Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
File: USd7w4wS4ELt31bX519QVjxL0ic.mft (raw, json)
Hash identifier: jjgsqHbUJNiJwTpb+3fdr9kDgNix9nTv8STEiqwIxUY=
Subject key identifier: FE:EA:9E:45:29:B6:AA:BF:C9:BE:C5:94:81:94:E4:FA:E5:D1:0D:7E
Authority key identifier: 51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
Certificate issuer: /CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Certificate serial: 0194BBCE1795A8174B44EA1BB42AB1FE3F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: USd7w4wS4ELt31bX519QVjxL0ic.crl (hash: 93pB4cHKol6/1l4C6JlpLCkgnbdYH5jCrwT/GTST5lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:17:95:a8:17:4b:44:ea:1b:b4:2a:b1:fe:3f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51277bc38c12e042eddf56d7e75f50563c4bd227
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=feea9e4529b6aabfc9bec5948194e4fae5d10d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:11:a8:71:32:6e:78:9c:31:de:ca:e5:02:
00:3a:cb:58:a9:72:92:7d:40:3c:fb:6f:3e:61:a0:
dc:9c:7d:72:3e:17:8f:7e:34:82:e9:91:90:e8:0d:
a1:fe:e2:52:ab:81:43:3d:f0:f7:d7:fb:8f:e5:61:
41:63:17:2e:10:dc:37:82:f8:7c:06:3c:ff:24:a8:
35:c5:39:86:ef:7b:87:32:16:91:0f:02:8e:e2:df:
55:6e:49:be:38:39:a1:c3:a3:df:c6:5f:70:03:00:
d7:2c:fe:aa:81:9a:0f:40:8d:cb:93:1f:e8:83:c6:
c9:09:a8:81:25:3b:a9:43:66:1b:73:44:0e:70:34:
ac:a1:9a:bd:77:af:91:21:fe:a8:c2:b2:f3:b0:9b:
aa:1a:42:c4:29:41:41:fb:29:4d:b4:da:3a:e2:31:
70:99:73:c5:4b:d1:0d:e8:b7:0f:58:da:c5:ed:0e:
df:a9:73:7d:2d:f0:a8:0f:57:0f:9f:33:3b:e0:58:
16:f2:ce:1c:c1:fb:43:6a:a3:e3:76:2e:14:92:f5:
e3:c4:ff:b3:06:3e:db:5b:39:cf:48:bd:93:9b:06:
6d:3d:e0:6e:d3:fe:93:42:3c:66:29:e9:f6:ff:54:
38:21:0f:8c:7d:27:14:83:32:38:30:e8:20:64:0c:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:9E:45:29:B6:AA:BF:C9:BE:C5:94:81:94:E4:FA:E5:D1:0D:7E
X509v3 Authority Key Identifier:
keyid:51:27:7B:C3:8C:12:E0:42:ED:DF:56:D7:E7:5F:50:56:3C:4B:D2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USd7w4wS4ELt31bX519QVjxL0ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3ba160-e945-4d56-b129-52c19758fa15/1/USd7w4wS4ELt31bX519QVjxL0ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fa:73:ff:d3:d5:7e:a8:2b:09:72:19:c7:cd:2d:63:1e:2a:
27:10:39:87:af:77:8b:6a:63:4a:8f:ec:38:ed:19:47:28:fe:
62:13:a2:fa:f0:e5:06:37:fb:1d:53:d8:31:1b:c4:f5:95:9f:
46:b1:72:45:3a:4e:c7:0f:a9:06:59:6d:9b:72:75:ea:56:33:
6b:d9:f1:c6:b8:4d:e0:5c:af:40:56:e2:40:84:b8:6d:ca:54:
17:dc:85:bb:d3:d8:ff:87:67:ad:9b:9b:33:1c:c2:11:34:51:
af:06:28:30:0d:05:77:69:e6:f1:d2:a6:1a:8d:38:c2:a7:a6:
af:d7:9a:a4:15:9e:ec:18:a0:f7:00:5b:7a:98:6c:92:42:ad:
b1:b9:43:91:0e:42:de:ec:a1:55:81:73:bb:29:68:2d:94:58:
65:f5:29:a8:ed:09:d1:79:fc:12:41:13:78:57:07:24:27:09:
50:41:f9:39:a6:f1:58:93:e9:4a:56:f3:ca:3d:23:35:93:a7:
ec:a6:36:41:77:06:b1:f3:d9:32:eb:e3:21:79:79:d5:56:bb:
d2:ea:3b:5c:d4:19:2a:5a:4e:d8:18:0b:0f:10:c9:8d:1c:fb:
5c:f4:38:0b:1d:cf:2e:b7:91:5e:9d:8c:33:42:ee:f0:3f:67:
4b:8e:c2:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zheVqBdLROobtCqx/j8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjc3YmMzOGMxMmUwNDJlZGRmNTZkN2U3NWY1MDU2M2M0
YmQyMjcwHhcNMjUwMTMxMTAwMDMzWhcNMjUwMjAxMTAwMDMzWjAzMTEwLwYDVQQD
EyhmZWVhOWU0NTI5YjZhYWJmYzliZWM1OTQ4MTk0ZTRmYWU1ZDEwZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgARqHEybnicMd7K5QIAOstYqXKS
fUA8+28+YaDcnH1yPhePfjSC6ZGQ6A2h/uJSq4FDPfD31/uP5WFBYxcuENw3gvh8
Bjz/JKg1xTmG73uHMhaRDwKO4t9Vbkm+ODmhw6Pfxl9wAwDXLP6qgZoPQI3Lkx/o
g8bJCaiBJTupQ2Ybc0QOcDSsoZq9d6+RIf6owrLzsJuqGkLEKUFB+ylNtNo64jFw
mXPFS9EN6LcPWNrF7Q7fqXN9LfCoD1cPnzM74FgW8s4cwftDaqPjdi4UkvXjxP+z
Bj7bWznPSL2TmwZtPeBu0/6TQjxmKen2/1Q4IQ+MfScUgzI4MOggZAwnawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7qnkUptqq/yb7FlIGU5Prl0Q1+MB8GA1UdIwQY
MBaAFFEne8OMEuBC7d9W1+dfUFY8S9InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYmExNjAtZTk0NS00ZDU2LWIxMjkt
NTJjMTk3NThmYTE1LzEvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYmExNjAtZTk0NS00ZDU2LWIxMjktNTJjMTk3NThmYTE1
LzEvVVNkN3c0d1M0RUx0MzFiWDUxOVFWanhMMGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvpz/9PV
fqgrCXIZx80tYx4qJxA5h693i2pjSo/sOO0ZRyj+YhOi+vDlBjf7HVPYMRvE9ZWf
RrFyRTpOxw+pBlltm3J16lYza9nxxrhN4FyvQFbiQIS4bcpUF9yFu9PY/4dnrZub
MxzCETRRrwYoMA0Fd2nm8dKmGo04wqemr9eapBWe7Big9wBbephskkKtsblDkQ5C
3uyhVYFzuyloLZRYZfUpqO0J0Xn8EkETeFcHJCcJUEH5OabxWJPpSlbzyj0jNZOn
7KY2QXcGsfPZMuvjIXl51Va70uo7XNQZKlpO2BgLDxDJjRz7XPQ4Cx3PLreRXp2M
M0Lu8D9nS47CAA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:30:38 2025 by rpki-client