Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft
File: 1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft (raw, json)
Hash identifier: HLkz1ETEQtMD/VwEQ6ppCvrwv1npB846hrHQZuAzvPc=
Subject key identifier: C5:5C:FA:7E:0B:84:B2:A5:7A:43:9C:03:CE:EA:88:79:80:E8:26:D2
Authority key identifier: FA:EC:51:87:7A:B9:F9:9B:3B:A1:CC:E5:01:A2:96:C3:2B:02:8F:B5
Certificate issuer: /CN=faec51877ab9f99b3ba1cce501a296c32b028fb5
Certificate serial: 01840D89EB071AC8F24E42AF3918C649FA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uxRh3q5-Zs7oczlAaKWwysCj7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft
Manifest number: 0649
Signing time: Tue 25 Oct 2022 05:07:33 +0000
Manifest this update: Tue 25 Oct 2022 05:07:33 +0000
Manifest next update: Wed 26 Oct 2022 05:07:33 +0000
Files and hashes: 1: 1-uxRh3q5-Zs7oczlAaKWwysCj7U.crl (hash: 0cXbNEgJxfFHZTsn7zIVIcKI+hKX57nM7dBGRdZzCaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:89:eb:07:1a:c8:f2:4e:42:af:39:18:c6:49:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faec51877ab9f99b3ba1cce501a296c32b028fb5
Validity
Not Before: Oct 25 05:07:33 2022 GMT
Not After : Oct 26 05:07:33 2022 GMT
Subject: CN=c55cfa7e0b84b2a57a439c03ceea887980e826d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:16:1f:ac:81:4d:f2:58:22:ed:d5:3a:7b:
0e:94:c0:26:53:e2:32:f6:c2:a7:52:f0:50:2c:0a:
50:29:1e:42:6f:90:8b:f8:5d:31:86:f7:1e:ea:1e:
29:cd:b8:36:50:b7:f5:83:65:10:9a:9f:01:94:cd:
cd:fa:23:86:c7:49:bc:28:21:0d:3c:66:50:60:66:
ab:e3:0b:29:fe:fd:fb:a6:f7:1a:5f:76:d8:79:6f:
66:69:6e:85:e8:3c:bc:20:4a:01:1d:0a:d7:b8:6e:
b5:a2:b2:11:ee:04:b6:05:ba:b4:6e:27:ab:0d:b2:
01:81:e9:ed:df:bc:b2:86:d6:18:de:8c:be:12:46:
06:cd:6b:3a:65:ae:c7:63:38:81:4c:b8:30:61:b1:
cf:de:93:2f:85:90:cd:9b:f0:e8:98:b1:36:7f:d9:
16:47:1c:e9:9a:05:c0:2d:6d:1d:b1:fd:59:dd:dc:
d1:3d:a7:11:0a:e8:63:f3:7a:f6:68:95:b2:c8:69:
48:1b:3f:e9:77:98:2d:4e:3d:46:9b:9f:d7:61:f1:
3b:d7:f5:6d:23:06:e0:4c:57:71:1d:5a:ba:da:59:
ef:a9:84:6a:e7:55:2c:f9:5b:24:1c:9c:ed:8a:f6:
8e:b4:95:78:60:4a:db:0e:cc:4c:cb:16:b9:80:73:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:FA:7E:0B:84:B2:A5:7A:43:9C:03:CE:EA:88:79:80:E8:26:D2
X509v3 Authority Key Identifier:
keyid:FA:EC:51:87:7A:B9:F9:9B:3B:A1:CC:E5:01:A2:96:C3:2B:02:8F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uxRh3q5-Zs7oczlAaKWwysCj7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:95:25:84:6c:34:8d:d7:dd:02:3a:ec:79:82:19:2e:9d:
a6:e8:06:4e:f0:01:54:4f:4f:21:c4:77:3e:7e:2e:19:68:2e:
33:38:08:5f:fb:f1:9a:69:c9:53:73:59:53:19:7a:9f:54:59:
eb:a8:4a:6b:6d:dd:57:78:04:05:10:50:98:6d:84:d9:0c:b2:
bd:b3:00:39:e2:93:6a:20:de:dc:62:7b:c0:fd:9d:b4:3c:de:
f5:b4:c1:fb:5f:38:bc:07:b0:35:ae:bc:2b:3c:b8:0f:6f:b1:
8b:b5:27:cb:56:e1:74:41:95:49:17:d6:ed:1b:2d:e8:d5:e0:
66:3d:bd:6e:e8:57:5d:eb:0b:ef:d3:1d:e4:3f:9b:9f:a8:9e:
2a:3d:41:c3:58:64:95:61:42:9e:ac:13:c9:9c:c2:f8:82:d6:
16:81:f2:db:2c:3e:33:02:91:80:de:11:c0:ae:1e:21:8c:a0:
62:df:30:ee:48:ed:65:ba:65:e7:e8:27:d9:ec:ec:8d:77:50:
6a:c7:32:5b:49:c2:6a:81:5f:be:54:a2:d3:c9:74:ee:d6:89:
c4:bf:0b:73:5e:aa:fa:2f:dc:f5:2e:20:36:e1:ec:3b:7f:35:
92:94:91:4f:57:ab:cc:fc:a7:83:9a:90:43:7c:c5:fc:33:86:
3c:e8:53:f8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYQNiesHGsjyTkKvORjGSfomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZWM1MTg3N2FiOWY5OWIzYmExY2NlNTAxYTI5NmMzMmIw
MjhmYjUwHhcNMjIxMDI1MDUwNzMzWhcNMjIxMDI2MDUwNzMzWjAzMTEwLwYDVQQD
EyhjNTVjZmE3ZTBiODRiMmE1N2E0MzljMDNjZWVhODg3OTgwZTgyNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoogWH6yBTfJYIu3VOnsOlMAmU+Iy
9sKnUvBQLApQKR5Cb5CL+F0xhvce6h4pzbg2ULf1g2UQmp8BlM3N+iOGx0m8KCEN
PGZQYGar4wsp/v37pvcaX3bYeW9maW6F6Dy8IEoBHQrXuG61orIR7gS2Bbq0bier
DbIBgent37yyhtYY3oy+EkYGzWs6Za7HYziBTLgwYbHP3pMvhZDNm/DomLE2f9kW
RxzpmgXALW0dsf1Z3dzRPacRCuhj83r2aJWyyGlIGz/pd5gtTj1Gm5/XYfE71/Vt
IwbgTFdxHVq62lnvqYRq51Us+VskHJztivaOtJV4YErbDsxMyxa5gHOz3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMVc+n4LhLKlekOcA87qiHmA6CbSMB8GA1UdIwQY
MBaAFPrsUYd6ufmbO6HM5QGilsMrAo+1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11eFJoM3E1LVpzN29jemxBYUtXd3lzQ2o3VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZDViYzA4LWNhM2ItNDZhNy1iOWQ4
LTkzMTk5ODBjZWE2OC8xLzEtdXhSaDNxNS1aczdvY3psQWFLV3d5c0NqN1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZmL2Q1YmMwOC1jYTNiLTQ2YTctYjlkOC05MzE5OTgwY2Vh
NjgvMS8xLXV4UmgzcTUtWnM3b2N6bEFhS1d3eXNDajdVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM06V
JYRsNI3X3QI67HmCGS6dpugGTvABVE9PIcR3Pn4uGWguMzgIX/vxmmnJU3NZUxl6
n1RZ66hKa23dV3gEBRBQmG2E2QyyvbMAOeKTaiDe3GJ7wP2dtDze9bTB+184vAew
Na68Kzy4D2+xi7Uny1bhdEGVSRfW7Rst6NXgZj29buhXXesL79Md5D+bn6ieKj1B
w1hklWFCnqwTyZzC+ILWFoHy2yw+MwKRgN4RwK4eIYygYt8w7kjtZbpl5+gn2ezs
jXdQascyW0nCaoFfvlSi08l07taJxL8Lc16q+i/c9S4gNuHsO381kpSRT1erzPyn
g5qQQ3zF/DOGPOhT+A==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:54:56 2025 by rpki-client