Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: nVZgEbbGZ2S1CKvyMj4IxOZJ/+/d3rPlY6CsX05tc/s=
Subject key identifier: 2C:95:17:C2:B4:8F:F7:74:DA:0C:90:94:AD:0B:D6:F1:95:4B:D9:85
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 0195E07D7D75D59659B5FAED484C9744F9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0C67
Signing time: Sat 29 Mar 2025 06:01:15 +0000
Manifest this update: Sat 29 Mar 2025 06:01:15 +0000
Manifest next update: Sun 30 Mar 2025 06:01:15 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: ZpR5RrZCeOAjRf8Bmcohe3YCcXY.roa (hash: pTEfc3PDuejgf4x4olTLHWXi7yz1fRVMFq2Y3JTaBo4=)
3: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: fh23kpTS0oejjJczQ3YTEIPh2noR2+M2pLCtDBoEphc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:7d:75:d5:96:59:b5:fa:ed:48:4c:97:44:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Mar 29 06:01:15 2025 GMT
Not After : Mar 30 06:01:15 2025 GMT
Subject: CN=2c9517c2b48ff774da0c9094ad0bd6f1954bd985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:33:c2:ff:af:30:c0:57:48:25:14:ca:f1:
c9:e1:dd:95:38:6f:6a:f3:65:13:57:85:d6:54:ca:
68:0a:02:e0:c7:dd:00:8a:4d:50:6d:a9:c0:9b:14:
42:ee:4d:8a:2f:a8:e5:80:4a:a7:d4:2d:82:e5:cf:
8b:01:01:ea:ba:c1:f5:86:b7:25:f8:bc:44:2e:d1:
6a:da:d6:cd:4b:87:e2:03:32:db:2b:31:83:ec:49:
06:d7:25:40:2f:ec:cc:d3:3b:7d:3c:46:09:34:1b:
87:8f:4d:4c:e6:4a:40:c6:2f:65:e7:44:4e:e7:49:
e6:b7:af:c5:b4:3b:da:1f:cd:81:c7:24:1e:4d:16:
b4:54:db:82:6f:e4:d5:95:3c:d6:8d:fc:c2:f8:64:
81:99:17:38:2e:94:8f:57:37:e5:57:7e:64:23:97:
18:35:28:26:f7:20:f7:d5:7d:39:d3:97:68:0e:52:
d0:bc:a9:44:86:25:ab:24:47:9d:26:b6:c4:f9:fa:
f0:54:8d:02:c2:68:65:53:f3:40:c7:ee:6f:51:62:
8e:b8:da:94:a2:71:c4:69:e3:90:be:33:76:4f:87:
32:ea:5e:86:26:97:de:04:80:9f:ac:68:78:d2:f0:
72:b5:7b:aa:3b:53:6a:8d:ac:7a:6e:3b:00:af:cb:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:17:C2:B4:8F:F7:74:DA:0C:90:94:AD:0B:D6:F1:95:4B:D9:85
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:63:78:7e:64:e0:d1:bd:3c:ed:80:66:c9:4c:ca:bf:92:ad:
03:1a:88:53:e5:1a:1d:d7:cd:18:3b:2e:8b:78:7a:61:b3:0f:
7a:71:8a:18:43:fb:c8:ff:a8:ea:51:5a:80:81:5d:6d:05:56:
c3:2f:51:89:72:ac:84:e7:f5:96:ab:8f:b7:3b:c6:ac:01:3f:
dc:31:6e:5e:7d:74:25:29:1c:15:ef:77:67:f8:ba:d7:bf:f8:
e9:cf:bc:75:85:f7:97:a3:e2:d3:64:26:93:f3:49:6b:86:9c:
d7:cd:23:bc:db:31:aa:c9:db:c5:93:54:10:57:17:b7:d1:d7:
86:5b:8a:db:e4:ef:79:1d:90:73:1f:d6:11:06:b0:77:90:ba:
ca:9a:f1:0e:f7:ca:06:ea:e5:21:26:e0:30:da:94:00:55:86:
88:62:e2:ab:2f:b8:a7:0d:f0:81:5a:08:49:75:90:50:c2:62:
6c:b7:73:91:3a:12:00:bf:c5:1a:f9:b4:b7:35:cb:f7:bc:63:
ed:bd:f9:3b:ca:7b:8f:76:79:e4:42:4a:81:3d:6a:de:e5:d1:
cd:9d:b4:9b:79:99:a1:66:ca:d4:32:fe:36:5c:fc:a8:70:27:
99:37:f7:19:64:3f:72:6e:ff:be:9a:7a:b1:ae:50:70:09:d8:
df:8d:19:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfX111ZZZtfrtSEyXRPnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjUwMzI5MDYwMTE1WhcNMjUwMzMwMDYwMTE1WjAzMTEwLwYDVQQD
EygyYzk1MTdjMmI0OGZmNzc0ZGEwYzkwOTRhZDBiZDZmMTk1NGJkOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1szwv+vMMBXSCUUyvHJ4d2VOG9q
82UTV4XWVMpoCgLgx90Aik1QbanAmxRC7k2KL6jlgEqn1C2C5c+LAQHqusH1hrcl
+LxELtFq2tbNS4fiAzLbKzGD7EkG1yVAL+zM0zt9PEYJNBuHj01M5kpAxi9l50RO
50nmt6/FtDvaH82BxyQeTRa0VNuCb+TVlTzWjfzC+GSBmRc4LpSPVzflV35kI5cY
NSgm9yD31X0505doDlLQvKlEhiWrJEedJrbE+frwVI0CwmhlU/NAx+5vUWKOuNqU
onHEaeOQvjN2T4cy6l6GJpfeBICfrGh40vBytXuqO1Nqjax6bjsAr8u5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyVF8K0j/d02gyQlK0L1vGVS9mFMB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWN4fmTg
0b087YBmyUzKv5KtAxqIU+UaHdfNGDsui3h6YbMPenGKGEP7yP+o6lFagIFdbQVW
wy9RiXKshOf1lquPtzvGrAE/3DFuXn10JSkcFe93Z/i617/46c+8dYX3l6Pi02Qm
k/NJa4ac180jvNsxqsnbxZNUEFcXt9HXhluK2+TveR2Qcx/WEQawd5C6yprxDvfK
BurlISbgMNqUAFWGiGLiqy+4pw3wgVoISXWQUMJibLdzkToSAL/FGvm0tzXL97xj
7b35O8p7j3Z55EJKgT1q3uXRzZ20m3mZoWbK1DL+Nlz8qHAnmTf3GWQ/cm7/vpp6
sa5QcAnY340ZCg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:46 2025 by rpki-client