Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json)
Hash identifier: I3AUn/fA9wm27PTHyv/CiRGoJLlKG1e4S/nE4sK/XNc=
Subject key identifier: 9B:72:BF:C9:FA:6E:D3:CE:C2:F4:E5:D1:A4:12:1C:77:25:A3:2B:54
Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Certificate serial: 0194BCA9FC8012C62326450655CBD954043F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
Manifest number: 0BA1
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=)
2: fhBEWX57CWS01wKGDmOj8Z9EzYw.roa (hash: D+a2YNuqVyUVJSkU0irOhJ2PQ/I46A6HZqOvQn38NVY=)
3: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: /mFxxcyIaMxgug4MCCnJ6qqca49VHTIQdETQzr86O0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fc:80:12:c6:23:26:45:06:55:cb:d9:54:04:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=9b72bfc9fa6ed3cec2f4e5d1a4121c7725a32b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:34:d8:d4:2c:35:3c:3e:51:84:92:63:3c:
03:1b:fc:39:67:37:47:5a:10:45:d2:2e:60:33:0f:
77:7d:22:17:ad:60:e9:89:b5:76:63:97:c4:8d:65:
57:67:a4:34:36:cc:85:98:e9:17:2c:51:61:64:8f:
7f:54:5f:fc:56:72:ed:2d:e1:09:d4:5a:c7:15:4b:
ee:42:85:87:c5:15:c7:56:ce:02:84:5d:9d:b0:54:
ff:b3:cd:08:ac:21:6f:4a:62:7b:ef:f4:8a:ba:6e:
4e:7d:c0:00:80:21:59:1c:46:c3:19:a8:f5:23:34:
b7:59:75:28:ee:02:b2:d7:ba:d5:f4:16:1e:80:6d:
f2:f2:b4:6a:44:52:06:15:2a:99:9d:2c:93:64:78:
79:4d:30:c7:ba:15:e1:38:06:d1:bf:1b:69:70:fb:
27:40:92:4c:04:1b:da:76:61:4a:26:3b:35:c1:89:
18:5d:c5:99:fe:c4:fe:10:72:10:90:ac:ed:6b:8b:
d1:f9:88:91:94:e8:a0:3c:57:c7:68:6c:81:50:cc:
c4:a5:b0:43:85:43:61:f4:43:ad:b5:06:c6:50:3d:
3f:74:40:eb:12:e6:ac:0b:95:c1:9f:64:f6:9c:c7:
a0:fe:26:cd:d2:48:33:ba:43:6d:f8:b4:dd:18:ca:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:BF:C9:FA:6E:D3:CE:C2:F4:E5:D1:A4:12:1C:77:25:A3:2B:54
X509v3 Authority Key Identifier:
keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:ee:19:f1:ed:39:7f:b0:ac:87:07:81:c1:e4:a6:4a:5e:
e5:e4:c7:9c:6f:15:b9:c7:68:7f:64:d9:8f:7d:50:13:0f:9c:
53:1f:22:33:4e:98:03:bc:41:c1:80:e0:d8:d4:b9:ea:51:14:
a1:63:4b:e6:6a:06:9c:94:a0:27:ca:c4:1d:b6:96:00:2a:e7:
04:1b:c6:9b:d0:bd:e3:ed:1c:39:e1:eb:ee:0e:69:5e:3d:27:
15:42:e6:d9:19:7a:90:a8:3d:29:22:3f:00:b6:91:c2:c6:15:
86:b2:77:9f:4f:38:e6:6a:18:bf:87:64:5d:05:23:c8:48:b3:
f5:ef:d4:12:3a:20:b4:f7:f8:5d:7a:93:80:97:20:d8:95:5e:
74:44:55:23:68:97:5b:f3:95:58:ac:4c:22:e7:9b:e9:ee:9a:
6e:54:94:94:78:c8:f0:f5:f0:81:3c:cf:df:fe:70:0e:cf:76:
9e:e5:64:ed:4a:77:77:a1:78:72:bb:27:22:77:44:9d:ce:2b:
f6:5e:88:d7:e4:22:48:cd:a2:d2:f5:2a:37:23:87:47:61:7f:
71:fd:13:20:b4:00:6a:52:42:5a:c4:70:e5:fa:df:c6:4f:87:
f1:fa:e1:ab:1e:00:71:59:b8:ea:25:21:fd:d1:64:e7:bc:92:
17:12:65:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfyAEsYjJkUGVcvZVAQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZWQ5YjVjYjRiNjQ4NjZjMzgzZGVlNDU3NmJmZjNmZjg3
NTI0MmQwHhcNMjUwMTMxMTQwMDQ0WhcNMjUwMjAxMTQwMDQ0WjAzMTEwLwYDVQQD
Eyg5YjcyYmZjOWZhNmVkM2NlYzJmNGU1ZDFhNDEyMWM3NzI1YTMyYjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonY02NQsNTw+UYSSYzwDG/w5ZzdH
WhBF0i5gMw93fSIXrWDpibV2Y5fEjWVXZ6Q0NsyFmOkXLFFhZI9/VF/8VnLtLeEJ
1FrHFUvuQoWHxRXHVs4ChF2dsFT/s80IrCFvSmJ77/SKum5OfcAAgCFZHEbDGaj1
IzS3WXUo7gKy17rV9BYegG3y8rRqRFIGFSqZnSyTZHh5TTDHuhXhOAbRvxtpcPsn
QJJMBBvadmFKJjs1wYkYXcWZ/sT+EHIQkKzta4vR+YiRlOigPFfHaGyBUMzEpbBD
hUNh9EOttQbGUD0/dEDrEuasC5XBn2T2nMeg/ibN0kgzukNt+LTdGMpuZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtyv8n6btPOwvTl0aQSHHcloytUMB8GA1UdIwQY
MBaAFLbtm1y0tkhmw4Pe5Fdr/z/4dSQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDkt
NWE5MDVhZjUwN2MzLzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDktNWE5MDVhZjUwN2Mz
LzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYHuGfHt
OX+wrIcHgcHkpkpe5eTHnG8Vucdof2TZj31QEw+cUx8iM06YA7xBwYDg2NS56lEU
oWNL5moGnJSgJ8rEHbaWACrnBBvGm9C94+0cOeHr7g5pXj0nFULm2Rl6kKg9KSI/
ALaRwsYVhrJ3n0845moYv4dkXQUjyEiz9e/UEjogtPf4XXqTgJcg2JVedERVI2iX
W/OVWKxMIueb6e6ablSUlHjI8PXwgTzP3/5wDs92nuVk7Up3d6F4crsnIndEnc4r
9l6I1+QiSM2i0vUqNyOHR2F/cf0TILQAalJCWsRw5frfxk+H8frhqx4AcVm46iUh
/dFk57ySFxJlwA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:31 2025 by rpki-client