Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
File: U3h815RuENiGRqx53lfMbsWeQTI.mft (raw, json)
Hash identifier: EQTpmnpDBNYpm8yopDW2Tnx9doFfohXZUKg6V0HIKKs=
Subject key identifier: 0A:92:49:EE:01:A7:1F:7B:72:FE:14:2E:B1:70:9E:93:37:71:B9:FA
Authority key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
Certificate issuer: /CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Certificate serial: 0194BD4E57A41549BB938329982CA9B3A9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
Manifest number: 10D9
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: Gb_tS4tDYUhq7ZFBBu6bXOHKxSQ.roa (hash: j+ql1A+cPykDsn/U+bRsvn2rorjyFgGlp+mF0Qt3tRQ=)
2: U3h815RuENiGRqx53lfMbsWeQTI.crl (hash: SB+ThTcTnNvs3ERAf1pNkyOcvg811u3zwzTruPW+w/0=)
3: aDocXw9aAWTC2tonweXjSXZoNMs.roa (hash: M6NywDoKFY4uKrDQ3WCmTb7f59Ph9hBt6rzgbYZvGvU=)
4: dqRRF9NrCy7kpjHElym2fRaWWpg.roa (hash: yVbcvUrGd5qHEf8kKaXL1t+AGyhms8ILF9sbmeot86I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:57:a4:15:49:bb:93:83:29:98:2c:a9:b3:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53787cd7946e10d88646ac79de57cc6ec59e4132
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=0a9249ee01a71f7b72fe142eb1709e933771b9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:2e:03:ab:ae:99:cb:f7:c2:e4:1d:e8:47:
62:3b:72:f0:af:9c:bb:81:69:ce:50:a8:0a:cd:b0:
89:ac:21:e1:49:05:36:64:66:6e:78:fa:c6:51:94:
45:25:28:b5:3b:70:ef:27:98:51:f2:8e:c1:66:f2:
ca:b6:f2:fe:af:64:26:ed:0d:e4:9a:1f:6d:82:c1:
86:62:68:e6:ec:75:92:eb:9a:9c:3b:b8:25:08:8a:
46:91:08:f7:aa:d0:f8:b7:44:9b:79:50:44:89:c0:
57:d5:e8:c8:39:e0:17:51:e0:03:c9:ff:81:34:7c:
1e:ad:c8:40:38:e7:2a:e1:29:58:cf:77:b5:f2:69:
e3:d0:d9:d1:63:4b:cd:b8:ab:ab:a8:26:39:4f:03:
f9:4b:b1:a4:96:38:84:ff:af:45:97:01:9a:52:20:
9b:5a:49:62:c3:fb:41:ea:20:8c:7c:b7:d3:af:47:
67:36:4b:a8:dc:d4:49:ca:92:30:7a:c3:53:3c:fb:
c2:ab:6e:6e:54:96:38:ee:57:c1:32:cc:e7:85:c9:
d5:0b:ad:ce:d9:3c:45:83:7a:69:48:89:1c:70:da:
b4:0e:97:5e:4c:a9:ae:ee:ff:75:26:39:f9:d9:54:
6e:e4:ab:77:a5:64:53:db:c6:59:23:b2:11:be:fd:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:92:49:EE:01:A7:1F:7B:72:FE:14:2E:B1:70:9E:93:37:71:B9:FA
X509v3 Authority Key Identifier:
keyid:53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0c:e9:a6:15:54:36:60:ca:c0:3d:70:8d:e5:ce:f4:b0:52:
0d:01:38:7f:75:df:4c:eb:29:99:04:4f:2b:54:07:47:f3:87:
0f:0a:8c:ff:1d:89:01:07:45:f8:23:1f:67:67:72:e6:90:05:
f8:83:6e:19:a3:bd:be:47:5a:e7:2f:8e:72:35:fa:6e:a8:07:
a0:8b:4c:ee:a3:5a:4e:50:df:07:db:3e:fc:8e:03:8d:57:bf:
c3:65:71:51:7a:95:da:8a:6d:53:a0:4c:fa:ed:a7:ed:a7:dd:
4a:d5:7a:1b:80:c8:a6:93:af:33:9f:c8:ab:7f:5a:f9:5f:22:
df:66:5d:ae:fe:3e:fd:03:26:d6:2c:98:0a:08:cc:0c:e0:86:
03:28:bc:8b:9f:f0:61:c1:8c:58:e3:b5:5e:70:e4:a0:d4:95:
9f:74:f9:b6:f5:0d:bf:20:0f:51:b1:6d:12:a5:37:cf:99:ae:
c7:09:f6:16:49:2e:4a:8e:a7:f8:6b:a4:5c:50:2d:54:3f:a0:
dd:4b:a5:ba:36:cc:f6:ef:ae:da:4f:29:6b:2a:99:42:3d:8d:
ae:9b:37:cb:ae:23:3c:05:98:c1:ed:00:b5:78:0a:3f:62:19:
06:71:99:32:a6:83:ac:25:4e:d3:a7:ed:5a:a0:5d:89:8c:b3:
dd:d8:4c:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlekFUm7k4MpmCyps6mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzg3Y2Q3OTQ2ZTEwZDg4NjQ2YWM3OWRlNTdjYzZlYzU5
ZTQxMzIwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
EygwYTkyNDllZTAxYTcxZjdiNzJmZTE0MmViMTcwOWU5MzM3NzFiOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYkuA6uumcv3wuQd6EdiO3Lwr5y7
gWnOUKgKzbCJrCHhSQU2ZGZuePrGUZRFJSi1O3DvJ5hR8o7BZvLKtvL+r2Qm7Q3k
mh9tgsGGYmjm7HWS65qcO7glCIpGkQj3qtD4t0SbeVBEicBX1ejIOeAXUeADyf+B
NHwerchAOOcq4SlYz3e18mnj0NnRY0vNuKurqCY5TwP5S7GkljiE/69FlwGaUiCb
Wkliw/tB6iCMfLfTr0dnNkuo3NRJypIwesNTPPvCq25uVJY47lfBMsznhcnVC63O
2TxFg3ppSIkccNq0DpdeTKmu7v91Jjn52VRu5Kt3pWRT28ZZI7IRvv2OqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqSSe4Bpx97cv4ULrFwnpM3cbn6MB8GA1UdIwQY
MBaAFFN4fNeUbhDYhkased5XzG7FnkEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAt
NTIzZmQ4NmEwN2M3LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jNzc4MjUtNjhhMy00YjNlLWJjOTAtNTIzZmQ4NmEwN2M3
LzEvVTNoODE1UnVFTmlHUnF4NTNsZk1ic1dlUVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewzpphVU
NmDKwD1wjeXO9LBSDQE4f3XfTOspmQRPK1QHR/OHDwqM/x2JAQdF+CMfZ2dy5pAF
+INuGaO9vkda5y+OcjX6bqgHoItM7qNaTlDfB9s+/I4DjVe/w2VxUXqV2optU6BM
+u2n7afdStV6G4DIppOvM5/Iq39a+V8i32Zdrv4+/QMm1iyYCgjMDOCGAyi8i5/w
YcGMWOO1XnDkoNSVn3T5tvUNvyAPUbFtEqU3z5muxwn2FkkuSo6n+GukXFAtVD+g
3UulujbM9u+u2k8payqZQj2Nrps3y64jPAWYwe0AtXgKP2IZBnGZMqaDrCVO06ft
WqBdiYyz3dhMbg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:05 2025 by rpki-client