Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
File: tpHQC9tiauVzB9XNTord2UdWgLM.mft (raw, json)
Hash identifier: XiUGX208wBkYmriKFll7902Od5N4PnZFbtK87X1Z3VA=
Subject key identifier: 6F:F4:CE:A9:8F:4F:76:53:FB:EA:C7:52:35:41:F4:3D:20:13:58:52
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 0194BCA976D24D55E1644FCD6749162BA5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
Manifest number: 0CFE
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: AQvnwjdpCCJVGghqg0nwe9L0mVk.roa (hash: lmMkrxQHgFH9/tCkdiNxxBNSfZZ+AeKUjyZG6YnOW/4=)
2: tpHQC9tiauVzB9XNTord2UdWgLM.crl (hash: oKFAVQ/ADf4S9dy0KwkS/4UpgrPqTijqnJYaTVve6pU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:76:d2:4d:55:e1:64:4f:cd:67:49:16:2b:a5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=6ff4cea98f4f7653fbeac7523541f43d20135852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:2a:87:9a:88:27:56:aa:4b:70:a0:8a:32:
8d:42:8f:69:2e:a7:a0:41:a1:35:92:3b:97:07:95:
58:b4:81:0c:42:27:b4:96:9d:01:51:e1:e4:29:85:
b3:70:de:53:7b:10:80:2c:78:fb:53:db:58:17:31:
7a:bf:ea:6a:62:26:3d:27:1f:bd:90:79:b6:28:6a:
dd:8a:ff:2e:6c:66:fb:2c:58:60:f5:f4:1e:7e:92:
1d:b3:b2:63:58:f4:5c:26:c6:86:e5:94:68:c9:f2:
88:fd:db:53:11:08:24:a1:41:82:cf:c0:48:76:37:
9a:c9:1e:0d:9a:82:d9:48:56:38:96:ae:e3:e6:c7:
ba:73:00:c4:dc:a1:36:a0:bb:4f:5b:1c:71:3c:0e:
dd:ce:80:c0:b3:95:80:d6:0e:a1:56:c3:97:00:b9:
32:42:35:4c:ef:5f:ba:c1:ca:f9:4e:d5:05:1f:d1:
02:0d:12:3a:ae:c0:a2:aa:86:3e:f8:8f:2e:63:60:
c5:1d:69:8f:68:24:84:93:94:5c:a9:d9:44:de:8f:
7a:21:9b:94:48:70:6b:78:05:8c:25:9a:ab:4a:f5:
ee:96:5c:58:1e:ea:0a:15:da:e6:1d:86:5c:7d:1a:
9a:37:8c:ce:b2:5c:b5:bc:31:a2:ba:28:61:3d:d0:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F4:CE:A9:8F:4F:76:53:FB:EA:C7:52:35:41:F4:3D:20:13:58:52
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:59:e3:3d:8d:90:cf:1a:fb:e4:6e:0f:d3:25:a5:f1:94:
52:fd:60:87:37:79:7a:6a:b2:0d:0b:9a:aa:a8:61:ab:af:21:
5b:85:c6:4e:4a:42:ad:23:4b:bc:b7:54:3c:6c:5b:e3:a3:3e:
bc:ed:ed:26:59:ad:8d:63:c6:cb:36:49:14:cb:3a:38:f5:66:
6d:d2:c6:28:0d:d5:5a:90:ab:ad:e3:ce:04:cc:51:84:e6:45:
34:09:f6:05:10:a8:28:13:ad:ae:10:00:6b:cd:c9:9f:7b:69:
23:f3:6d:e9:8b:6e:c6:ec:64:03:03:d8:92:5f:01:8f:e3:16:
74:f9:5d:06:55:a4:df:e8:16:52:c2:97:05:e3:1b:bf:fc:41:
b2:02:bb:85:61:56:09:b7:a9:ec:19:cc:f8:d4:73:2a:47:08:
f6:0c:79:cb:7a:cc:0d:39:cb:02:0c:12:b6:7e:a8:a4:dd:0c:
6a:4f:f6:d0:3b:a0:81:21:63:2d:57:d5:e4:d4:da:9c:36:c4:
dd:12:c1:e8:d8:6b:63:47:83:5a:f3:5e:b4:0e:e2:be:cb:52:
b4:0c:72:a4:e6:00:78:eb:98:27:4d:cf:6a:0e:d7:c4:87:4b:
f0:89:1c:ab:a8:6c:8e:58:96:f2:f2:51:64:83:7a:50:9c:4f:
76:3b:2d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXbSTVXhZE/NZ0kWK6XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTFkMDBiZGI2MjZhZTU3MzA3ZDVjZDRlOGFkZGQ5NDc1
NjgwYjMwHhcNMjUwMTMxMTQwMDEwWhcNMjUwMjAxMTQwMDEwWjAzMTEwLwYDVQQD
Eyg2ZmY0Y2VhOThmNGY3NjUzZmJlYWM3NTIzNTQxZjQzZDIwMTM1ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnAqh5qIJ1aqS3CgijKNQo9pLqeg
QaE1kjuXB5VYtIEMQie0lp0BUeHkKYWzcN5TexCALHj7U9tYFzF6v+pqYiY9Jx+9
kHm2KGrdiv8ubGb7LFhg9fQefpIds7JjWPRcJsaG5ZRoyfKI/dtTEQgkoUGCz8BI
djeayR4NmoLZSFY4lq7j5se6cwDE3KE2oLtPWxxxPA7dzoDAs5WA1g6hVsOXALky
QjVM71+6wcr5TtUFH9ECDRI6rsCiqoY++I8uY2DFHWmPaCSEk5RcqdlE3o96IZuU
SHBreAWMJZqrSvXullxYHuoKFdrmHYZcfRqaN4zOsly1vDGiuihhPdBngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/0zqmPT3ZT++rHUjVB9D0gE1hSMB8GA1UdIwQY
MBaAFLaR0AvbYmrlcwfVzU6K3dlHVoCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zZTNkMDgtZTRjNS00ZjNkLWJlMDEt
NDUwYWQ1NWQzMjVhLzEvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zZTNkMDgtZTRjNS00ZjNkLWJlMDEtNDUwYWQ1NWQzMjVh
LzEvdHBIUUM5dGlhdVZ6QjlYTlRvcmQyVWRXZ0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXNZ4z2N
kM8a++RuD9MlpfGUUv1ghzd5emqyDQuaqqhhq68hW4XGTkpCrSNLvLdUPGxb46M+
vO3tJlmtjWPGyzZJFMs6OPVmbdLGKA3VWpCrrePOBMxRhOZFNAn2BRCoKBOtrhAA
a83Jn3tpI/Nt6YtuxuxkAwPYkl8Bj+MWdPldBlWk3+gWUsKXBeMbv/xBsgK7hWFW
Cbep7BnM+NRzKkcI9gx5y3rMDTnLAgwStn6opN0Mak/20DuggSFjLVfV5NTanDbE
3RLB6NhrY0eDWvNetA7ivstStAxypOYAeOuYJ03Pag7XxIdL8Ikcq6hsjliW8vJR
ZIN6UJxPdjsthw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:07:56 2025 by rpki-client