Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
File: uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft (raw, json)
Hash identifier: gQMha6qO4cHOVRdHDYj14KHt1BqASMIYpIc6R9G5wZc=
Subject key identifier: F8:CC:28:76:4C:8C:04:B5:E7:1D:29:AA:F9:9A:CB:6A:6F:B1:30:1A
Authority key identifier: BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
Certificate issuer: /CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Certificate serial: 0194BCE0D31A066641CAB9959666AEAD64A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl (hash: Vm4cd5wHAlp/FIwFjdI0mFKURKZZqUMIgudV3u5h9BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d3:1a:06:66:41:ca:b9:95:96:66:ae:ad:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaf6c08bca308c1c78b0eed8ef30b4a0468118e
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=f8cc28764c8c04b5e71d29aaf99acb6a6fb1301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:ab:88:8e:67:fd:3d:c4:73:5f:d3:7d:bd:
5f:c8:32:03:43:b9:4e:a6:b2:f7:93:a8:b9:4b:02:
c0:bc:88:9a:39:e0:34:71:c0:bf:c8:aa:c1:64:be:
d5:5f:c7:2f:18:8b:40:a8:11:00:94:62:98:c2:1e:
04:f6:72:f9:2d:49:62:f8:59:10:9b:b5:81:70:6c:
2b:5d:0f:4d:0b:0a:83:57:45:e7:42:4c:ea:ca:1e:
04:d2:99:ea:63:a7:d6:ce:04:4f:3f:07:ba:b9:76:
de:ae:92:0c:c7:f2:4c:44:9c:23:d0:ae:ae:54:bd:
fe:38:48:62:77:19:02:7b:06:04:47:ef:a2:85:6d:
23:fe:e0:cc:f7:30:f4:c6:92:22:c7:28:04:24:e1:
09:1d:02:bb:3b:b6:38:4c:77:f4:cb:76:24:5c:17:
5f:19:99:67:4d:59:0b:c2:f6:41:7e:74:35:fb:62:
5b:7a:83:b8:52:f3:65:3c:74:ac:44:eb:b1:3f:7c:
8c:d2:2f:8d:32:8e:59:5d:b3:50:5f:f4:ef:bc:a0:
03:89:7e:9b:e1:be:f9:71:df:23:ce:a6:64:9d:b9:
fc:00:3c:a5:0c:38:a9:a7:a2:e6:53:11:a6:bc:05:
8e:38:06:62:c7:46:6c:d9:e3:92:48:40:d6:7f:47:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:28:76:4C:8C:04:B5:E7:1D:29:AA:F9:9A:CB:6A:6F:B1:30:1A
X509v3 Authority Key Identifier:
keyid:BA:AF:6C:08:BC:A3:08:C1:C7:8B:0E:ED:8E:F3:0B:4A:04:68:11:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq9sCLyjCMHHiw7tjvMLSgRoEY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4aa570-55fe-4b94-bc59-b4993b232e6c/1/uq9sCLyjCMHHiw7tjvMLSgRoEY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c7:a7:71:7d:fc:0d:df:81:35:44:26:41:c0:e6:7e:f3:01:
2e:06:c4:06:de:1b:ee:37:77:5e:69:3b:2f:2a:ed:b5:ed:8b:
26:c9:6c:84:00:36:b8:c6:0b:56:6e:c3:e4:c9:8c:61:d1:f6:
db:a6:15:e8:24:df:a9:3d:cd:5c:bb:6a:e5:fa:9f:e9:e0:4e:
a9:56:c5:92:ce:fe:6d:23:0a:96:9d:8e:e7:f1:89:c1:19:e9:
c0:4d:e6:cf:e0:16:52:4c:62:95:63:73:8f:2b:df:dc:c4:30:
d8:05:ed:4a:f3:12:b0:d8:1a:a8:fe:98:e9:a1:53:36:69:7c:
4a:7f:fc:79:73:e1:9d:61:07:42:38:9c:17:d2:1c:21:ae:2c:
3d:d7:b1:46:ab:2f:f7:7c:b5:b3:01:73:c5:97:a0:af:46:13:
89:30:34:d0:76:d7:ff:54:ef:73:85:3e:ad:3b:24:04:22:db:
e4:bd:9a:ae:67:17:cc:f0:1c:c3:ea:76:6c:f8:a9:ca:44:0a:
f6:7e:78:d6:ec:82:b3:65:18:3a:9e:f1:66:91:33:19:a8:f8:
00:20:49:ee:4c:19:20:87:e3:8e:9c:9f:0f:fa:b9:16:82:3b:
26:e6:e9:41:9b:15:08:d7:72:2b:0a:ab:89:d8:83:8a:f0:f2:
25:23:81:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NMaBmZByrmVlmaurWSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWY2YzA4YmNhMzA4YzFjNzhiMGVlZDhlZjMwYjRhMDQ2
ODExOGUwHhcNMjUwMTMxMTUwMDM4WhcNMjUwMjAxMTUwMDM4WjAzMTEwLwYDVQQD
EyhmOGNjMjg3NjRjOGMwNGI1ZTcxZDI5YWFmOTlhY2I2YTZmYjEzMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9uriI5n/T3Ec1/Tfb1fyDIDQ7lO
prL3k6i5SwLAvIiaOeA0ccC/yKrBZL7VX8cvGItAqBEAlGKYwh4E9nL5LUli+FkQ
m7WBcGwrXQ9NCwqDV0XnQkzqyh4E0pnqY6fWzgRPPwe6uXberpIMx/JMRJwj0K6u
VL3+OEhidxkCewYER++ihW0j/uDM9zD0xpIixygEJOEJHQK7O7Y4THf0y3YkXBdf
GZlnTVkLwvZBfnQ1+2JbeoO4UvNlPHSsROuxP3yM0i+NMo5ZXbNQX/TvvKADiX6b
4b75cd8jzqZknbn8ADylDDipp6LmUxGmvAWOOAZix0Zs2eOSSEDWf0eoqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjMKHZMjAS15x0pqvmay2pvsTAaMB8GA1UdIwQY
MBaAFLqvbAi8owjBx4sO7Y7zC0oEaBGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTkt
YjQ5OTNiMjMyZTZjLzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80YWE1NzAtNTVmZS00Yjk0LWJjNTktYjQ5OTNiMjMyZTZj
LzEvdXE5c0NMeWpDTUhIaXc3dGp2TUxTZ1JvRVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcencX38
Dd+BNUQmQcDmfvMBLgbEBt4b7jd3Xmk7Lyrtte2LJslshAA2uMYLVm7D5MmMYdH2
26YV6CTfqT3NXLtq5fqf6eBOqVbFks7+bSMKlp2O5/GJwRnpwE3mz+AWUkxilWNz
jyvf3MQw2AXtSvMSsNgaqP6Y6aFTNml8Sn/8eXPhnWEHQjicF9IcIa4sPdexRqsv
93y1swFzxZegr0YTiTA00HbX/1Tvc4U+rTskBCLb5L2armcXzPAcw+p2bPipykQK
9n541uyCs2UYOp7xZpEzGaj4ACBJ7kwZIIfjjpyfD/q5FoI7JubpQZsVCNdyKwqr
idiDivDyJSOBEw==
-----END CERTIFICATE-----
Generated at Thu May 1 08:10:01 2025 by rpki-client