Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File: tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier: JI3pa5N4sZ/D8xkx1m+zYVC8dwj81wL8qanl+oykmAE=
Subject key identifier: 30:EF:2E:73:B0:ED:1D:5C:4E:AD:46:9D:C6:AB:13:0B:C9:FA:6C:77
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 0194BD4E6385626BA7A672180FFF032C7E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (hash: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=)
2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: r089Lueg/OaCKre5SqWZbKdTX5aONy2T/aHpabLI98A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:63:85:62:6b:a7:a6:72:18:0f:ff:03:2c:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=30ef2e73b0ed1d5c4ead469dc6ab130bc9fa6c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:dc:d1:8f:87:f2:5c:08:23:2d:da:71:13:
c5:07:83:40:a2:d2:f8:38:88:70:a1:d4:df:16:b5:
50:b6:50:32:36:4f:01:53:0b:0d:2e:96:ab:7a:ed:
0d:54:0d:7a:cc:fd:64:6c:47:59:82:58:79:b2:74:
df:60:fc:9a:3f:07:5d:75:8f:2f:de:ce:64:1f:33:
46:f6:ab:80:2d:d1:bf:4b:78:84:cf:ac:61:66:5a:
53:93:ea:30:d6:c4:26:74:0d:ee:87:2c:10:31:4f:
d8:22:b8:36:05:90:b6:18:c6:68:55:0d:6b:90:80:
81:b1:7e:96:fb:47:a4:33:98:06:34:60:6f:92:af:
1c:ea:1e:d1:73:18:55:aa:29:ea:18:76:b2:ed:3e:
0c:2b:a7:40:7e:4e:ef:2f:03:75:e3:f2:18:d7:22:
73:e8:e7:8d:69:be:64:03:85:9f:ca:b5:4d:48:c4:
6a:e5:e1:9b:dc:7c:d6:e8:8a:88:a0:0d:3b:23:04:
e5:54:a3:c2:05:0b:d3:61:4c:c8:81:17:da:60:f3:
87:44:79:26:01:5f:e9:97:e9:cc:78:e3:f3:8b:0e:
dd:85:06:4a:77:38:36:0a:08:de:b8:60:3d:7f:e3:
96:b2:d0:f5:5f:0d:7e:3d:70:a7:ce:b2:5c:25:11:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:2E:73:B0:ED:1D:5C:4E:AD:46:9D:C6:AB:13:0B:C9:FA:6C:77
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:02:f9:c7:77:ad:1f:d4:03:f9:31:96:a2:16:b6:34:bc:
d3:bc:c7:2f:4a:59:b4:b3:36:ff:2e:26:58:d8:77:4f:86:0a:
ea:fe:92:f0:10:4b:d4:67:21:2e:5b:ed:0d:71:bd:06:d8:fc:
7c:84:c1:6d:e7:e2:ac:44:2d:e4:1c:8f:c1:d6:13:c2:28:b5:
f8:92:a5:47:0d:39:ec:b4:a5:71:0d:bd:15:ee:07:ae:bc:94:
b3:9e:69:36:49:71:24:bb:85:d4:74:37:5b:de:01:f8:1f:a5:
6a:6c:b2:7c:bd:b1:ee:4f:ea:12:61:80:c3:81:1a:f5:08:ac:
19:42:ae:81:f3:88:af:a5:0a:3e:fd:5c:4e:70:0b:41:4f:e4:
ce:13:18:09:be:c5:56:16:10:4b:a9:81:1c:af:c2:ae:3d:d5:
7b:1f:80:df:a0:83:89:d9:c3:a3:2e:4c:52:9f:e3:a1:6d:ef:
8e:38:4e:16:31:e3:23:a1:3b:29:79:6b:f1:36:6d:83:b5:23:
e3:c6:9a:94:0d:b6:3b:e2:d9:f2:be:f5:8f:50:13:06:46:9d:
9f:94:78:a4:20:69:b7:54:4a:4f:8e:5f:9d:08:a9:56:90:d7:
1d:47:b8:e0:ca:55:ca:2c:da:75:83:97:40:05:5f:30:d1:58:
94:2c:e7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmOFYmunpnIYD/8DLH5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTYwMzI2YmU3ZTVjZGMzNWI1YzAzNjQ0MTE2M2NkMjVh
NDk3NGQwHhcNMjUwMTMxMTcwMDE4WhcNMjUwMjAxMTcwMDE4WjAzMTEwLwYDVQQD
EygzMGVmMmU3M2IwZWQxZDVjNGVhZDQ2OWRjNmFiMTMwYmM5ZmE2Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHTc0Y+H8lwIIy3acRPFB4NAotL4
OIhwodTfFrVQtlAyNk8BUwsNLpareu0NVA16zP1kbEdZglh5snTfYPyaPwdddY8v
3s5kHzNG9quALdG/S3iEz6xhZlpTk+ow1sQmdA3uhywQMU/YIrg2BZC2GMZoVQ1r
kICBsX6W+0ekM5gGNGBvkq8c6h7RcxhVqinqGHay7T4MK6dAfk7vLwN14/IY1yJz
6OeNab5kA4WfyrVNSMRq5eGb3HzW6IqIoA07IwTlVKPCBQvTYUzIgRfaYPOHRHkm
AV/pl+nMeOPziw7dhQZKdzg2CgjeuGA9f+OWstD1Xw1+PXCnzrJcJRHiLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDvLnOw7R1cTq1GncarEwvJ+mx3MB8GA1UdIwQY
MBaAFLUWAya+flzcNbXANkQRY80lpJdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0Nzkt
ZjQ4YWEyZTc1NGU1LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZTVhYTItODQwOS00N2EwLWI0NzktZjQ4YWEyZTc1NGU1
LzEvdFJZREpyNS1YTncxdGNBMlJCRmp6U1drbDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcAC+cd3
rR/UA/kxlqIWtjS807zHL0pZtLM2/y4mWNh3T4YK6v6S8BBL1GchLlvtDXG9Btj8
fITBbefirEQt5ByPwdYTwii1+JKlRw057LSlcQ29Fe4HrryUs55pNklxJLuF1HQ3
W94B+B+lamyyfL2x7k/qEmGAw4Ea9QisGUKugfOIr6UKPv1cTnALQU/kzhMYCb7F
VhYQS6mBHK/Crj3Vex+A36CDidnDoy5MUp/joW3vjjhOFjHjI6E7KXlr8TZtg7Uj
48aalA22O+LZ8r71j1ATBkadn5R4pCBpt1RKT45fnQipVpDXHUe44MpVyizadYOX
QAVfMNFYlCznMg==
-----END CERTIFICATE-----
Generated at Thu May 1 07:46:37 2025 by rpki-client