Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier: b8TZGeDhyL2kfgRIU8hukVMJcBMsQN91fqEZ45JFtNs=
Subject key identifier: 85:79:0C:4F:4F:32:1C:E7:01:26:D0:F4:5B:C0:89:A0:90:DD:4C:42
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial: 0194BD4E54DB34BC110B7297A1E3A04330D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number: 0E76
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=)
2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: z54bmPTFITwMIdQ3GBZrytf+hem0lJvrfV6GOhI6rBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:db:34:bc:11:0b:72:97:a1:e3:a0:43:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=85790c4f4f321ce70126d0f45bc089a090dd4c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:fb:f5:60:54:dc:0c:26:23:bb:19:49:cb:
6a:fa:ae:16:cd:42:e4:70:67:eb:64:a5:41:48:da:
c4:90:1d:be:08:05:b4:1e:0c:db:ce:ff:53:58:43:
82:89:ba:95:db:7a:33:b5:50:5e:28:09:bf:36:35:
fc:fb:b4:3a:a0:3a:bc:8b:7c:7b:58:73:1c:55:6a:
de:c3:e4:a8:4a:8f:67:59:a5:84:48:7c:76:46:60:
33:04:da:53:e7:7a:e8:f4:2e:bf:a8:f7:73:c7:16:
5c:d9:c3:d7:e3:8b:c0:af:f0:35:2a:a6:5d:55:0c:
61:dd:2e:90:f7:20:f9:e9:37:a0:c4:24:d0:b4:48:
f8:2b:33:ed:8c:99:2f:33:fb:b5:39:f0:83:43:59:
cf:39:5d:ae:96:7b:52:77:b9:67:88:b3:fb:fd:97:
6d:8c:da:58:5e:02:34:68:8f:85:a7:e0:57:46:01:
e8:6c:5c:de:30:c8:60:23:af:94:d6:2d:59:c7:c5:
1f:43:26:1f:f2:34:a6:1e:93:f5:62:60:4a:03:64:
2f:58:2c:b7:58:d8:3d:d5:a5:03:53:80:6c:05:e4:
9f:9c:d1:40:36:29:03:76:01:b3:ec:10:91:8c:13:
68:9a:f9:89:5c:71:bd:e9:0b:28:6b:5f:89:d0:2f:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:0C:4F:4F:32:1C:E7:01:26:D0:F4:5B:C0:89:A0:90:DD:4C:42
X509v3 Authority Key Identifier:
keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:f1:b9:72:12:0d:f7:9f:af:37:48:f9:e8:42:c9:a4:82:
ed:46:fd:3c:bc:96:c4:01:93:15:f1:10:29:07:3b:8c:04:3a:
76:60:10:44:5c:b8:64:0b:c4:99:e2:95:8a:50:3c:5f:4f:03:
6b:06:ca:4e:92:8f:e8:56:77:fc:d5:5c:99:b5:db:07:1b:d0:
c9:51:9c:97:83:77:cd:9c:67:c3:78:1c:d3:be:87:68:54:81:
5b:3d:05:26:9d:af:e0:00:d6:bf:fb:c9:12:17:89:59:6c:7a:
5e:7e:28:ad:c5:ca:15:6e:c0:8b:8d:9d:11:e3:1b:41:83:d3:
d6:5d:a1:38:9e:70:be:86:51:07:64:ff:25:d4:8a:03:70:39:
b5:8a:9c:17:03:a7:e2:55:aa:db:7b:27:6e:c1:b4:89:c9:05:
05:c0:7d:2c:5c:4f:cf:0f:cb:c8:26:3c:1c:c5:22:2a:0e:3c:
e6:01:55:4d:0b:a6:6a:98:8d:c6:f8:02:63:24:7c:b6:93:f1:
ea:b7:ef:bc:f0:2b:c2:22:bc:f0:cc:df:64:57:01:a1:07:39:
55:55:23:fe:45:75:fc:30:69:60:1e:a9:4c:ab:f3:2f:52:43:
b2:db:1e:45:50:fa:1b:5d:b4:f0:f6:f0:5f:3b:c5:de:c2:f5:
7b:dd:d3:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlTbNLwRC3KXoeOgQzDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzljNGUzZmU4NjlkOTc4M2JhMmRhZGY2NjBkY2NkMGZh
NTM3MDcwHhcNMjUwMTMxMTcwMDE0WhcNMjUwMjAxMTcwMDE0WjAzMTEwLwYDVQQD
Eyg4NTc5MGM0ZjRmMzIxY2U3MDEyNmQwZjQ1YmMwODlhMDkwZGQ0YzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBT79WBU3AwmI7sZSctq+q4WzULk
cGfrZKVBSNrEkB2+CAW0Hgzbzv9TWEOCibqV23oztVBeKAm/NjX8+7Q6oDq8i3x7
WHMcVWrew+SoSo9nWaWESHx2RmAzBNpT53ro9C6/qPdzxxZc2cPX44vAr/A1KqZd
VQxh3S6Q9yD56TegxCTQtEj4KzPtjJkvM/u1OfCDQ1nPOV2ulntSd7lniLP7/Zdt
jNpYXgI0aI+Fp+BXRgHobFzeMMhgI6+U1i1Zx8UfQyYf8jSmHpP1YmBKA2QvWCy3
WNg91aUDU4BsBeSfnNFANikDdgGz7BCRjBNomvmJXHG96Qsoa1+J0C9PlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV5DE9PMhznASbQ9FvAiaCQ3UxCMB8GA1UdIwQY
MBaAFLc5xOP+hp2Xg7otrfZg3M0PpTcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQt
MDcyMjYyZTMwZmM1LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQtMDcyMjYyZTMwZmM1
LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7fxuXIS
DfefrzdI+ehCyaSC7Ub9PLyWxAGTFfEQKQc7jAQ6dmAQRFy4ZAvEmeKVilA8X08D
awbKTpKP6FZ3/NVcmbXbBxvQyVGcl4N3zZxnw3gc076HaFSBWz0FJp2v4ADWv/vJ
EheJWWx6Xn4orcXKFW7Ai42dEeMbQYPT1l2hOJ5wvoZRB2T/JdSKA3A5tYqcFwOn
4lWq23snbsG0ickFBcB9LFxPzw/LyCY8HMUiKg485gFVTQumapiNxvgCYyR8tpPx
6rfvvPArwiK88MzfZFcBoQc5VVUj/kV1/DBpYB6pTKvzL1JDstseRVD6G1208Pbw
XzvF3sL1e93TSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:22 2025 by rpki-client