Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: T9HSzxUh9U75iA77RLHeZ8takDTbAkTSS0BYpBtprNY=
Subject key identifier: 27:B1:46:A5:55:A7:B2:14:F9:6C:07:65:2E:E0:8C:E4:24:6A:F3:FC
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 0194BCAA012310718F02855AE20E813F2DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: v+M1Lr+NYwWQX60/r/iMWgOIhzhxR6z6OMMszW7Rwbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:01:23:10:71:8f:02:85:5a:e2:0e:81:3f:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=27b146a555a7b214f96c07652ee08ce4246af3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:c9:b9:55:b4:14:e1:34:7f:5b:22:d7:b3:
17:6e:f5:f0:20:c3:ff:d6:35:19:9b:77:01:77:08:
9d:a0:75:55:1b:75:d9:4c:5a:ea:23:ac:5e:8b:3f:
82:00:12:7a:e6:38:75:86:52:3d:db:c8:c8:6a:d9:
28:2a:d5:19:4a:be:20:3e:6c:72:84:3e:8f:70:30:
0c:84:76:ad:c0:ef:a6:81:90:5d:f6:ed:be:33:cd:
be:9c:44:da:a5:67:95:e5:0e:53:5d:21:00:29:6d:
25:59:53:f8:58:2f:31:d2:bf:83:5a:43:4e:da:eb:
26:50:01:d2:54:8e:0b:7a:a6:1a:ea:07:4e:66:80:
0d:34:94:0f:8a:e7:c1:ef:c5:6d:01:94:01:60:fb:
93:0f:fa:4c:ef:a3:6b:87:81:87:f3:d4:0e:a8:a2:
69:b5:70:d9:72:19:b1:b9:0f:2d:19:11:de:e9:4a:
e0:44:a7:b4:a8:9e:44:b0:54:a7:00:5e:3e:9f:71:
0a:e9:ca:6f:11:e5:2d:21:7a:e1:16:81:f9:5d:3e:
f7:40:e8:38:f4:50:d1:6a:a7:2c:41:1d:a4:57:76:
1a:e8:4e:d8:5c:4c:75:fe:b7:cb:76:e9:ba:be:96:
45:e9:e2:2f:ac:ed:d1:e2:90:8b:55:b5:c0:59:ab:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B1:46:A5:55:A7:B2:14:F9:6C:07:65:2E:E0:8C:E4:24:6A:F3:FC
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f3:30:72:67:be:64:64:ac:b8:b1:07:6b:52:df:72:0f:5d:
0d:73:85:ac:37:f0:1f:57:44:be:07:79:a0:1c:1a:26:f5:95:
ef:a4:2a:c4:61:f2:0b:4f:41:82:ec:03:f0:b9:a8:cc:96:3c:
4e:2e:25:ee:a6:da:2d:87:b9:b4:35:69:27:e6:20:17:f2:14:
e8:89:ae:45:57:be:76:f3:86:86:bc:ee:65:a7:2e:3a:31:2f:
28:d1:19:a2:b5:b5:11:70:1b:c9:35:ce:c7:4a:c8:89:6d:b9:
78:b6:7e:1a:81:bd:01:61:1b:b5:3d:25:51:4e:8c:a8:67:dc:
e3:75:ea:46:b0:54:78:e5:b0:68:4f:58:99:1e:8e:50:01:d6:
38:93:e3:7a:b8:99:5c:92:52:d2:10:be:fc:c6:59:45:38:7e:
0d:6a:ac:cd:b4:61:fa:65:2d:8f:6d:49:6f:e6:e1:15:99:40:
6e:13:f1:32:8a:62:a5:91:f3:2e:62:60:55:53:09:fc:a1:b0:
30:67:62:8f:6f:0d:e9:0c:22:bb:d3:2c:5e:9c:c9:dd:e3:75:
e2:7f:99:16:f4:c9:9e:6c:68:73:ee:88:9a:1f:be:05:fc:52:
c1:6f:84:01:00:35:4f:ff:a0:53:85:09:ff:d3:15:1b:52:2d:
1e:bc:eb:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgEjEHGPAoVa4g6BPy3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODcyMzY1MWNhYmNmMDAwOWNmMjgxYTJhNTFjNWI0ZTkw
NTYyMmYwHhcNMjUwMTMxMTQwMDQ1WhcNMjUwMjAxMTQwMDQ1WjAzMTEwLwYDVQQD
EygyN2IxNDZhNTU1YTdiMjE0Zjk2YzA3NjUyZWUwOGNlNDI0NmFmM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWzJuVW0FOE0f1si17MXbvXwIMP/
1jUZm3cBdwidoHVVG3XZTFrqI6xeiz+CABJ65jh1hlI928jIatkoKtUZSr4gPmxy
hD6PcDAMhHatwO+mgZBd9u2+M82+nETapWeV5Q5TXSEAKW0lWVP4WC8x0r+DWkNO
2usmUAHSVI4LeqYa6gdOZoANNJQPiufB78VtAZQBYPuTD/pM76Nrh4GH89QOqKJp
tXDZchmxuQ8tGRHe6UrgRKe0qJ5EsFSnAF4+n3EK6cpvEeUtIXrhFoH5XT73QOg4
9FDRaqcsQR2kV3Ya6E7YXEx1/rfLdum6vpZF6eIvrO3R4pCLVbXAWavsHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCexRqVVp7IU+WwHZS7gjOQkavP8MB8GA1UdIwQY
MBaAFLqHI2Ucq88ACc8oGipRxbTpBWIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjct
MmU3MGRlZDlkOTRmLzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lYmQ2N2MtMDA5YS00NWZjLThmZjctMmU3MGRlZDlkOTRm
LzEvdW9jalpSeXJ6d0FKenlnYUtsSEZ0T2tGWWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfMwcme+
ZGSsuLEHa1Lfcg9dDXOFrDfwH1dEvgd5oBwaJvWV76QqxGHyC09BguwD8LmozJY8
Ti4l7qbaLYe5tDVpJ+YgF/IU6ImuRVe+dvOGhrzuZacuOjEvKNEZorW1EXAbyTXO
x0rIiW25eLZ+GoG9AWEbtT0lUU6MqGfc43XqRrBUeOWwaE9YmR6OUAHWOJPjeriZ
XJJS0hC+/MZZRTh+DWqszbRh+mUtj21Jb+bhFZlAbhPxMopipZHzLmJgVVMJ/KGw
MGdij28N6Qwiu9MsXpzJ3eN14n+ZFvTJnmxoc+6Imh++BfxSwW+EAQA1T/+gU4UJ
/9MVG1ItHrzrnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:17 2025 by rpki-client