Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: KLdp/1GndgE32ilk0F7vTNrK7cjpXKaokZLvTGUyEas=
Subject key identifier: 52:8D:CB:25:F2:35:C7:38:D9:68:FA:14:75:5D:85:22:52:7F:64:B2
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 0194BD85B4E54FD84EEC9DEA8818611A1A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 04B8
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: QibySFZaXewQr4QESSxx19Q8JHM.roa (hash: zVxfg7PiMWQ6UyYxsZ1jAEqz1KJPUVidd+WK6y5CEjE=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: OAh6Z/HYWErUZ6OhTlYFH2P3IKbM3o648mh+8xhUE9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:e5:4f:d8:4e:ec:9d:ea:88:18:61:1a:1a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=528dcb25f235c738d968fa14755d8522527f64b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:88:8f:b4:f6:b0:d7:f3:e4:26:e9:4b:33:
43:fa:93:70:08:0b:89:c1:76:51:46:56:d9:21:b6:
b8:c6:17:5f:5a:c6:48:42:a5:8a:27:33:97:76:2b:
78:b1:1f:47:69:fc:69:f9:65:b0:c7:15:ee:2c:0c:
33:b7:19:78:4b:17:9a:b8:00:2f:07:dc:a7:89:e1:
cd:cf:07:6f:28:2b:3e:f2:c7:ac:ea:d2:eb:ec:eb:
85:4e:1b:b3:c9:2a:cc:70:b9:4b:69:b8:e4:10:11:
d0:db:52:9f:19:b3:36:3d:29:5c:2a:63:54:97:da:
42:7f:2d:ff:50:4b:ad:e9:93:05:ce:88:1e:bc:4b:
2f:5f:5e:b6:7e:5e:6b:f9:b9:b9:3d:4d:49:77:14:
4e:4d:bd:f5:a7:36:85:a9:b8:52:9e:82:8c:fc:74:
b1:af:bd:a6:71:98:e0:2e:5b:17:dc:9b:ae:cc:4d:
24:d0:64:81:a4:13:7a:32:c5:a4:c5:e1:7d:2e:b0:
6c:51:18:fb:79:d1:35:cf:e4:d0:80:25:b3:0c:f9:
00:3b:83:cd:df:f1:0e:c0:b0:97:29:11:6d:8e:18:
bb:12:ea:7c:22:a0:11:39:34:a3:a8:f0:b0:6f:e8:
47:9e:e8:7a:cd:46:98:42:bc:57:59:50:fb:dd:eb:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:CB:25:F2:35:C7:38:D9:68:FA:14:75:5D:85:22:52:7F:64:B2
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:83:10:d8:10:d3:97:17:6b:62:32:60:ad:82:90:53:e5:
b7:f6:c0:ef:69:7c:b6:5f:12:d1:47:fd:7e:85:74:2b:48:c8:
b4:5b:ef:33:72:67:b8:1d:37:20:78:86:1d:ec:84:44:2f:69:
4d:a5:e0:3f:a5:9e:8f:a2:2b:45:63:58:29:ff:41:33:9a:1a:
e0:7b:58:a7:d7:3d:53:4b:8c:d0:73:b2:a1:2a:67:c7:83:47:
30:ba:09:7d:63:38:db:8f:14:5c:9b:b8:53:ce:bc:50:77:f3:
c6:32:f8:89:ba:f4:16:21:a1:25:ca:8e:be:b9:29:c9:9b:4e:
3d:a2:68:6d:e8:e9:d5:7c:f4:19:b5:ac:aa:b5:5c:25:25:b2:
9e:c4:ed:4f:63:a6:30:09:67:dd:a3:48:91:12:9d:bf:12:72:
44:2d:c9:bc:dd:90:95:98:75:fd:91:b0:a5:3d:45:c8:26:57:
60:4a:89:60:e2:6e:cb:9d:15:16:6d:18:f3:a1:ad:93:46:10:
ff:4a:98:98:55:e2:1c:3d:a5:cd:f3:83:a9:83:89:ca:34:dc:
b1:13:2e:f3:70:9a:2a:1c:a1:97:f2:be:27:ac:b7:fc:89:91:
29:ff:f4:9b:76:59:f8:a3:d6:fb:25:6d:5b:b3:b0:82:9d:73:
8a:2d:75:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbTlT9hO7J3qiBhhGho/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm
ZmRmYjYwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
Eyg1MjhkY2IyNWYyMzVjNzM4ZDk2OGZhMTQ3NTVkODUyMjUyN2Y2NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxOIj7T2sNfz5CbpSzND+pNwCAuJ
wXZRRlbZIba4xhdfWsZIQqWKJzOXdit4sR9Hafxp+WWwxxXuLAwztxl4SxeauAAv
B9ynieHNzwdvKCs+8ses6tLr7OuFThuzySrMcLlLabjkEBHQ21KfGbM2PSlcKmNU
l9pCfy3/UEut6ZMFzogevEsvX162fl5r+bm5PU1JdxROTb31pzaFqbhSnoKM/HSx
r72mcZjgLlsX3JuuzE0k0GSBpBN6MsWkxeF9LrBsURj7edE1z+TQgCWzDPkAO4PN
3/EOwLCXKRFtjhi7Eup8IqAROTSjqPCwb+hHnuh6zUaYQrxXWVD73etWkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKNyyXyNcc42Wj6FHVdhSJSf2SyMB8GA1UdIwQY
MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt
NTUzY2I3NzY5Y2E5LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5
LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbyDENgQ
05cXa2IyYK2CkFPlt/bA72l8tl8S0Uf9foV0K0jItFvvM3JnuB03IHiGHeyERC9p
TaXgP6Wej6IrRWNYKf9BM5oa4HtYp9c9U0uM0HOyoSpnx4NHMLoJfWM4248UXJu4
U868UHfzxjL4ibr0FiGhJcqOvrkpyZtOPaJobejp1Xz0GbWsqrVcJSWynsTtT2Om
MAln3aNIkRKdvxJyRC3JvN2QlZh1/ZGwpT1FyCZXYEqJYOJuy50VFm0Y86Gtk0YQ
/0qYmFXiHD2lzfODqYOJyjTcsRMu83CaKhyhl/K+J6y3/ImRKf/0m3ZZ+KPW+yVt
W7Owgp1zii11dg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:41 2025 by rpki-client