Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
File: TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft (raw, json)
Hash identifier: q+T7g35ALhOW7wAwZxYzIeLY5LmNf0/k2g6Y0oyMnkU=
Subject key identifier: 54:9A:FC:74:A4:0A:CC:CE:41:AF:C5:3B:77:55:BA:F5:98:DB:62:5C
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 0194BD178736272723AFE4306CDDB9484CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
Manifest number: 04EB
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl (hash: 2Ht/KK1xvf+1+jjKYmYJt44R973Gnk42AlsouhK7rv4=)
2: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (hash: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:36:27:27:23:af:e4:30:6c:dd:b9:48:4c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=549afc74a40accce41afc53b7755baf598db625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:8f:d3:33:fc:3f:e9:6a:ad:35:43:c3:38:
41:5e:06:09:89:c2:6d:e2:af:f6:33:ab:34:e0:32:
c8:74:3a:35:7a:b2:ca:ba:4e:47:cf:c4:b2:77:48:
42:7b:8a:15:40:04:5d:ed:7d:9a:d6:50:e3:ea:98:
d0:d1:39:dc:51:3f:45:7c:e6:37:bc:8d:43:33:ee:
6b:2f:c7:e4:47:1d:d4:85:3e:05:67:8a:7f:03:16:
92:ff:84:e9:a7:1e:d6:ed:3d:c3:a9:dc:e7:7b:58:
13:27:47:30:3c:c3:ef:2d:c0:fc:1a:02:54:8b:51:
fc:13:3c:de:ac:61:ab:a6:c8:a1:a4:61:f0:d4:81:
1a:39:1b:3d:09:9d:03:af:2d:d0:bf:ab:8b:73:5f:
4e:ff:56:87:32:63:b0:c1:34:fe:33:49:71:9d:fe:
b5:be:31:3e:91:42:f3:a0:ef:c9:22:ba:b8:fe:2a:
b4:c0:0f:28:6f:6c:07:2f:33:b7:88:df:35:0b:0d:
bb:9f:cb:50:ba:4e:ef:d3:ed:b9:37:c9:2b:47:0c:
23:ed:1c:8a:9c:0f:8d:64:35:32:11:51:02:8e:f5:
fc:e7:48:4c:1a:c9:9d:ff:6b:f3:2c:c8:ee:5a:8f:
4f:c7:92:b7:77:2b:5d:83:29:63:9c:8c:2c:96:9f:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9A:FC:74:A4:0A:CC:CE:41:AF:C5:3B:77:55:BA:F5:98:DB:62:5C
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:38:ce:07:19:e8:ce:e8:c2:b4:ce:c9:18:ea:fa:42:a5:5c:
d4:6f:08:50:ff:ca:39:a0:26:12:92:8a:02:b9:68:1d:ab:9c:
6c:b4:e0:bf:64:9c:f3:00:33:c9:7c:3c:2d:18:5b:a8:d3:23:
c3:80:bc:8a:7f:3b:54:83:7e:33:f9:6d:c1:ed:f5:74:d5:de:
79:48:23:1d:18:e5:f8:02:4b:9d:df:be:ad:54:5c:0b:7c:ae:
53:bd:e6:b0:67:26:f0:f6:87:87:b0:08:e9:8a:6d:a4:94:6f:
6c:18:1f:5d:fa:08:6c:c4:e9:31:d6:f2:dd:42:88:3d:85:ef:
50:1c:7e:45:a1:65:e4:73:5c:df:3d:26:c8:62:b1:c7:5d:e9:
1b:6d:22:1d:79:b5:9c:b6:cd:78:4f:4a:ba:a1:46:fd:b4:9b:
6e:8b:75:1f:f2:d7:2e:3f:d5:d9:f4:0d:45:dc:63:f4:be:da:
6f:9d:be:d5:e2:9b:56:df:c4:bc:a7:44:d1:2f:a9:46:20:45:
85:3c:6e:32:7b:6e:de:74:ed:ef:09:d1:b2:ed:90:f3:4a:5e:
43:bf:31:af:6c:19:2f:c3:fc:02:84:8f:8a:5b:e3:da:96:7c:
47:1f:37:e7:be:11:33:2d:fe:bc:73:6d:15:c0:0b:40:4b:b4:
81:d5:3b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4c2Jycjr+QwbN25SEzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjljM2VjNDdmY2NmMDFkOTMwNWZlMGQ3ZDQ4MWIzMDZi
MGQ0OGMwHhcNMjUwMTMxMTYwMDIzWhcNMjUwMjAxMTYwMDIzWjAzMTEwLwYDVQQD
Eyg1NDlhZmM3NGE0MGFjY2NlNDFhZmM1M2I3NzU1YmFmNTk4ZGI2MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04+P0zP8P+lqrTVDwzhBXgYJicJt
4q/2M6s04DLIdDo1erLKuk5Hz8Syd0hCe4oVQARd7X2a1lDj6pjQ0TncUT9FfOY3
vI1DM+5rL8fkRx3UhT4FZ4p/AxaS/4Tppx7W7T3Dqdzne1gTJ0cwPMPvLcD8GgJU
i1H8EzzerGGrpsihpGHw1IEaORs9CZ0Dry3Qv6uLc19O/1aHMmOwwTT+M0lxnf61
vjE+kULzoO/JIrq4/iq0wA8ob2wHLzO3iN81Cw27n8tQuk7v0+25N8krRwwj7RyK
nA+NZDUyEVECjvX850hMGsmd/2vzLMjuWo9Px5K3dytdgyljnIwslp+USwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSa/HSkCszOQa/FO3dVuvWY22JcMB8GA1UdIwQY
MBaAFEz5w+xH/M8B2TBf4NfUgbMGsNSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYt
ODYwMTY2MzM5NWViLzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iM2ZhNjQtZjhiMS00NGU4LWFiYTYtODYwMTY2MzM5NWVi
LzEvVFBuRDdFZjh6d0haTUZfZzE5U0Jzd2F3MUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzjOBxno
zujCtM7JGOr6QqVc1G8IUP/KOaAmEpKKArloHaucbLTgv2Sc8wAzyXw8LRhbqNMj
w4C8in87VIN+M/ltwe31dNXeeUgjHRjl+AJLnd++rVRcC3yuU73msGcm8PaHh7AI
6YptpJRvbBgfXfoIbMTpMdby3UKIPYXvUBx+RaFl5HNc3z0myGKxx13pG20iHXm1
nLbNeE9KuqFG/bSbbot1H/LXLj/V2fQNRdxj9L7ab52+1eKbVt/EvKdE0S+pRiBF
hTxuMntu3nTt7wnRsu2Q80peQ78xr2wZL8P8AoSPilvj2pZ8Rx83574RMy3+vHNt
FcALQEu0gdU7Dg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:27 2025 by rpki-client