Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
File: UI4AePdxGuHP_QDzUsyKA7OXetc.mft (raw, json)
Hash identifier: pB70gdK3+EcWSR9JTPLnEU3QFyoBF24l8UAXWq3m/uY=
Subject key identifier: A7:58:9D:BD:77:72:E5:4E:85:C9:4C:07:6A:A7:E9:B2:6D:3D:2E:AC
Authority key identifier: 50:8E:00:78:F7:71:1A:E1:CF:FD:00:F3:52:CC:8A:03:B3:97:7A:D7
Certificate issuer: /CN=508e0078f7711ae1cffd00f352cc8a03b3977ad7
Certificate serial: 0193B9AC05A5AB8E6195A9B9D373D16E415E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UI4AePdxGuHP_QDzUsyKA7OXetc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
Manifest number: 0453
Signing time: Thu 12 Dec 2024 07:01:18 +0000
Manifest this update: Thu 12 Dec 2024 07:01:18 +0000
Manifest next update: Fri 13 Dec 2024 07:01:18 +0000
Files and hashes: 1: UI4AePdxGuHP_QDzUsyKA7OXetc.crl (hash: JPE7CsuCS7Hj24uN5UvMgoRNCWUJr0ucmp6DTPnhB90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:ac:05:a5:ab:8e:61:95:a9:b9:d3:73:d1:6e:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508e0078f7711ae1cffd00f352cc8a03b3977ad7
Validity
Not Before: Dec 12 07:01:18 2024 GMT
Not After : Dec 13 07:01:18 2024 GMT
Subject: CN=a7589dbd7772e54e85c94c076aa7e9b26d3d2eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:36:9c:c0:2c:02:b4:f5:6b:5f:99:5a:3c:
fb:d0:bf:24:b4:f9:44:e9:2f:fb:43:ef:83:88:10:
c3:07:d5:8f:41:7b:37:9a:26:b6:dd:fe:f7:2e:2d:
9e:2c:b5:47:95:69:c7:c7:ee:6f:e8:4d:bb:4f:c5:
01:89:7a:4b:54:08:02:61:50:48:96:8a:40:b9:df:
25:e7:6b:61:d2:b8:04:79:54:79:60:c7:6b:87:68:
21:ec:b3:74:dd:3a:9a:3a:22:ff:9f:29:79:58:ee:
34:71:21:64:db:99:d7:76:ff:82:5d:7a:4d:1c:e4:
22:a2:ef:00:06:44:be:de:8d:67:85:b4:41:55:4e:
1d:e1:f1:02:1a:78:3d:72:c2:ce:8e:ba:66:0b:24:
cf:20:1d:af:f3:8c:49:e2:f3:81:5e:f4:92:05:9d:
c0:9b:07:08:28:f1:00:ea:ff:9b:ee:f0:e9:88:d8:
13:32:9b:ba:5a:07:f4:8a:69:68:0d:6c:2d:19:a6:
d8:6d:08:6a:b8:3c:2b:9b:2c:e8:f4:e1:a3:f6:3b:
87:6e:ce:e6:21:9c:63:21:8d:39:82:2d:e8:32:16:
66:51:25:4e:91:63:57:0b:30:ee:24:73:eb:40:a9:
0d:62:e1:c7:f1:55:61:4e:7f:46:8f:57:f5:90:00:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:9D:BD:77:72:E5:4E:85:C9:4C:07:6A:A7:E9:B2:6D:3D:2E:AC
X509v3 Authority Key Identifier:
keyid:50:8E:00:78:F7:71:1A:E1:CF:FD:00:F3:52:CC:8A:03:B3:97:7A:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI4AePdxGuHP_QDzUsyKA7OXetc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f620b2-bd7f-49a3-ac06-2db6093dd605/1/UI4AePdxGuHP_QDzUsyKA7OXetc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6a:66:26:33:3a:40:e0:f2:19:71:2b:2b:a6:31:13:2a:e3:
c9:0f:08:e3:8a:ca:56:7f:91:8d:72:5a:36:66:84:34:c4:07:
e8:c2:e7:21:95:35:82:ce:7d:5c:82:9e:2a:ed:20:18:12:5f:
34:b4:22:ca:03:fb:e7:7d:b4:dd:81:ff:c6:e3:54:25:ea:97:
73:3f:ce:01:9f:05:78:29:b0:66:59:1c:ec:49:66:62:ad:3e:
9b:92:0b:93:4b:9c:16:2e:40:38:ca:6d:85:f2:94:32:c0:73:
b2:d2:7c:d2:64:0e:13:71:09:51:1c:8f:07:00:b1:65:a7:5d:
b9:7c:6c:ac:0a:8b:e7:6b:e6:bb:a0:4f:2c:e9:3f:51:2a:79:
a2:8e:a4:a5:7a:ee:90:f7:b8:28:3b:b9:ea:c2:1c:60:d3:e2:
dc:00:24:be:aa:99:76:dc:e2:5c:89:3d:66:12:47:2c:f4:f8:
b5:57:0c:1b:50:1f:c9:e5:56:f5:2b:2e:29:38:cf:27:79:34:
81:7d:8a:6b:b7:3a:f3:5e:5c:ac:e9:91:e4:5a:46:60:d7:6b:
aa:2c:4f:0a:e2:59:9b:1d:08:df:df:6b:c9:f6:7c:38:c1:22:
1b:04:9a:24:45:ea:6b:e0:ee:a4:a4:71:a8:e0:3c:2b:cb:fe:
d5:ad:af:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZO5rAWlq45hlam503PRbkFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOGUwMDc4Zjc3MTFhZTFjZmZkMDBmMzUyY2M4YTAzYjM5
NzdhZDcwHhcNMjQxMjEyMDcwMTE4WhcNMjQxMjEzMDcwMTE4WjAzMTEwLwYDVQQD
EyhhNzU4OWRiZDc3NzJlNTRlODVjOTRjMDc2YWE3ZTliMjZkM2QyZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi42nMAsArT1a1+ZWjz70L8ktPlE
6S/7Q++DiBDDB9WPQXs3mia23f73Li2eLLVHlWnHx+5v6E27T8UBiXpLVAgCYVBI
lopAud8l52th0rgEeVR5YMdrh2gh7LN03TqaOiL/nyl5WO40cSFk25nXdv+CXXpN
HOQiou8ABkS+3o1nhbRBVU4d4fECGng9csLOjrpmCyTPIB2v84xJ4vOBXvSSBZ3A
mwcIKPEA6v+b7vDpiNgTMpu6Wgf0imloDWwtGabYbQhquDwrmyzo9OGj9juHbs7m
IZxjIY05gi3oMhZmUSVOkWNXCzDuJHPrQKkNYuHH8VVhTn9Gj1f1kAAnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdYnb13cuVOhclMB2qn6bJtPS6sMB8GA1UdIwQY
MBaAFFCOAHj3cRrhz/0A81LMigOzl3rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUk0QWVQZHhHdUhQX1FEelVzeUtBN09YZXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNjIwYjItYmQ3Zi00OWEzLWFjMDYt
MmRiNjA5M2RkNjA1LzEvVUk0QWVQZHhHdUhQX1FEelVzeUtBN09YZXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mNjIwYjItYmQ3Zi00OWEzLWFjMDYtMmRiNjA5M2RkNjA1
LzEvVUk0QWVQZHhHdUhQX1FEelVzeUtBN09YZXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWpmJjM6
QODyGXErK6YxEyrjyQ8I44rKVn+RjXJaNmaENMQH6MLnIZU1gs59XIKeKu0gGBJf
NLQiygP753203YH/xuNUJeqXcz/OAZ8FeCmwZlkc7ElmYq0+m5ILk0ucFi5AOMpt
hfKUMsBzstJ80mQOE3EJURyPBwCxZadduXxsrAqL52vmu6BPLOk/USp5oo6kpXru
kPe4KDu56sIcYNPi3AAkvqqZdtziXIk9ZhJHLPT4tVcMG1AfyeVW9SsuKTjPJ3k0
gX2Ka7c6815crOmR5FpGYNdrqixPCuJZmx0I399ryfZ8OMEiGwSaJEXqa+DupKRx
qOA8K8v+1a2vJA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:20:46 2025 by rpki-client