Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: XfIgDyin+0fWkPBc9bGXUwUKdeb+GXyOhwZ95cx2wDs=
Subject key identifier: BD:63:6F:B5:68:85:91:75:D7:DD:BE:AE:1E:54:71:4A:C3:A0:D0:C6
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 0194BD4EAAD43EB261CBA6BC3D5AE9C38BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0B51
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: DRrOJLgDL5rmiSF6D3RMJURdhRI.roa (hash: 7NgLPdqIa5BkuBXQmhxzkicPEWRt/mYhR9CY8DkwoYg=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: jH8BFhNNyk97i/pcvAiUkhTg3yK+7GK0vEMSgoB/I3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:d4:3e:b2:61:cb:a6:bc:3d:5a:e9:c3:8b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=bd636fb568859175d7ddbeae1e54714ac3a0d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:e0:20:45:7e:42:ff:98:9b:7b:83:34:1b:
f6:d2:6c:0d:be:c7:6f:11:c2:0a:8c:38:c9:7e:1b:
b1:2f:b0:d5:9d:27:4f:66:74:71:ef:51:e5:b1:5d:
f9:8a:a9:2c:e1:ac:dc:cc:ee:e3:49:18:ac:6e:d3:
6f:2f:d4:56:88:5b:31:74:9f:13:ae:a3:38:4a:ec:
9b:b7:27:7d:6d:fc:bd:e5:08:31:f4:93:12:64:b2:
ef:79:3a:65:10:ec:b0:8a:54:b7:34:41:8a:52:de:
7c:b8:2e:fd:ad:d7:e7:7e:fc:df:11:ef:a3:bf:d1:
2d:bb:bf:34:a9:ff:e4:da:a8:1a:6b:af:81:7c:ca:
e3:e4:8d:7d:7d:c5:c1:de:ea:e0:cc:b3:85:2c:98:
9e:e4:3a:a7:5e:d8:10:ae:25:54:28:65:f6:19:31:
a5:7c:45:8d:e7:4e:99:1d:55:c2:20:50:73:e7:be:
52:a0:0f:bc:48:81:8c:71:25:43:8d:40:39:ac:fb:
9c:37:a9:72:6e:e8:26:4c:9f:31:00:a8:24:24:02:
7b:e4:ea:4e:9f:28:d7:21:37:ee:15:42:fa:93:46:
ac:eb:ad:0a:08:98:f5:df:fe:da:3c:44:80:5f:35:
61:08:72:d3:c1:ed:2c:09:42:09:87:cf:76:59:ab:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:63:6F:B5:68:85:91:75:D7:DD:BE:AE:1E:54:71:4A:C3:A0:D0:C6
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:06:bc:89:7b:37:a1:ed:ca:5f:15:94:a3:9b:48:81:60:60:
d8:cb:b6:61:ac:b1:a7:e5:ac:bf:ab:de:94:cf:ec:af:e8:74:
c5:b1:71:78:35:dc:c3:4d:7d:be:b2:5b:ff:36:3c:bc:8b:9d:
21:31:8b:a2:bc:4a:12:f3:9e:7a:d2:fe:27:27:a6:fc:d3:f8:
7f:32:8c:3b:6e:f7:45:21:e2:d1:40:9c:90:7c:5d:c2:1c:6b:
e0:19:21:ca:0b:ee:8c:62:75:53:ae:67:56:4c:e4:a3:f5:d0:
75:94:b2:d5:45:bd:22:97:c2:1d:b8:99:88:41:4b:f4:1e:91:
15:70:ca:2e:e2:e1:83:21:c6:a8:16:90:7b:63:f4:71:a5:dc:
3d:c1:c1:19:1b:32:92:b4:7a:d7:62:ca:fc:bf:53:95:ee:46:
f3:ca:30:39:6e:95:e0:df:b4:39:95:22:1a:78:e5:15:c6:40:
86:53:75:51:38:7c:88:7c:94:f3:77:b6:96:ee:40:6f:f4:a8:
bf:24:c5:76:19:d3:7b:ec:84:32:4c:c5:75:13:86:fc:d2:bc:
2d:14:7b:8e:4c:4a:dd:e5:3b:ba:b8:10:df:22:6f:16:0f:dc:
5c:e6:a5:dd:84:6d:44:3e:02:16:bf:58:7d:f9:41:21:5a:70:
7c:a5:9d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqrUPrJhy6a8PVrpw4u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDFjNTZlYTA2OWVlN2IxYzFkZjY2ODZiZDM2ZTBlMTQ1
MjhhMjAwHhcNMjUwMTMxMTcwMDM2WhcNMjUwMjAxMTcwMDM2WjAzMTEwLwYDVQQD
EyhiZDYzNmZiNTY4ODU5MTc1ZDdkZGJlYWUxZTU0NzE0YWMzYTBkMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrzgIEV+Qv+Ym3uDNBv20mwNvsdv
EcIKjDjJfhuxL7DVnSdPZnRx71HlsV35iqks4azczO7jSRisbtNvL9RWiFsxdJ8T
rqM4Suybtyd9bfy95Qgx9JMSZLLveTplEOywilS3NEGKUt58uC79rdfnfvzfEe+j
v9Etu780qf/k2qgaa6+BfMrj5I19fcXB3urgzLOFLJie5DqnXtgQriVUKGX2GTGl
fEWN506ZHVXCIFBz575SoA+8SIGMcSVDjUA5rPucN6lybugmTJ8xAKgkJAJ75OpO
nyjXITfuFUL6k0as660KCJj13/7aPESAXzVhCHLTwe0sCUIJh892WatbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1jb7VohZF1192+rh5UcUrDoNDGMB8GA1UdIwQY
MBaAFE9BxW6gae57HB32aGvTbg4UUoogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEt
ZDY3YjlhY2E2NDE3LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEtZDY3YjlhY2E2NDE3
LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAa8iXs3
oe3KXxWUo5tIgWBg2Mu2Yayxp+Wsv6velM/sr+h0xbFxeDXcw019vrJb/zY8vIud
ITGLorxKEvOeetL+Jyem/NP4fzKMO273RSHi0UCckHxdwhxr4BkhygvujGJ1U65n
Vkzko/XQdZSy1UW9IpfCHbiZiEFL9B6RFXDKLuLhgyHGqBaQe2P0caXcPcHBGRsy
krR612LK/L9Tle5G88owOW6V4N+0OZUiGnjlFcZAhlN1UTh8iHyU83e2lu5Ab/So
vyTFdhnTe+yEMkzFdROG/NK8LRR7jkxK3eU7urgQ3yJvFg/cXOal3YRtRD4CFr9Y
fflBIVpwfKWdXA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:46:02 2025 by rpki-client