ca:40:34:20:d0:84:ae:ab:76:62:
12:3e:df:4b:41:3a:12:2c:cc:2b:c4:91:ca:7d:e8:
a6:aa:97:94:a7:db:2d:32:14:50:6a:b6:cd:6f:ae:
0d:26:df:b1:f7:38:6a:4e:be:7c:a7:3b:15:e8:66:
94:44:b0:85:fb:c6:c9:d0:8b:7d:5d:ea:f4:25:71:
55:2b:82:2b:67:33:cd:21:db:a1:20:0a:0f:ce:91:
5b:4e:4b:98:1c:d3:45:da:07:4a:18:36:4a:e0:e3:
1f:e3:0b:ab:41:c8:49:99:16:5e:29:bf:a2:50:23:
a2:d9:c5:8e:77:db:ea:ba:5f:68:2c:e9:bc:9f:b0:
3d:98:89:0c:7a:1a:9b:5b:c5:98:da:fa:43:b5:69:
e0:96:35:84:a7:e4:5a:c5:74:f4:c2:40:db:c5:51:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:23:AE:FC:55:9B:36:C3:DB:5B:10:A1:FE:3C:BB:9A:87:8A:ED
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:db:5f:64:63:69:e0:ba:dc:0b:c7:32:20:4c:29:3a:0f:
b1:09:19:bf:e7:c4:97:ec:2a:13:db:52:4a:54:8c:53:4f:92:
a5:52:a7:73:38:cb:a7:b8:a5:d8:16:d5:b2:37:72:40:11:68:
45:83:64:1a:87:7e:1a:5e:24:cd:61:b4:bf:3c:29:3b:e2:a7:
8b:97:3d:ed:bc:2e:f1:06:93:ce:86:2c:73:5c:be:a7:ea:b3:
45:07:73:fa:01:29:d2:35:fa:84:f8:25:fc:b1:a5:ca:b5:71:
a9:5f:c9:0f:75:1f:6a:f8:03:ac:74:65:0b:a4:03:51:d5:8b:
7a:36:3e:82:53:a5:c2:5a:f6:4b:ba:08:bd:8e:36:cf:37:4f:
60:b2:d9:c9:0e:2f:2a:05:8e:52:86:fb:16:b2:fe:5f:3c:37:
0b:dd:f3:7d:3e:55:98:fc:fe:e1:f2:e7:f9:12:78:6f:27:0a:
18:e0:13:0e:08:3e:ef:ea:7f:f1:f6:5b:a2:61:7b:de:c3:d4:
01:23:06:ba:da:e0:50:03:e7:e6:7b:5f:b4:54:dd:02:bf:9c:
7d:57:94:ed:33:94:15:72:15:06:6f:a9:a8:aa:57:cd:44:5f:
6c:b1:a4:d5:61:ee:11:fa:5f:81:32:dd:b3:6a:77:b1:15:eb:
d1:d1:42:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5tHnKvjOr+ZCdugJ019MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzBkZGUzOGJhYjYyNThiNWEwMjk0ZWMxMzRmNmNhYzE1
ZDM2NmUwHhcNMjUwMTMxMTYwMDI4WhcNMjUwMjAxMTYwMDI4WjAzMTEwLwYDVQQD
EyhhYjU0MjNhZWZjNTU5YjM2YzNkYjViMTBhMWZlM2NiYjlhODc4YWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwHKN/nVXr0Cm+1hSsBceMqNRTpO
6/RddwcYwFs5Cs9ifDiFR9WHag51GknJbsD1jKs6PJLFOEOaUs6nTcwVh67GchPt
PXRgjSZNv/zkTe/rFmW4JIiW91ri9D630spANCDQhK6rdmISPt9LQToSLMwrxJHK
feimqpeUp9stMhRQarbNb64NJt+x9zhqTr58pzsV6GaURLCF+8bJ0It9Xer0JXFV
K4IrZzPNIduhIAoPzpFbTkuYHNNF2gdKGDZK4OMf4wurQchJmRZeKb+iUCOi2cWO
d9vqul9oLOm8n7A9mIkMehqbW8WY2vpDtWngljWEp+RaxXT0wkDbxVFDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtUI678VZs2w9tbEKH+PLuah4rtMB8GA1UdIwQY
MBaAFLjA3eOLq2JYtaApTsE09srBXTZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzIt
MDRlZGJkYmNlYzM3LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83YTUyNmMtMmRjNy00MDY5LTllMzItMDRlZGJkYmNlYzM3
LzEvdU1EZDQ0dXJZbGkxb0NsT3dUVDJ5c0ZkTm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALa3bX2Rj
aeC63AvHMiBMKToPsQkZv+fEl+wqE9tSSlSMU0+SpVKnczjLp7il2BbVsjdyQBFo
RYNkGod+Gl4kzWG0vzwpO+Kni5c97bwu8QaTzoYsc1y+p+qzRQdz+gEp0jX6hPgl
/LGlyrVxqV/JD3UfavgDrHRlC6QDUdWLejY+glOlwlr2S7oIvY42zzdPYLLZyQ4v
KgWOUob7FrL+Xzw3C93zfT5VmPz+4fLn+RJ4bycKGOATDgg+7+p/8fZbomF73sPU
ASMGutrgUAPn5ntftFTdAr+cfVeU7TOUFXIVBm+pqKpXzURfbLGk1WHuEfpfgTLd
s2p3sRXr0dFCZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:08 2025 by rpki-client