Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: K/foaUAcLAQsbXMkqIPa8J3SATRXN6OCmPbembpbCKk=
Subject key identifier: 65:8A:1C:87:8C:59:F0:1C:6D:BE:92:80:A1:C0:52:8A:9C:83:ED:29
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0194BC05036DEA60374E140DC3638E52948A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: QweHQRsWJPrM7Bx17gTaCeoYAGNDIID1pGwXTR9t7vE=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:03:6d:ea:60:37:4e:14:0d:c3:63:8e:52:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=658a1c878c59f01c6dbe9280a1c0528a9c83ed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:ae:97:5f:bd:dc:cf:ee:03:68:d0:4a:67:
6a:0b:3e:24:ef:38:3b:55:70:e6:bd:c8:73:b2:2f:
84:d9:1e:49:9e:14:55:ae:e0:4c:4c:62:5d:41:7b:
2b:07:a7:7d:a5:d2:4e:91:4e:e5:38:76:13:7a:58:
60:48:6b:cb:7c:bc:db:e2:f7:ce:52:ce:48:95:70:
56:b0:df:16:f7:87:f4:70:4c:88:0d:e7:e3:0b:2f:
c8:65:9a:a4:75:05:ae:55:ae:43:25:ef:aa:fe:24:
01:f8:7e:d0:46:9d:a1:c6:15:e3:a6:cf:33:3b:9c:
07:b9:00:c6:fe:d4:f2:a3:18:8f:23:32:7d:21:97:
fa:52:6c:c3:23:48:a4:9a:10:3d:39:7d:b5:81:29:
88:33:3d:3f:a9:a3:e2:cf:e7:5d:21:e6:57:87:8b:
74:16:5b:d2:dc:1a:4d:70:be:88:c3:94:cb:67:4c:
ca:d3:77:a9:0e:c3:37:fc:95:f9:5b:5e:ac:44:9d:
39:44:d3:3c:5a:cc:3d:95:29:22:92:75:9b:79:ff:
f1:a6:b4:dc:f6:14:ed:5b:b9:95:27:c7:f3:14:03:
09:dc:62:69:c4:3b:62:aa:ae:ea:05:c9:e9:2c:70:
db:06:db:43:52:79:c4:23:ad:58:31:fb:cd:9c:dc:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:1C:87:8C:59:F0:1C:6D:BE:92:80:A1:C0:52:8A:9C:83:ED:29
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:ab:79:c4:5e:0f:bf:e3:78:31:8b:0a:de:20:c2:99:f5:
ec:49:93:ed:85:85:5f:2d:8e:a7:54:5b:52:b0:9b:84:a6:fc:
d8:5e:79:62:94:0c:87:3a:7b:b9:05:20:4c:2c:54:8c:91:05:
94:2b:5d:6d:76:ad:01:84:84:b6:f8:95:57:d0:a5:62:67:f4:
c8:bb:4c:f8:9f:a5:f8:7c:a6:6b:3a:e1:f2:82:07:48:0d:3e:
d4:c9:08:21:1e:6a:de:e4:96:45:53:d9:9d:5b:bf:1c:99:a3:
47:3d:8d:b0:42:22:13:bd:e6:d6:4c:51:f3:f8:82:76:27:db:
1a:71:32:b6:32:f4:d4:91:32:f3:37:03:83:13:d9:15:5b:ce:
6d:31:c3:ec:72:2a:0e:5d:ec:f8:ce:3e:80:2a:8e:a1:80:78:
72:1b:96:54:44:8b:ee:5e:fe:f2:34:9c:8a:e4:45:e7:7a:62:
29:db:ef:a5:74:ee:4c:18:c6:d9:74:f3:ea:e5:d7:5d:b5:2e:
9d:b1:4e:9d:f6:7e:c9:d4:af:26:34:f0:f4:1f:61:de:a0:a7:
11:ed:0a:fd:da:3c:51:65:d3:02:ad:39:91:41:45:60:92:46:
12:f9:52:54:1a:e2:f3:a7:d0:eb:b7:dc:0a:7a:6c:22:4a:44:
3c:b6:89:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQNt6mA3ThQNw2OOUpSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjUwMTMxMTEwMDMyWhcNMjUwMjAxMTEwMDMyWjAzMTEwLwYDVQQD
Eyg2NThhMWM4NzhjNTlmMDFjNmRiZTkyODBhMWMwNTI4YTljODNlZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WSul1+93M/uA2jQSmdqCz4k7zg7
VXDmvchzsi+E2R5JnhRVruBMTGJdQXsrB6d9pdJOkU7lOHYTelhgSGvLfLzb4vfO
Us5IlXBWsN8W94f0cEyIDefjCy/IZZqkdQWuVa5DJe+q/iQB+H7QRp2hxhXjps8z
O5wHuQDG/tTyoxiPIzJ9IZf6UmzDI0ikmhA9OX21gSmIMz0/qaPiz+ddIeZXh4t0
FlvS3BpNcL6Iw5TLZ0zK03epDsM3/JX5W16sRJ05RNM8Wsw9lSkiknWbef/xprTc
9hTtW7mVJ8fzFAMJ3GJpxDtiqq7qBcnpLHDbBttDUnnEI61YMfvNnNxmewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWKHIeMWfAcbb6SgKHAUoqcg+0pMB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA+recRe
D7/jeDGLCt4gwpn17EmT7YWFXy2Op1RbUrCbhKb82F55YpQMhzp7uQUgTCxUjJEF
lCtdbXatAYSEtviVV9ClYmf0yLtM+J+l+Hymazrh8oIHSA0+1MkIIR5q3uSWRVPZ
nVu/HJmjRz2NsEIiE73m1kxR8/iCdifbGnEytjL01JEy8zcDgxPZFVvObTHD7HIq
Dl3s+M4+gCqOoYB4chuWVESL7l7+8jSciuRF53piKdvvpXTuTBjG2XTz6uXXXbUu
nbFOnfZ+ydSvJjTw9B9h3qCnEe0K/do8UWXTAq05kUFFYJJGEvlSVBri86fQ67fc
CnpsIkpEPLaJtw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client