Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft (raw, json)
Hash identifier: dmuNPj6ANZBiHffolyuS8t24/tUdHBRvwPCAMW/igFE=
Subject key identifier: 3E:19:8A:E0:A2:4F:83:E1:FC:0A:A8:64:29:B3:84:E7:39:00:07:11
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0195DFD925CF948BE5161173B1F63F253ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
Manifest number: 14CE
Signing time: Sat 29 Mar 2025 03:01:44 +0000
Manifest this update: Sat 29 Mar 2025 03:01:44 +0000
Manifest next update: Sun 30 Mar 2025 03:01:44 +0000
Files and hashes: 1: Tfr-7D7j2lNNHKqg1wf4wAWyKLs.roa (hash: TDIng4XMMUv1oCQo74mZWI08OWTpEbwfzmj+Yz7Mcjs=)
2: UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl (hash: cbMZPJOO6qlODySpKx3wS/LBnQB1JtRQzNbC2iZZz6A=)
3: V30JXSTwCvMQbqRFqhemlITS5yI.roa (hash: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=)
4: fvX9lVCmVkwxFN8HZnxPO7cbKOc.roa (hash: 0YH2vuu49gx5SRz7HwNFAksVufD7yu4WlEj1/zzH+14=)
5: g2Tr9uvyLm_vlwkGo6cp6yBSgPk.roa (hash: FXX+7zvwl+jhFJ/RqVEU3TMW14QBwo/9W7IU9URXq7s=)
6: g4mdoMQ7AxJUDrtz_UzKcq2BGGE.roa (hash: 4DUzhU0iuTSUQunYJIMnvSS7wKLl3zF9lIYPHqPkajo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:25:cf:94:8b:e5:16:11:73:b1:f6:3f:25:3a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Mar 29 03:01:44 2025 GMT
Not After : Mar 30 03:01:44 2025 GMT
Subject: CN=3e198ae0a24f83e1fc0aa86429b384e739000711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:de:8c:22:d8:2f:d8:ed:5a:0f:8e:89:48:
39:02:bb:9b:fa:eb:5e:d6:47:3d:be:b9:b9:1f:ca:
40:74:35:f1:d8:86:eb:ab:b8:e1:79:1d:77:0c:4e:
f7:65:62:52:58:9c:53:8d:fc:71:a7:c0:e4:ac:f0:
8a:b2:1f:0b:b3:09:a4:24:a9:38:b3:4c:e8:e8:09:
60:39:59:f5:79:da:0c:7a:f0:9d:d7:04:04:03:82:
dd:ba:ad:e9:e6:69:3f:69:fb:b2:c1:9e:b0:30:8e:
01:c4:46:a1:c5:38:7b:f7:2a:c2:85:66:ca:1e:03:
02:0b:eb:bd:ca:c6:29:e5:e3:6f:33:a1:f2:80:45:
ee:74:61:44:d8:77:95:07:9b:56:ba:56:3c:d7:83:
b9:61:ae:d4:40:16:31:bf:12:5e:a1:6a:cc:2c:ec:
81:77:dd:11:1d:8f:2d:cd:09:66:75:36:04:2a:b4:
5f:ac:47:dd:b1:b9:6d:97:89:e1:1e:55:43:95:47:
78:9e:22:89:36:b7:bb:b5:58:72:99:06:be:9d:1a:
de:7c:1f:87:a6:11:82:6e:8a:64:82:de:52:51:e8:
47:94:38:9c:cf:ad:55:53:d5:35:34:a0:6f:bd:5a:
27:10:e2:c1:54:3d:9b:11:b0:8b:d7:62:ac:ec:87:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:8A:E0:A2:4F:83:E1:FC:0A:A8:64:29:B3:84:E7:39:00:07:11
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:dc:82:1b:b2:58:c5:a4:b4:8b:26:9b:5b:60:eb:21:0c:30:
ec:13:ec:4b:09:0c:45:12:3c:c4:7c:d8:70:13:14:1d:71:8f:
69:7f:ed:88:1a:39:1b:13:68:d9:95:55:e2:89:75:d7:16:23:
84:a8:ee:29:83:65:57:a3:8f:4b:82:00:3e:72:1f:45:db:c5:
b3:4e:ae:e8:4b:51:98:37:17:ba:39:2a:3d:2d:75:a0:62:ca:
c1:4f:a1:56:44:a3:9d:ec:f0:91:1c:a9:f7:c5:dd:88:80:55:
fa:6a:fc:c4:4a:90:83:0a:38:73:c5:49:d4:15:fc:f3:24:da:
cb:6d:1b:a9:c9:4a:47:fd:42:6c:68:70:06:7f:96:87:0a:5a:
3d:bf:1e:05:24:73:99:b2:26:2f:3b:9a:55:b3:e0:82:39:0a:
d0:a9:ad:03:4c:b6:ab:a8:c7:91:3f:8d:c1:0a:ab:1c:24:25:
e3:0b:b1:42:ea:1a:1f:b7:d7:b1:78:e7:9e:fb:96:af:a9:87:
09:33:a1:d7:53:0b:54:ae:27:11:0b:d0:57:1c:22:f3:9f:9b:
83:d5:7e:77:f5:15:06:1d:ca:e1:ea:aa:49:d8:42:99:08:e7:
1b:d8:2e:b9:eb:78:a9:b2:f4:dc:ad:d3:a1:62:7a:04:6c:5d:
5f:f7:72:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2SXPlIvlFhFzsfY/JTq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjUwMzI5MDMwMTQ0WhcNMjUwMzMwMDMwMTQ0WjAzMTEwLwYDVQQD
EygzZTE5OGFlMGEyNGY4M2UxZmMwYWE4NjQyOWIzODRlNzM5MDAwNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc3ejCLYL9jtWg+OiUg5Arub+ute
1kc9vrm5H8pAdDXx2Ibrq7jheR13DE73ZWJSWJxTjfxxp8DkrPCKsh8LswmkJKk4
s0zo6AlgOVn1edoMevCd1wQEA4Lduq3p5mk/afuywZ6wMI4BxEahxTh79yrChWbK
HgMCC+u9ysYp5eNvM6HygEXudGFE2HeVB5tWulY814O5Ya7UQBYxvxJeoWrMLOyB
d90RHY8tzQlmdTYEKrRfrEfdsbltl4nhHlVDlUd4niKJNre7tVhymQa+nRrefB+H
phGCbopkgt5SUehHlDicz61VU9U1NKBvvVonEOLBVD2bEbCL12Ks7If2ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4ZiuCiT4Ph/AqoZCmzhOc5AAcRMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtyCG7JY
xaS0iyabW2DrIQww7BPsSwkMRRI8xHzYcBMUHXGPaX/tiBo5GxNo2ZVV4ol11xYj
hKjuKYNlV6OPS4IAPnIfRdvFs06u6EtRmDcXujkqPS11oGLKwU+hVkSjnezwkRyp
98XdiIBV+mr8xEqQgwo4c8VJ1BX88yTay20bqclKR/1CbGhwBn+WhwpaPb8eBSRz
mbImLzuaVbPggjkK0KmtA0y2q6jHkT+NwQqrHCQl4wuxQuoaH7fXsXjnnvuWr6mH
CTOh11MLVK4nEQvQVxwi85+bg9V+d/UVBh3K4eqqSdhCmQjnG9guuet4qbL03K3T
oWJ6BGxdX/dyLA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:39 2025 by rpki-client