Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft
File: UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft (raw, json)
Hash identifier: zHcOxWHDG94K2T2za39MLLwUJtdfzxfVfKWPVwbHQ8s=
Subject key identifier: E1:0F:3B:AF:A7:12:48:F2:96:9B:CE:A9:C7:92:B4:6C:C2:A1:96:4C
Authority key identifier: 51:4E:F1:A8:C3:67:E7:05:2A:3F:2D:73:6B:1B:45:7D:A6:96:64:96
Certificate issuer: /CN=514ef1a8c367e7052a3f2d736b1b457da6966496
Certificate serial: 0194BBCE46DAA059991FBF4567995F764D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UU7xqMNn5wUqPy1zaxtFfaaWZJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: UU7xqMNn5wUqPy1zaxtFfaaWZJY.crl (hash: pOqnnCGKnvrdBPQPJ/UYkqr3eXBQWpPQjsMSs5Quw7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:46:da:a0:59:99:1f:bf:45:67:99:5f:76:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514ef1a8c367e7052a3f2d736b1b457da6966496
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=e10f3bafa71248f2969bcea9c792b46cc2a1964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:32:3e:25:80:a4:ec:d5:6b:ec:8d:aa:0c:
f0:a3:5a:e2:dc:21:f9:1d:12:a6:d3:c7:cb:f6:fb:
78:87:ee:60:7b:ea:2e:0e:0e:47:71:47:43:ff:65:
02:62:27:7b:71:4e:c9:05:0f:0f:3c:d6:3a:6e:f3:
c4:43:73:45:6b:ba:ba:7b:50:b9:3d:e5:bd:89:d1:
52:fd:82:22:23:bc:00:60:f7:35:19:42:e5:6a:96:
4e:de:1b:1c:d2:35:68:f0:9c:2b:d9:10:14:98:1e:
66:bb:f6:c4:45:d6:c7:11:a0:5e:d2:61:34:79:33:
91:6d:ef:bd:bd:df:c1:b6:5d:dd:6f:a3:f0:92:4b:
6d:16:e6:9f:94:ea:9f:99:9a:17:5e:94:4e:ec:be:
ec:30:ce:9f:13:78:34:a1:2e:4e:74:6a:dc:1d:3c:
c3:b4:54:7b:16:87:94:ee:09:6b:fa:8f:1e:fa:93:
47:8e:6c:22:57:01:bb:63:b1:68:fb:25:b1:bf:44:
f2:70:5b:62:40:4a:d7:21:ea:72:df:aa:7f:c8:b8:
eb:3c:70:ab:2d:26:c8:7c:e5:be:b4:88:88:86:8f:
46:ee:a0:d4:a7:31:d3:dc:65:97:b2:20:c7:4d:2b:
5a:5f:ba:8b:7c:d7:75:64:8c:ad:8f:5d:f8:3b:95:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0F:3B:AF:A7:12:48:F2:96:9B:CE:A9:C7:92:B4:6C:C2:A1:96:4C
X509v3 Authority Key Identifier:
keyid:51:4E:F1:A8:C3:67:E7:05:2A:3F:2D:73:6B:1B:45:7D:A6:96:64:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UU7xqMNn5wUqPy1zaxtFfaaWZJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/66e60a-e25d-4353-a500-338d29ee147a/1/UU7xqMNn5wUqPy1zaxtFfaaWZJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:30:18:a9:5c:2b:1f:bd:3a:81:8a:a8:1a:dd:cf:56:e3:54:
42:0a:f9:cd:65:e7:72:42:00:3a:a9:49:7c:32:0b:21:41:39:
33:08:a9:c3:4b:ab:3b:45:ab:37:f8:f7:ac:99:81:f1:c5:7b:
b2:4c:c4:48:5a:81:69:f4:0e:f3:c7:82:4b:07:36:e5:01:7e:
40:c9:2e:56:9c:d8:c1:be:b2:2c:13:34:24:e6:e6:c2:21:a4:
76:bc:61:54:7d:dc:94:ba:d9:72:26:6a:c3:52:a4:8c:05:78:
8a:b9:cc:9b:30:2c:99:63:45:68:e0:45:d1:b7:ca:64:56:74:
1e:dd:9b:40:cd:d9:b1:60:f3:3a:ac:8b:b9:33:7b:5c:fc:c9:
fd:85:66:81:04:c7:80:e9:fd:c4:39:5e:b3:f0:a6:17:02:99:
25:12:9d:2b:95:da:8f:14:7c:62:61:ed:21:62:05:7d:e4:7d:
2c:4d:3a:b8:67:ac:96:4a:4a:4a:ea:69:e4:77:ab:cf:26:e9:
61:66:84:16:fd:31:e4:b6:8a:91:9c:44:79:37:37:60:f5:42:
77:69:4b:ea:d1:e2:67:ab:05:95:eb:44:f0:a9:3b:04:7f:c2:
c1:0f:b9:fb:a3:84:a3:4b:50:c9:35:15:70:36:b9:15:b5:83:
42:f1:84:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkbaoFmZH79FZ5lfdk0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNGVmMWE4YzM2N2U3MDUyYTNmMmQ3MzZiMWI0NTdkYTY5
NjY0OTYwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
EyhlMTBmM2JhZmE3MTI0OGYyOTY5YmNlYTljNzkyYjQ2Y2MyYTE5NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWQyPiWApOzVa+yNqgzwo1ri3CH5
HRKm08fL9vt4h+5ge+ouDg5HcUdD/2UCYid7cU7JBQ8PPNY6bvPEQ3NFa7q6e1C5
PeW9idFS/YIiI7wAYPc1GULlapZO3hsc0jVo8Jwr2RAUmB5mu/bERdbHEaBe0mE0
eTORbe+9vd/Btl3db6PwkkttFuaflOqfmZoXXpRO7L7sMM6fE3g0oS5OdGrcHTzD
tFR7FoeU7glr+o8e+pNHjmwiVwG7Y7Fo+yWxv0TycFtiQErXIepy36p/yLjrPHCr
LSbIfOW+tIiIho9G7qDUpzHT3GWXsiDHTStaX7qLfNd1ZIytj134O5Vj0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEPO6+nEkjylpvOqceStGzCoZZMMB8GA1UdIwQY
MBaAFFFO8ajDZ+cFKj8tc2sbRX2mlmSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVU3eHFNTm41d1VxUHkxemF4dEZmYWFXWkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82NmU2MGEtZTI1ZC00MzUzLWE1MDAt
MzM4ZDI5ZWUxNDdhLzEvVVU3eHFNTm41d1VxUHkxemF4dEZmYWFXWkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82NmU2MGEtZTI1ZC00MzUzLWE1MDAtMzM4ZDI5ZWUxNDdh
LzEvVVU3eHFNTm41d1VxUHkxemF4dEZmYWFXWkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjAYqVwr
H706gYqoGt3PVuNUQgr5zWXnckIAOqlJfDILIUE5Mwipw0urO0WrN/j3rJmB8cV7
skzESFqBafQO88eCSwc25QF+QMkuVpzYwb6yLBM0JObmwiGkdrxhVH3clLrZciZq
w1KkjAV4irnMmzAsmWNFaOBF0bfKZFZ0Ht2bQM3ZsWDzOqyLuTN7XPzJ/YVmgQTH
gOn9xDles/CmFwKZJRKdK5XajxR8YmHtIWIFfeR9LE06uGeslkpKSupp5Herzybp
YWaEFv0x5LaKkZxEeTc3YPVCd2lL6tHiZ6sFletE8Kk7BH/CwQ+5+6OEo0tQyTUV
cDa5FbWDQvGEtw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:53:17 2025 by rpki-client