Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: /P/5WAffhmEAFSC/bPAwzFwYacPOSNxgx2u71uliNSQ=
Subject key identifier: 42:19:E1:46:9D:A8:E6:88:3E:ED:68:9B:23:C4:35:A9:3B:A3:8D:8D
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 0194BD17CA4D122EBB9C2F9A7300BC230EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: a4uoiQUYDRYL3KoUauAv4uE+aeF8DIKLAHRoEQe4bew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ca:4d:12:2e:bb:9c:2f:9a:73:00:bc:23:0e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=4219e1469da8e6883eed689b23c435a93ba38d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:f7:21:7d:9b:17:6c:30:d8:c4:b0:f2:66:
b3:09:b7:43:5d:ef:7e:71:27:ad:4c:9a:02:19:21:
32:2c:fb:14:ef:81:f8:c1:3a:22:8f:72:80:40:0c:
75:c2:72:90:d8:de:f4:f2:b0:dc:18:d0:10:2e:ac:
7b:0e:9d:8b:ae:ef:cc:ff:43:f6:23:e9:70:df:1b:
81:c0:fa:51:52:02:78:8f:a4:77:b1:dc:b1:f4:f2:
20:56:87:6f:d2:c9:69:74:a8:cf:ea:f0:67:df:00:
07:bc:ca:9f:9b:36:20:53:ff:21:ad:71:c1:5c:66:
de:f9:01:24:ce:91:42:d9:4a:46:39:87:8b:93:df:
8b:e1:93:02:7e:0b:fa:ca:e9:62:3c:3c:34:dc:ab:
e5:07:0b:81:5e:06:b0:7f:20:94:11:2f:36:08:51:
98:68:a9:cb:96:f4:f8:98:ac:73:b7:20:24:af:3d:
26:33:a7:d5:ff:a2:f5:1e:88:2c:3f:bc:5a:c7:76:
ab:8a:df:7e:9d:33:01:56:07:87:9b:78:80:60:ab:
97:fd:05:56:d1:d3:c1:84:e2:a4:02:21:19:1f:6a:
e9:7c:3f:f5:52:63:11:18:e3:f1:ae:6c:bb:53:53:
a3:de:83:ca:bd:dd:2d:1e:c7:aa:88:95:e3:6a:1b:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:E1:46:9D:A8:E6:88:3E:ED:68:9B:23:C4:35:A9:3B:A3:8D:8D
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:e0:78:46:1f:8a:75:89:7c:c8:98:05:45:94:7f:f4:9b:
c7:c2:74:b4:13:f5:fa:92:e4:59:e7:ec:3e:ac:a1:35:dd:bc:
68:db:e8:f9:3c:fc:d5:a3:30:bd:e5:6e:5b:f2:e4:04:b4:d1:
a6:69:7a:87:f1:48:68:5f:77:ab:3e:fc:d5:26:ff:08:b3:97:
67:33:62:cf:b7:17:25:54:68:d9:34:a5:fa:59:75:fe:81:52:
9d:9c:40:be:f9:97:65:71:01:b6:1c:52:df:73:d2:ad:ac:2c:
94:b4:79:4d:ca:04:d3:52:ad:14:1f:45:63:6e:07:bc:88:94:
b2:7c:a6:15:2c:88:dd:9c:8e:09:32:10:8c:a6:75:e6:d9:55:
c8:55:de:2d:a3:9a:40:ca:4f:f6:75:93:db:64:b0:de:0f:7d:
7b:5b:14:ba:79:97:43:d3:63:54:5b:c6:28:0c:bd:ba:ee:d8:
25:2c:08:45:43:66:89:26:4c:01:24:bd:42:35:fd:ce:46:df:
ed:ab:56:6e:cd:ff:5d:08:9e:4a:91:60:72:23:d6:72:6a:f2:
3e:a6:d6:d1:91:8b:e3:4f:e2:af:62:c4:89:46:b7:6a:61:6e:
31:14:03:6a:b5:43:fb:b3:dd:6c:81:9a:40:e4:c1:27:36:87:
f4:22:45:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8pNEi67nC+acwC8Iw7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjUwMTMxMTYwMDQwWhcNMjUwMjAxMTYwMDQwWjAzMTEwLwYDVQQD
Eyg0MjE5ZTE0NjlkYThlNjg4M2VlZDY4OWIyM2M0MzVhOTNiYTM4ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSP3IX2bF2ww2MSw8mazCbdDXe9+
cSetTJoCGSEyLPsU74H4wToij3KAQAx1wnKQ2N708rDcGNAQLqx7Dp2Lru/M/0P2
I+lw3xuBwPpRUgJ4j6R3sdyx9PIgVodv0slpdKjP6vBn3wAHvMqfmzYgU/8hrXHB
XGbe+QEkzpFC2UpGOYeLk9+L4ZMCfgv6yuliPDw03KvlBwuBXgawfyCUES82CFGY
aKnLlvT4mKxztyAkrz0mM6fV/6L1HogsP7xax3arit9+nTMBVgeHm3iAYKuX/QVW
0dPBhOKkAiEZH2rpfD/1UmMRGOPxrmy7U1Oj3oPKvd0tHseqiJXjahuPAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIZ4UadqOaIPu1omyPENak7o42NMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwngeEYf
inWJfMiYBUWUf/Sbx8J0tBP1+pLkWefsPqyhNd28aNvo+Tz81aMwveVuW/LkBLTR
pml6h/FIaF93qz781Sb/CLOXZzNiz7cXJVRo2TSl+ll1/oFSnZxAvvmXZXEBthxS
33PSrawslLR5TcoE01KtFB9FY24HvIiUsnymFSyI3ZyOCTIQjKZ15tlVyFXeLaOa
QMpP9nWT22Sw3g99e1sUunmXQ9NjVFvGKAy9uu7YJSwIRUNmiSZMASS9QjX9zkbf
7atWbs3/XQieSpFgciPWcmryPqbW0ZGL40/ir2LEiUa3amFuMRQDarVD+7PdbIGa
QOTBJzaH9CJF2A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:35 2025 by rpki-client