Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier: k603h3rsnxxXUuwwEDYN4XKHnWJ8s9rq22cS5A0oqFc=
Subject key identifier: 78:30:56:6F:6F:FA:95:4C:B4:BD:2E:14:A6:D5:F1:95:C8:46:41:3C
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 0194BC72AD69FB45CEE8F1C55D89FC47A40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number: 0960
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 5AZ3tR0kmtggSX8GQL0nk_9vkNM.roa (hash: o7jn9b/bWLBA/ntIWwkYzFbMhpkdc8Mhco9rAn9gsO0=)
2: UopNrnZyKWCIxfyYxAz4yBzYAm8.roa (hash: ip/8xDPr5vtCwGEAGLu6/62SRS8zkTWuZ88oOO0rg7o=)
3: fmENWyg6hJdGjLFRBreDxzWhSEw.roa (hash: gVss9zutmtEbFCb91lQE90O0KnaxwP1+Tsw1BPr9Hg8=)
4: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: 5t293QjdtKsr9sQwLN+PE/LuZwL2P4jyHswSnlZeJxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:69:fb:45:ce:e8:f1:c5:5d:89:fc:47:a4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=7830566f6ffa954cb4bd2e14a6d5f195c846413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:ba:12:e5:27:43:c4:9e:5b:e5:b3:99:a5:
95:82:61:e1:ab:88:98:68:5c:28:53:25:6f:7b:f9:
84:ed:eb:61:a8:83:17:65:bf:34:b4:7b:90:2a:da:
33:39:56:99:4c:55:91:7c:d1:70:b5:77:87:ea:79:
e5:f9:ba:10:d3:73:f7:54:4c:27:79:ea:d6:c8:bb:
24:d0:f0:8a:a3:13:82:d2:61:46:c4:8e:fd:4f:1a:
d2:3f:d5:13:4c:35:fe:7c:7e:ce:87:ae:35:45:41:
d3:d5:dd:6a:76:f9:78:2b:76:69:85:19:64:9a:65:
16:85:80:83:ea:b7:80:59:23:de:12:00:3f:d0:1e:
b3:09:23:2f:e8:dc:a5:5b:73:2b:aa:9e:b1:2e:2a:
9a:5d:77:63:32:0c:0f:43:da:bd:04:a5:b4:bd:2c:
58:a7:13:5e:8b:38:0c:cb:c5:15:25:ff:9a:b7:87:
2f:3e:cf:cb:ab:03:24:3e:06:04:12:64:71:37:a4:
ef:f4:00:e7:4a:5a:09:1f:91:f1:25:e0:f4:7c:15:
3c:b5:e8:4f:5d:61:f0:ed:99:05:05:cf:22:a4:ff:
9c:d2:dc:15:5b:07:f9:5a:d5:42:76:a9:2f:8c:cc:
2d:68:63:a6:79:d5:14:cc:29:ee:b6:ac:d9:e5:6a:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:56:6F:6F:FA:95:4C:B4:BD:2E:14:A6:D5:F1:95:C8:46:41:3C
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:2f:9b:ec:8e:d8:38:af:43:82:c4:ab:0d:57:59:c4:5e:
57:a3:6f:64:5c:0f:b5:e7:0e:6c:bf:8b:6f:28:56:ec:da:33:
2e:41:7a:be:f2:c1:7a:bb:ad:18:ac:62:cf:32:85:43:30:84:
5f:0f:8d:1d:31:da:e4:e4:27:26:9f:96:57:cb:0b:09:66:e9:
e7:7a:5e:f8:e9:3e:a5:69:4c:b7:1c:78:c6:ee:17:04:a2:14:
8c:0c:ce:2c:99:17:74:d9:a9:84:0f:eb:c1:d4:91:ac:a3:b2:
76:da:cc:58:cc:c0:e8:95:2c:e6:fc:8c:0f:fa:d4:9d:f7:c8:
0e:19:38:53:d9:4f:94:7f:86:1b:f0:7e:66:95:4a:85:b2:f7:
a6:ca:da:7a:e4:9b:01:56:12:52:93:72:51:01:ea:0f:29:a4:
98:ba:c9:65:f2:31:8e:84:d0:a0:bf:f8:4f:9b:58:6e:5a:16:
98:ce:80:97:59:0b:19:6a:86:0a:0f:d3:ac:67:c5:d8:7a:d3:
c9:d6:7b:ab:fb:fa:82:36:3e:06:39:b6:2c:66:f4:16:6b:c2:
45:d5:33:52:e4:19:e6:94:a1:38:4d:e5:c9:87:10:e8:8b:4f:
55:69:66:2d:4b:00:30:ad:69:3c:82:c7:88:70:58:42:22:67:
14:2d:07:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cq1p+0XO6PHFXYn8R6QOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Zjc0YTQ3YTZkMWEwYmY0YzIxNmU1ZmFiNGQ5MWZiMTI5
ZGYzZDYwHhcNMjUwMTMxMTMwMDE5WhcNMjUwMjAxMTMwMDE5WjAzMTEwLwYDVQQD
Eyg3ODMwNTY2ZjZmZmE5NTRjYjRiZDJlMTRhNmQ1ZjE5NWM4NDY0MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy+6EuUnQ8SeW+WzmaWVgmHhq4iY
aFwoUyVve/mE7ethqIMXZb80tHuQKtozOVaZTFWRfNFwtXeH6nnl+boQ03P3VEwn
eerWyLsk0PCKoxOC0mFGxI79TxrSP9UTTDX+fH7Oh641RUHT1d1qdvl4K3ZphRlk
mmUWhYCD6reAWSPeEgA/0B6zCSMv6NylW3Mrqp6xLiqaXXdjMgwPQ9q9BKW0vSxY
pxNeizgMy8UVJf+at4cvPs/LqwMkPgYEEmRxN6Tv9ADnSloJH5HxJeD0fBU8tehP
XWHw7ZkFBc8ipP+c0twVWwf5WtVCdqkvjMwtaGOmedUUzCnutqzZ5Wq8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgwVm9v+pVMtL0uFKbV8ZXIRkE8MB8GA1UdIwQY
MBaAFLn3Skem0aC/TCFuX6tNkfsSnfPWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2Qt
MzBmNjA4YWRlNDhkLzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGEwYmQtMDgzOC00Yzk1LTljY2QtMzBmNjA4YWRlNDhk
LzEvdWZkS1I2YlJvTDlNSVc1ZnEwMlIteEtkODlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH8vm+yO
2DivQ4LEqw1XWcReV6NvZFwPtecObL+LbyhW7NozLkF6vvLBerutGKxizzKFQzCE
Xw+NHTHa5OQnJp+WV8sLCWbp53pe+Ok+pWlMtxx4xu4XBKIUjAzOLJkXdNmphA/r
wdSRrKOydtrMWMzA6JUs5vyMD/rUnffIDhk4U9lPlH+GG/B+ZpVKhbL3psraeuSb
AVYSUpNyUQHqDymkmLrJZfIxjoTQoL/4T5tYbloWmM6Al1kLGWqGCg/TrGfF2HrT
ydZ7q/v6gjY+Bjm2LGb0FmvCRdUzUuQZ5pShOE3lyYcQ6ItPVWlmLUsAMK1pPILH
iHBYQiJnFC0Hzg==
-----END CERTIFICATE-----
Generated at Thu May 1 12:05:06 2025 by rpki-client