Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: EouaGFdnlKTYQ6QXGh453/nqitNVC3FBdILSkIym3ss=
Subject key identifier: 59:A8:38:F7:70:BC:0A:4A:0B:B3:A6:BB:60:5D:93:91:79:C7:5A:1F
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0194BC72C1574630984931D1B6D3FFE016A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 1303
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: CZCvqtUmfBnKvfrZfChAf-tjwAI.roa (hash: dvFPTl0u4ertIc4y3rjwN5QVBV5GxtXtKDuPI+Z4+dc=)
2: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
3: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
4: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: evaOIIzZCf5lmL+eQ3nbUsaeIaK/MqslW6wPKE/brbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:57:46:30:98:49:31:d1:b6:d3:ff:e0:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=59a838f770bc0a4a0bb3a6bb605d939179c75a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:52:d0:17:ef:42:08:d5:4a:af:24:e6:74:
d6:83:f5:03:bd:07:44:11:53:ed:86:e6:bb:cf:84:
2e:82:e5:6a:14:bd:14:9a:ad:b8:0f:80:61:30:c3:
d8:ab:0c:c3:fb:83:45:95:89:2c:fd:6a:ea:c4:69:
69:91:8c:5c:ed:92:5d:ce:69:02:ac:02:2c:66:0c:
6e:c7:73:77:db:71:24:2e:55:05:d8:03:ca:e3:b5:
28:bc:a8:2c:43:9d:51:88:b4:fd:94:26:6e:4c:ac:
0a:ae:82:82:d7:f9:d2:e2:99:d5:28:09:ad:0d:85:
29:09:8d:82:34:2d:a7:50:c4:2a:b0:7a:80:ac:98:
a1:c7:3d:78:15:b6:0f:33:2c:1b:16:03:48:1d:fe:
5d:4e:22:a1:7a:12:24:1c:94:7f:03:f3:2c:72:5e:
42:9d:91:4b:ac:99:e3:e9:0d:8f:be:37:16:4b:20:
63:c1:08:dd:c8:36:23:1f:b7:38:89:5a:f4:00:53:
07:75:27:a9:f9:7c:1b:a1:a4:ba:80:7d:30:c7:f8:
e2:0d:19:a7:20:38:1f:00:85:82:21:fd:02:35:05:
a7:1d:c1:c9:2b:67:7c:ac:d5:47:8c:18:e5:04:24:
40:3a:b3:36:53:2c:2b:25:96:b8:fd:52:9e:9a:a2:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:38:F7:70:BC:0A:4A:0B:B3:A6:BB:60:5D:93:91:79:C7:5A:1F
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:60:a4:75:3f:1e:15:e7:72:dc:2b:45:9d:4b:56:41:17:
5d:62:05:42:aa:13:db:e0:24:32:ff:28:ef:2e:92:8c:55:b2:
57:81:73:67:3b:36:a7:cd:44:f3:37:e2:6a:e1:55:bb:8b:99:
6a:2f:a3:c2:c7:78:36:30:c5:a2:1a:05:c4:6d:5f:16:48:93:
f2:23:9b:0d:7b:6b:ff:15:8c:82:ef:8d:c6:4d:a7:3f:cc:cd:
84:5f:f9:68:b3:16:7b:8f:16:16:35:37:41:92:4d:ec:d2:53:
e7:88:df:79:89:db:45:96:6d:12:ce:76:3d:7b:bf:bf:22:a2:
49:92:68:d5:5b:1f:01:25:f5:29:bf:25:96:27:0c:79:61:8e:
cb:d8:98:bd:62:63:89:fd:eb:cb:ef:60:ef:83:f0:2b:04:6d:
f9:43:de:1d:77:07:42:28:d5:37:34:01:84:a2:65:f8:69:32:
c2:1e:6b:ed:93:59:c7:ca:85:8a:a1:92:67:1d:c4:fa:2e:44:
d5:fb:00:f3:3f:55:79:d2:fb:a3:b2:b5:e7:de:9e:dd:02:5c:
fa:81:61:96:ab:71:50:7c:70:5b:2b:14:06:87:6c:e8:7f:4f:
df:30:6b:53:2f:5c:ec:f5:dd:0e:0c:af:98:bf:96:e2:9d:da:
e4:0c:3b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csFXRjCYSTHRttP/4BalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNDQyYmRkYTJhMzUzMjBhOTZkODA2YmYxNjhkNWI4NGE3
NmQ0MjYwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
Eyg1OWE4MzhmNzcwYmMwYTRhMGJiM2E2YmI2MDVkOTM5MTc5Yzc1YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE5S0BfvQgjVSq8k5nTWg/UDvQdE
EVPthua7z4QuguVqFL0Umq24D4BhMMPYqwzD+4NFlYks/WrqxGlpkYxc7ZJdzmkC
rAIsZgxux3N323EkLlUF2APK47UovKgsQ51RiLT9lCZuTKwKroKC1/nS4pnVKAmt
DYUpCY2CNC2nUMQqsHqArJihxz14FbYPMywbFgNIHf5dTiKhehIkHJR/A/Mscl5C
nZFLrJnj6Q2PvjcWSyBjwQjdyDYjH7c4iVr0AFMHdSep+XwboaS6gH0wx/jiDRmn
IDgfAIWCIf0CNQWnHcHJK2d8rNVHjBjlBCRAOrM2UywrJZa4/VKemqJZwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmoOPdwvApKC7Omu2Bdk5F5x1ofMB8GA1UdIwQY
MBaAFK1EK92io1MgqW2Aa/Fo1bhKdtQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUt
ODU5ZGJjYTM4NzE0LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUtODU5ZGJjYTM4NzE0
LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQlgpHU/
HhXnctwrRZ1LVkEXXWIFQqoT2+AkMv8o7y6SjFWyV4FzZzs2p81E8zfiauFVu4uZ
ai+jwsd4NjDFohoFxG1fFkiT8iObDXtr/xWMgu+Nxk2nP8zNhF/5aLMWe48WFjU3
QZJN7NJT54jfeYnbRZZtEs52PXu/vyKiSZJo1VsfASX1Kb8llicMeWGOy9iYvWJj
if3ry+9g74PwKwRt+UPeHXcHQijVNzQBhKJl+Gkywh5r7ZNZx8qFiqGSZx3E+i5E
1fsA8z9VedL7o7K1596e3QJc+oFhlqtxUHxwWysUBods6H9P3zBrUy9c7PXdDgyv
mL+W4p3a5Aw7PQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:05 2025 by rpki-client