Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: ozVVtkiNujVzjJAXoxG90Qy4GylKa9EFoJu2CSOauwc=
Subject key identifier: 34:99:17:26:52:99:42:41:D4:1E:7F:C9:ED:47:13:73:3C:4F:33:3F
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 0194BD4E75E75C7E63D75FBA9DCE61E714CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: a4kgaUBqsddv2yofz/GU/TZWCxuoCRzBHeFcLXuKgEM=)
2: ZJcYJJAr2JA8zU4kwS_itD8HDqY.roa (hash: eMuwrfWnfxM1wbDxkNrz13AdocnFAytqpqdxZyIl058=)
3: ne7qsdOlLQR8_nG6p7MVEAshtxk.roa (hash: b2CjvPaYoVbJ4qHUSs8bzU5L8lkSjdW1w+FExaBaHqU=)
4: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (hash: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=)
5: z1ERBgPc796EUpstpTm_KKosGxs.roa (hash: 1uUH+Aes6TW/J4OIjEYgjpDXA6d37PjKx+xzTglktTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:e7:5c:7e:63:d7:5f:ba:9d:ce:61:e7:14:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=3499172652994241d41e7fc9ed4713733c4f333f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:f2:45:15:c5:75:6d:96:0c:1e:1a:68:44:
da:4a:7a:02:7f:a1:28:65:c2:1b:6e:bc:72:e8:56:
a7:78:99:3e:4a:3a:60:78:09:09:5d:64:ef:6d:04:
49:d1:c5:57:fa:46:9e:a1:f2:aa:5d:1a:3a:cc:d4:
e4:a7:d1:38:97:f6:05:30:6a:7e:a3:ca:a9:77:72:
72:34:50:11:c2:39:f5:e9:c0:9b:9d:80:18:29:b3:
59:98:aa:e7:8e:10:e3:eb:d4:19:16:c8:bd:3a:ca:
62:eb:21:0b:30:b7:39:5f:84:71:b4:48:1f:67:06:
7b:ca:a1:43:c1:27:2e:a5:ca:fc:a5:0e:a2:19:db:
a6:73:23:16:3a:ff:9e:b1:4e:38:d6:db:d9:a9:d8:
88:60:ed:24:a9:4a:66:c3:76:1d:ee:d8:a0:40:3c:
64:50:77:63:52:12:92:c8:3a:0b:ca:6b:38:ba:57:
f6:ee:7e:2e:40:13:7b:66:4b:19:4a:0b:af:6d:a4:
5b:fd:e1:7a:27:ea:ea:53:a4:9d:88:9d:f9:48:e8:
70:50:fe:ed:a2:54:03:b9:bc:58:5b:1f:90:c8:d8:
01:fe:b5:c1:75:0e:28:a7:04:07:66:ed:5b:24:73:
90:05:b4:d0:cd:c5:94:24:16:5b:5b:67:ad:fd:b9:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:17:26:52:99:42:41:D4:1E:7F:C9:ED:47:13:73:3C:4F:33:3F
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:89:f8:17:50:20:55:40:da:75:06:c1:13:3c:99:da:90:51:
55:28:0c:94:20:cd:16:3a:27:c5:65:d5:ac:04:ad:51:0b:e6:
48:96:80:c6:95:72:c3:54:02:b6:45:91:f5:41:e6:82:6b:55:
e8:26:0a:28:1e:eb:57:f1:b5:da:6b:ed:f3:14:4a:eb:42:23:
54:7e:42:47:1d:c3:7d:52:2a:63:3e:6f:66:30:fb:1f:a8:f1:
15:1d:62:15:88:56:6d:35:63:cd:e1:cc:94:22:c6:dc:3f:a6:
6e:93:b8:2a:41:b2:67:7b:d3:89:87:f5:94:bd:00:04:bc:db:
f1:37:cf:e2:e7:b2:b9:91:e9:31:eb:d8:24:e6:8e:5b:b3:70:
c0:d6:24:1d:b6:75:89:2f:34:a9:1b:91:69:bb:87:db:b8:6f:
7e:c9:b2:ae:8a:b4:46:64:ea:ee:5e:4c:d2:9b:96:5b:9c:82:
d7:e6:8e:f1:2e:64:36:10:19:df:f0:8f:3e:d1:66:e2:10:70:
0d:10:13:3f:47:87:ad:2f:c2:a8:aa:47:a1:1f:07:3b:ae:43:
08:ce:35:a0:4b:fe:9e:c8:b1:09:c1:de:c1:08:66:29:c3:81:
ed:11:d6:78:b8:6a:83:e1:6c:80:7b:7b:84:ef:08:9b:ea:27:
6e:14:29:d4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9TnXnXH5j11+6nc5h5xTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy
Y2RlMTcwHhcNMjUwMTMxMTcwMDIzWhcNMjUwMjAxMTcwMDIzWjAzMTEwLwYDVQQD
EygzNDk5MTcyNjUyOTk0MjQxZDQxZTdmYzllZDQ3MTM3MzNjNGYzMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXnyRRXFdW2WDB4aaETaSnoCf6Eo
ZcIbbrxy6FaneJk+SjpgeAkJXWTvbQRJ0cVX+kaeofKqXRo6zNTkp9E4l/YFMGp+
o8qpd3JyNFARwjn16cCbnYAYKbNZmKrnjhDj69QZFsi9Ospi6yELMLc5X4RxtEgf
ZwZ7yqFDwScupcr8pQ6iGdumcyMWOv+esU441tvZqdiIYO0kqUpmw3Yd7tigQDxk
UHdjUhKSyDoLyms4ulf27n4uQBN7ZksZSguvbaRb/eF6J+rqU6SdiJ35SOhwUP7t
olQDubxYWx+QyNgB/rXBdQ4opwQHZu1bJHOQBbTQzcWUJBZbW2et/bmygwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDSZFyZSmUJB1B5/ye1HE3M8TzM/MB8GA1UdIwQY
MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz
LTRhZmQ4MjU0YWU0My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzI5M2QzNi05ZGEyLTQ0MDUtOGRlMy00YWZkODI1NGFl
NDMvMS8xLXVGclNUMHFFb2w4cjBkWHV4aWdMdXdzM2hjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYn4
F1AgVUDadQbBEzyZ2pBRVSgMlCDNFjonxWXVrAStUQvmSJaAxpVyw1QCtkWR9UHm
gmtV6CYKKB7rV/G12mvt8xRK60IjVH5CRx3DfVIqYz5vZjD7H6jxFR1iFYhWbTVj
zeHMlCLG3D+mbpO4KkGyZ3vTiYf1lL0ABLzb8TfP4ueyuZHpMevYJOaOW7NwwNYk
HbZ1iS80qRuRabuH27hvfsmyroq0RmTq7l5M0puWW5yC1+aO8S5kNhAZ3/CPPtFm
4hBwDRATP0eHrS/CqKpHoR8HO65DCM41oEv+nsixCcHewQhmKcOB7RHWeLhqg+Fs
gHt7hO8Im+onbhQp1A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client