Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
File: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft (raw, json)
Hash identifier: pMu5Lu6RuPdOTTImN7eb62yRnZ+SbJkoMzGfmom+v6E=
Subject key identifier: D5:75:10:6E:E7:64:F9:9A:6C:44:37:E3:AE:40:94:F1:22:DB:9A:69
Authority key identifier: 4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
Certificate issuer: /CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Certificate serial: 0194BCAA3CC96DAC4B4980311E9F2C628732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl (hash: Oz4GfAgjkZgG843P3kLCXANe8Bz4AGZg0bCw6upmkqA=)
2: ilNe5KDmG0o6LZVjHMLtOGd-0DQ.roa (hash: JkEgQ36ayeHC4m0mo3MRV7E4gABrbKLeaaxVJdDM2eE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:c9:6d:ac:4b:49:80:31:1e:9f:2c:62:87:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca509b35011ed71663952ba0e0c3c38457f9d07
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=d575106ee764f99a6c4437e3ae4094f122db9a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:f5:9d:8e:9b:2b:42:9c:26:08:f0:c5:3f:
3f:f6:c6:b6:d5:ae:94:ab:cf:9b:32:62:16:a4:ea:
6d:06:61:e5:9f:e9:62:e5:be:12:60:70:54:8f:55:
85:7d:da:f7:89:e9:1c:45:44:01:e7:29:5c:b8:6a:
0a:ee:61:05:25:01:54:0c:c0:50:3c:39:fb:7a:9f:
c0:a5:20:b9:2e:c0:8e:c3:52:bf:d6:dc:c1:d6:07:
52:cd:63:6a:4d:29:3a:28:63:b7:c1:23:d1:bc:5b:
dd:97:30:f1:ec:53:19:df:08:47:ed:67:fe:6b:c8:
1a:58:5d:10:3c:a7:54:71:ae:ae:91:41:4a:2c:c1:
68:a1:5f:ac:ef:fd:02:aa:7c:4d:e9:ab:59:e0:f3:
36:08:fc:5c:1f:7d:87:4e:f7:93:a4:1c:04:65:9d:
7d:61:98:4c:c8:27:ef:a3:94:ef:f3:4f:7a:e5:3a:
4d:63:64:39:37:6b:28:8e:90:2e:78:ad:e3:63:9c:
2b:96:d3:89:2c:c0:9e:c2:f1:32:8b:65:0b:b1:df:
b7:93:bb:7a:c4:72:76:36:1b:65:f7:4d:64:19:35:
18:25:69:6e:72:80:17:74:95:b2:69:00:08:04:c8:
b0:cc:66:ad:f0:af:cf:c3:fa:26:02:be:81:ff:22:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:10:6E:E7:64:F9:9A:6C:44:37:E3:AE:40:94:F1:22:DB:9A:69
X509v3 Authority Key Identifier:
keyid:4C:A5:09:B3:50:11:ED:71:66:39:52:BA:0E:0C:3C:38:45:7F:9D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/TKUJs1AR7XFmOVK6Dgw8OEV_nQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:4d:6f:a7:cb:1a:8e:e4:b6:0f:8c:c9:64:dc:50:ee:13:
48:01:51:9b:13:03:b4:b4:51:ee:ed:17:0a:79:65:0e:bc:c4:
2c:d3:fc:69:ef:24:bb:64:d8:b1:ca:71:c0:f1:e5:41:dd:38:
1c:5d:12:a0:94:f6:d4:c5:ab:30:f3:83:a6:33:0c:3d:57:b6:
62:49:25:5e:b7:68:67:0d:b1:13:f1:7f:b6:08:72:2d:b1:b2:
36:31:1e:5e:c0:09:ac:cc:55:33:7d:00:6c:46:e5:93:8f:d0:
f3:db:5d:40:43:6b:3b:50:9a:65:60:b3:c6:6a:4d:06:7f:d7:
a1:5a:ff:22:0a:ad:1a:cb:89:2c:5c:28:22:0c:6d:c5:16:52:
a7:60:c7:ed:02:b8:9a:1e:88:0f:21:03:54:8e:cb:9c:8f:1b:
06:92:a3:bb:8c:24:cc:87:86:a9:87:14:01:c7:68:4d:14:b6:
53:a0:f3:aa:33:9a:b5:96:96:2a:9a:ce:4e:75:01:60:78:d2:
d6:25:19:7d:d8:00:96:e6:d4:4d:54:38:b4:34:eb:b5:9e:9a:
d5:e3:85:67:8f:30:ab:8f:ee:8b:c2:c3:0b:fd:05:34:c5:9f:
25:11:3d:62:a3:de:15:c5:dd:6b:fd:f7:28:7b:31:56:ef:5e:
8a:ee:af:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjzJbaxLSYAxHp8sYocyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTUwOWIzNTAxMWVkNzE2NjM5NTJiYTBlMGMzYzM4NDU3
ZjlkMDcwHhcNMjUwMTMxMTQwMTAwWhcNMjUwMjAxMTQwMTAwWjAzMTEwLwYDVQQD
EyhkNTc1MTA2ZWU3NjRmOTlhNmM0NDM3ZTNhZTQwOTRmMTIyZGI5YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh31nY6bK0KcJgjwxT8/9sa21a6U
q8+bMmIWpOptBmHln+li5b4SYHBUj1WFfdr3iekcRUQB5ylcuGoK7mEFJQFUDMBQ
PDn7ep/ApSC5LsCOw1K/1tzB1gdSzWNqTSk6KGO3wSPRvFvdlzDx7FMZ3whH7Wf+
a8gaWF0QPKdUca6ukUFKLMFooV+s7/0CqnxN6atZ4PM2CPxcH32HTveTpBwEZZ19
YZhMyCfvo5Tv80965TpNY2Q5N2sojpAueK3jY5wrltOJLMCewvEyi2ULsd+3k7t6
xHJ2Nhtl901kGTUYJWlucoAXdJWyaQAIBMiwzGat8K/Pw/omAr6B/yKe/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV1EG7nZPmabEQ3465AlPEi25ppMB8GA1UdIwQY
MBaAFEylCbNQEe1xZjlSug4MPDhFf50HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODIt
MGIwYzEyYjIyYmY5LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wYTEzMWUtMzdjNi00NWNiLTk2ODItMGIwYzEyYjIyYmY5
LzEvVEtVSnMxQVI3WEZtT1ZLNkRndzhPRVZfblFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1VNb6fL
Go7ktg+MyWTcUO4TSAFRmxMDtLRR7u0XCnllDrzELNP8ae8ku2TYscpxwPHlQd04
HF0SoJT21MWrMPODpjMMPVe2YkklXrdoZw2xE/F/tghyLbGyNjEeXsAJrMxVM30A
bEblk4/Q89tdQENrO1CaZWCzxmpNBn/XoVr/IgqtGsuJLFwoIgxtxRZSp2DH7QK4
mh6IDyEDVI7LnI8bBpKju4wkzIeGqYcUAcdoTRS2U6DzqjOatZaWKprOTnUBYHjS
1iUZfdgAlubUTVQ4tDTrtZ6a1eOFZ48wq4/ui8LDC/0FNMWfJRE9YqPeFcXda/33
KHsxVu9eiu6vjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:22 2025 by rpki-client