Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/TQiJTKQFMefSApQJEojnetEsKXk.mft
File: TQiJTKQFMefSApQJEojnetEsKXk.mft (raw, json)
Hash identifier: VEgDPYR6/Lc2j+wF98PJnuwbp9NsA928DCaUmHDd9eg=
Subject key identifier: 6F:30:BF:44:6A:76:F5:AE:87:23:CA:F6:4E:11:78:2E:9E:A1:91:B5
Authority key identifier: 4D:08:89:4C:A4:05:31:E7:D2:02:94:09:12:88:E7:7A:D1:2C:29:79
Certificate issuer: /CN=4d08894ca40531e7d20294091288e77ad12c2979
Certificate serial: 0194BC3C5B13EF04282DD7BDDD11EC1E9CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQiJTKQFMefSApQJEojnetEsKXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/TQiJTKQFMefSApQJEojnetEsKXk.mft
Manifest number: 04F1
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 9vSYuCdAG_e0E6RGGzb6agTE0BM.roa (hash: QacZLKOpB/Eo9Q8tjYWI0KN++SKGpTz/tW+UR9tDqD0=)
2: TQiJTKQFMefSApQJEojnetEsKXk.crl (hash: SrZMvBmv2C4ayvHN+MVZxRTpwNfi/rKcpiYWLXmsDcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:13:ef:04:28:2d:d7:bd:dd:11:ec:1e:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d08894ca40531e7d20294091288e77ad12c2979
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=6f30bf446a76f5ae8723caf64e11782e9ea191b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:98:13:88:38:fd:e1:77:6b:80:75:bb:ae:
9b:6e:b0:e3:06:10:21:19:e4:a6:8c:bb:fb:b0:c2:
83:51:d0:ed:af:c4:1e:62:ba:8e:be:17:26:23:8d:
bc:4a:65:73:16:21:ff:84:12:78:58:c0:e7:1c:18:
f1:ba:e2:46:46:85:ce:a7:a7:21:74:2d:6f:ee:08:
38:c3:33:ee:51:49:5a:b7:65:c4:4d:a8:6e:5d:9b:
87:3f:31:dd:46:45:29:ed:46:e4:6b:a4:a7:71:07:
c3:b4:54:e8:38:5c:b0:bb:2b:e1:8d:85:2a:33:1f:
35:fb:ff:c6:fb:27:8a:27:86:6c:03:14:a6:de:31:
10:8b:87:03:3d:e8:3b:d4:fb:6d:ef:4c:07:7d:59:
62:17:f5:56:b4:29:88:f1:35:a4:d0:ae:b8:d3:d5:
33:0c:52:fd:a0:0e:1c:83:e6:f3:74:db:86:aa:41:
bd:c7:64:d8:3f:be:bc:ee:08:8f:36:f5:5e:e7:c8:
45:bb:d9:cd:50:b1:8b:bb:8f:b2:32:d8:a7:94:16:
a2:af:3f:8b:26:3a:fb:10:79:2a:3c:f7:fd:43:b9:
db:6b:85:ae:d3:be:0f:04:70:7e:bd:41:91:c0:39:
50:d0:ab:c7:da:2f:44:31:d1:09:50:9e:7e:19:07:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:BF:44:6A:76:F5:AE:87:23:CA:F6:4E:11:78:2E:9E:A1:91:B5
X509v3 Authority Key Identifier:
keyid:4D:08:89:4C:A4:05:31:E7:D2:02:94:09:12:88:E7:7A:D1:2C:29:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQiJTKQFMefSApQJEojnetEsKXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/TQiJTKQFMefSApQJEojnetEsKXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/TQiJTKQFMefSApQJEojnetEsKXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f7:29:41:f0:e6:82:92:ae:e1:16:ca:6f:e9:12:b4:d2:9f:
94:3f:65:f0:05:33:22:8c:f3:f0:e4:04:73:79:46:40:96:24:
2f:aa:dc:5d:50:ab:eb:18:76:5a:87:75:7d:46:2f:8c:dd:49:
cf:ad:c9:fd:39:5c:7f:67:f8:0e:20:dd:13:ae:88:42:69:56:
3f:db:df:a5:1c:e3:ad:50:d1:45:f0:d9:af:cf:a7:f0:e4:e6:
74:c2:ca:67:02:1c:0a:72:13:d9:5e:b9:8f:fc:08:81:22:af:
4f:7b:c2:48:ef:21:a2:d0:f6:0c:e5:72:9d:ea:bd:33:89:ef:
3a:22:cf:d8:fe:a3:4a:c5:16:0d:90:ed:85:a6:a3:24:85:0f:
23:a8:20:b6:08:ae:aa:71:cd:d8:72:85:c0:c1:53:c1:b9:48:
4e:4a:42:70:5a:69:c8:a2:b4:b6:1e:55:c6:97:77:1c:2a:1e:
32:d7:d7:0e:85:fe:3a:7f:f5:4f:b1:3b:3f:0c:59:51:8f:79:
62:cd:5c:80:63:87:53:10:dd:f8:de:2d:45:b0:c5:15:48:63:
27:55:bf:aa:e3:0d:70:be:e9:dc:b5:f0:90:7e:69:17:36:cc:
65:74:1f:81:e3:66:62:06:c1:6a:ce:aa:f0:f7:05:d8:ad:53:
79:a6:23:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFsT7wQoLde93RHsHpywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMDg4OTRjYTQwNTMxZTdkMjAyOTQwOTEyODhlNzdhZDEy
YzI5NzkwHhcNMjUwMTMxMTIwMDU5WhcNMjUwMjAxMTIwMDU5WjAzMTEwLwYDVQQD
Eyg2ZjMwYmY0NDZhNzZmNWFlODcyM2NhZjY0ZTExNzgyZTllYTE5MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAeYE4g4/eF3a4B1u66bbrDjBhAh
GeSmjLv7sMKDUdDtr8QeYrqOvhcmI428SmVzFiH/hBJ4WMDnHBjxuuJGRoXOp6ch
dC1v7gg4wzPuUUlat2XETahuXZuHPzHdRkUp7Ubka6SncQfDtFToOFywuyvhjYUq
Mx81+//G+yeKJ4ZsAxSm3jEQi4cDPeg71Ptt70wHfVliF/VWtCmI8TWk0K6409Uz
DFL9oA4cg+bzdNuGqkG9x2TYP7687giPNvVe58hFu9nNULGLu4+yMtinlBairz+L
Jjr7EHkqPPf9Q7nba4Wu074PBHB+vUGRwDlQ0KvH2i9EMdEJUJ5+GQdguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8wv0RqdvWuhyPK9k4ReC6eoZG1MB8GA1UdIwQY
MBaAFE0IiUykBTHn0gKUCRKI53rRLCl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFFpSlRLUUZNZWZTQXBRSkVvam5ldEVzS1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85YTA4YjAtY2ZlYy00YzkxLWI4ZWIt
NGFiYWRiNWFlYTlhLzEvVFFpSlRLUUZNZWZTQXBRSkVvam5ldEVzS1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85YTA4YjAtY2ZlYy00YzkxLWI4ZWItNGFiYWRiNWFlYTlh
LzEvVFFpSlRLUUZNZWZTQXBRSkVvam5ldEVzS1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPcpQfDm
gpKu4RbKb+kStNKflD9l8AUzIozz8OQEc3lGQJYkL6rcXVCr6xh2Wod1fUYvjN1J
z63J/Tlcf2f4DiDdE66IQmlWP9vfpRzjrVDRRfDZr8+n8OTmdMLKZwIcCnIT2V65
j/wIgSKvT3vCSO8hotD2DOVyneq9M4nvOiLP2P6jSsUWDZDthaajJIUPI6ggtgiu
qnHN2HKFwMFTwblITkpCcFppyKK0th5Vxpd3HCoeMtfXDoX+On/1T7E7PwxZUY95
Ys1cgGOHUxDd+N4tRbDFFUhjJ1W/quMNcL7p3LXwkH5pFzbMZXQfgeNmYgbBas6q
8PcF2K1TeaYj0g==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:59 2025 by rpki-client