Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
File: tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft (raw, json)
Hash identifier: ESP38j6LV+uqV7Bck3uFQUCy7whlwfheE7AbES2GHAY=
Subject key identifier: 0A:A2:77:CD:68:E9:B5:71:6E:85:02:E4:9D:6E:58:21:3A:1F:3A:D0
Authority key identifier: B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
Certificate issuer: /CN=b64e100c903d85c9661f21b41f641994903a45cc
Certificate serial: 0194BCE0AEE4EA158C76109C47308AA485BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
Manifest number: 8E
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: kAdUvhi0iuHRl8HdWVSAKlJD5u0.roa (hash: 2XhzY5ktX3xFgvAerywPE4VwkhUGoOOVHNmD/7mSh84=)
2: tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl (hash: cbA5eAgJdP6iPsVuj051G/pVZ3td9OCDqOODPw2biPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:e4:ea:15:8c:76:10:9c:47:30:8a:a4:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64e100c903d85c9661f21b41f641994903a45cc
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=0aa277cd68e9b5716e8502e49d6e58213a1f3ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:d1:d8:45:1d:39:c7:5e:1f:d2:32:2a:b7:
09:92:48:9a:9c:82:c6:a0:ad:6d:7f:a6:da:25:a9:
33:54:37:cb:60:14:69:d6:26:40:f8:34:c1:40:b6:
e5:4c:25:25:33:11:e8:33:ee:5d:9c:64:0d:18:2f:
50:d8:8a:c7:bd:c0:a2:75:95:a5:63:50:dd:9a:96:
86:df:b0:c2:1b:af:ea:aa:c4:c1:d6:64:56:3d:59:
0c:3c:fd:29:fb:42:48:33:5d:6d:72:51:c8:bd:a3:
9c:4a:71:c6:df:78:b0:2f:4a:13:10:bf:aa:da:df:
2f:27:fa:b2:de:68:7a:6e:b2:71:08:fb:c3:1b:89:
88:ba:12:45:4a:bf:b4:61:74:44:de:af:86:90:b5:
a6:e1:86:1e:ee:7e:3a:3d:eb:9d:e0:00:11:70:b7:
78:20:95:41:35:51:46:9a:00:e9:2c:a6:be:b6:6e:
f2:b4:a6:86:5b:32:6f:09:ef:f6:72:54:6b:ed:e6:
86:07:53:72:4a:44:fb:ca:ad:85:26:f4:a6:5d:04:
9a:32:a5:53:c0:96:b2:f1:fb:23:cb:50:79:0b:93:
f6:6a:91:4c:f9:96:22:b7:e8:af:d9:26:8e:a5:ec:
3d:4e:22:56:87:44:c7:96:41:85:4e:7f:c0:b9:70:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:77:CD:68:E9:B5:71:6E:85:02:E4:9D:6E:58:21:3A:1F:3A:D0
X509v3 Authority Key Identifier:
keyid:B6:4E:10:0C:90:3D:85:C9:66:1F:21:B4:1F:64:19:94:90:3A:45:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tk4QDJA9hclmHyG0H2QZlJA6Rcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/69eddb-2df1-4990-9c96-d06599ba7e5b/1/tk4QDJA9hclmHyG0H2QZlJA6Rcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8b:0b:50:d8:0d:6d:c0:c1:6a:ba:5b:54:09:a3:cc:c4:62:
a5:0a:0b:d1:4b:b7:15:60:6b:c8:75:ee:e6:43:27:01:e5:73:
34:bb:6a:c5:9d:fd:67:d5:8c:ea:fd:4f:9d:2d:92:9d:f4:94:
b4:e8:a8:56:1e:59:9f:2e:b3:c2:f7:5c:78:cb:67:89:3f:2f:
06:3d:2d:70:ce:a4:33:8b:c7:92:8a:4f:7a:7a:de:34:1f:46:
8f:57:fc:be:5d:7e:26:85:02:61:a3:1c:ca:06:90:f9:29:1a:
ec:b9:e1:8b:47:b3:f0:c6:b2:9c:c6:17:05:0e:45:99:91:b2:
04:9f:b1:6f:e9:fd:45:7a:a1:e0:e8:90:89:92:8c:ff:bb:43:
dc:4d:f8:25:f5:a3:a3:16:fc:8f:d0:4b:b2:c1:b9:ee:8d:85:
42:b6:6d:c6:bf:09:02:80:60:96:10:36:8e:6c:ff:ec:c3:c4:
87:62:3b:ab:26:69:f0:e2:77:c9:33:90:89:ca:84:c2:19:4d:
af:db:20:5e:3b:87:dc:07:26:eb:97:f9:75:4b:96:82:5c:5c:
d0:a1:8b:a5:38:91:41:f1:1e:b1:7b:cf:f8:3c:d1:d8:69:a5:
09:b2:2c:9b:7c:d3:c8:c6:2c:af:29:7f:7a:d8:6c:9f:85:16:
d7:7f:40:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84K7k6hWMdhCcRzCKpIW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NGUxMDBjOTAzZDg1Yzk2NjFmMjFiNDFmNjQxOTk0OTAz
YTQ1Y2MwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
EygwYWEyNzdjZDY4ZTliNTcxNmU4NTAyZTQ5ZDZlNTgyMTNhMWYzYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSzR2EUdOcdeH9IyKrcJkkianILG
oK1tf6baJakzVDfLYBRp1iZA+DTBQLblTCUlMxHoM+5dnGQNGC9Q2IrHvcCidZWl
Y1DdmpaG37DCG6/qqsTB1mRWPVkMPP0p+0JIM11tclHIvaOcSnHG33iwL0oTEL+q
2t8vJ/qy3mh6brJxCPvDG4mIuhJFSr+0YXRE3q+GkLWm4YYe7n46Peud4AARcLd4
IJVBNVFGmgDpLKa+tm7ytKaGWzJvCe/2clRr7eaGB1NySkT7yq2FJvSmXQSaMqVT
wJay8fsjy1B5C5P2apFM+ZYit+iv2SaOpew9TiJWh0THlkGFTn/AuXBNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqid81o6bVxboUC5J1uWCE6HzrQMB8GA1UdIwQY
MBaAFLZOEAyQPYXJZh8htB9kGZSQOkXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGs0UURKQTloY2xtSHlHMEgyUVpsSkE2UmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82OWVkZGItMmRmMS00OTkwLTljOTYt
ZDA2NTk5YmE3ZTViLzEvdGs0UURKQTloY2xtSHlHMEgyUVpsSkE2UmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82OWVkZGItMmRmMS00OTkwLTljOTYtZDA2NTk5YmE3ZTVi
LzEvdGs0UURKQTloY2xtSHlHMEgyUVpsSkE2UmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIsLUNgN
bcDBarpbVAmjzMRipQoL0Uu3FWBryHXu5kMnAeVzNLtqxZ39Z9WM6v1PnS2SnfSU
tOioVh5Zny6zwvdceMtniT8vBj0tcM6kM4vHkopPenreNB9Gj1f8vl1+JoUCYaMc
ygaQ+Ska7Lnhi0ez8MaynMYXBQ5FmZGyBJ+xb+n9RXqh4OiQiZKM/7tD3E34JfWj
oxb8j9BLssG57o2FQrZtxr8JAoBglhA2jmz/7MPEh2I7qyZp8OJ3yTOQicqEwhlN
r9sgXjuH3Acm65f5dUuWglxc0KGLpTiRQfEesXvP+DzR2GmlCbIsm3zTyMYsryl/
ethsn4UW139A9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:21 2025 by rpki-client