Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
File: USGZZlSgu08AhYxAKoILtkvglUc.mft (raw, json)
Hash identifier: tH5cc6iPss0BhX3gJVC0RQsB0fsrJL+DNmB/arvw+0M=
Subject key identifier: A9:31:29:D1:18:CC:85:AB:A5:87:CF:EE:3B:74:4C:EC:FC:F3:30:FE
Authority key identifier: 51:21:99:66:54:A0:BB:4F:00:85:8C:40:2A:82:0B:B6:4B:E0:95:47
Certificate issuer: /CN=5121996654a0bb4f00858c402a820bb64be09547
Certificate serial: 0194BBCF0AB07518BF96DDB3A039566490B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
Manifest number: 06A9
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: USGZZlSgu08AhYxAKoILtkvglUc.crl (hash: YLj8Z2QfZH2Tsj9LBePtkb6sSg9IlIF1/3HOCcmEKDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0a:b0:75:18:bf:96:dd:b3:a0:39:56:64:90:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5121996654a0bb4f00858c402a820bb64be09547
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=a93129d118cc85aba587cfee3b744cecfcf330fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:5f:45:ca:ea:cc:33:9c:12:2c:f1:a3:1a:
94:4b:14:49:2b:9d:81:a1:13:37:a7:8a:80:c3:5c:
d1:94:b2:9c:10:94:16:d2:e5:97:b9:d1:bc:d8:58:
b2:0d:28:56:4d:ac:12:0b:69:e3:0d:f2:da:cf:2a:
23:ba:1c:a0:04:ea:21:a6:8f:14:ca:dd:79:9b:78:
02:5f:d9:8c:d3:72:90:7f:e0:89:1e:8a:c5:c4:75:
ce:3e:c9:b7:6b:41:38:54:ce:cd:7a:7e:fe:c2:f2:
88:22:f3:8c:b4:51:12:6b:b6:0d:76:e1:60:66:fc:
67:9e:4a:0d:3f:d7:6a:95:33:cc:67:68:98:d6:db:
45:92:9c:5d:fd:fe:97:87:9e:a0:ef:bd:73:c4:b5:
af:4b:4c:f4:dc:20:8c:a0:e4:e6:68:85:79:15:ae:
4e:5c:b0:e8:6a:6b:71:f2:3d:82:91:af:29:4c:be:
56:e4:fa:d6:2f:43:56:78:0b:8a:59:fc:cf:5a:7b:
c3:f4:52:00:c9:ad:07:69:20:98:50:71:02:80:ac:
cc:23:91:49:a2:e2:3d:25:6a:76:5a:e0:df:3f:d4:
4b:11:e5:08:75:7d:29:8e:b6:98:87:84:09:e4:d7:
dd:6c:c1:93:95:9b:02:46:89:12:ff:88:af:b1:d4:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:29:D1:18:CC:85:AB:A5:87:CF:EE:3B:74:4C:EC:FC:F3:30:FE
X509v3 Authority Key Identifier:
keyid:51:21:99:66:54:A0:BB:4F:00:85:8C:40:2A:82:0B:B6:4B:E0:95:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4c:29:ce:06:1c:6f:f9:a2:4c:0e:53:c5:db:f4:6f:d1:ac:
55:f9:44:b8:c7:e5:49:64:8c:12:76:82:99:c3:d1:91:37:b2:
f9:bd:62:80:09:2d:f9:90:e2:bd:d6:8f:19:ad:e0:18:4f:2e:
2d:f9:69:8d:ce:f6:f5:b9:11:9f:1c:e4:7d:49:11:47:8b:9e:
de:e8:44:8e:4f:50:0a:12:e9:a4:2c:7a:33:0f:92:4a:96:d8:
e4:56:e7:87:d7:48:52:d3:be:f6:81:bb:ba:1d:7a:f3:25:2c:
ac:f5:69:e4:f8:f4:44:fe:1e:ed:70:f5:be:98:53:91:e4:67:
26:35:bf:df:e5:e1:14:ae:7e:2d:0d:d0:d7:81:23:7a:cf:18:
e0:1e:7c:be:cd:24:b2:e9:45:56:eb:c3:54:cd:03:61:b3:af:
c6:87:48:51:a7:88:bb:f6:dd:1c:b6:f4:57:01:86:54:47:86:
fc:5a:55:8c:ce:c9:5b:08:bd:a3:61:a9:48:6a:c6:ee:1b:b5:
57:64:37:62:4b:0d:f7:80:c9:69:c4:ec:5b:cd:b8:bd:a3:ca:
70:c6:8f:28:93:9c:dc:a9:8c:44:78:d1:a9:d6:b1:fc:7a:bc:
bd:c4:e3:89:57:bc:01:6b:e3:89:b6:f9:6b:c5:3e:0b:0c:7c:
03:02:92:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwqwdRi/lt2zoDlWZJCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjE5OTY2NTRhMGJiNGYwMDg1OGM0MDJhODIwYmI2NGJl
MDk1NDcwHhcNMjUwMTMxMTAwMTM1WhcNMjUwMjAxMTAwMTM1WjAzMTEwLwYDVQQD
EyhhOTMxMjlkMTE4Y2M4NWFiYTU4N2NmZWUzYjc0NGNlY2ZjZjMzMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDBfRcrqzDOcEizxoxqUSxRJK52B
oRM3p4qAw1zRlLKcEJQW0uWXudG82FiyDShWTawSC2njDfLazyojuhygBOohpo8U
yt15m3gCX9mM03KQf+CJHorFxHXOPsm3a0E4VM7Nen7+wvKIIvOMtFESa7YNduFg
ZvxnnkoNP9dqlTPMZ2iY1ttFkpxd/f6Xh56g771zxLWvS0z03CCMoOTmaIV5Fa5O
XLDoamtx8j2Cka8pTL5W5PrWL0NWeAuKWfzPWnvD9FIAya0HaSCYUHECgKzMI5FJ
ouI9JWp2WuDfP9RLEeUIdX0pjraYh4QJ5NfdbMGTlZsCRokS/4ivsdRMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkxKdEYzIWrpYfP7jt0TOz88zD+MB8GA1UdIwQY
MBaAFFEhmWZUoLtPAIWMQCqCC7ZL4JVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNHWlpsU2d1MDhBaFl4QUtvSUx0a3ZnbFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zNTFlZmItYWMyNy00OTU3LWI4OTYt
OTNiNzliZWNjYzUzLzEvVVNHWlpsU2d1MDhBaFl4QUtvSUx0a3ZnbFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zNTFlZmItYWMyNy00OTU3LWI4OTYtOTNiNzliZWNjYzUz
LzEvVVNHWlpsU2d1MDhBaFl4QUtvSUx0a3ZnbFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEwpzgYc
b/miTA5Txdv0b9GsVflEuMflSWSMEnaCmcPRkTey+b1igAkt+ZDivdaPGa3gGE8u
Lflpjc729bkRnxzkfUkRR4ue3uhEjk9QChLppCx6Mw+SSpbY5Fbnh9dIUtO+9oG7
uh168yUsrPVp5Pj0RP4e7XD1vphTkeRnJjW/3+XhFK5+LQ3Q14Ejes8Y4B58vs0k
sulFVuvDVM0DYbOvxodIUaeIu/bdHLb0VwGGVEeG/FpVjM7JWwi9o2GpSGrG7hu1
V2Q3YksN94DJacTsW824vaPKcMaPKJOc3KmMRHjRqdax/Hq8vcTjiVe8AWvjibb5
a8U+Cwx8AwKSxg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:21 2025 by rpki-client