Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File: a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier: D8kjHvTCNyfntWv4415v0hBntGQWUdR0hobdHMjvCMs=
Subject key identifier: 41:FB:18:5A:E9:12:F7:AE:CC:8F:BA:D3:1F:8A:72:37:26:5E:EF:5D
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 0194BCE09980C55BEB3EF5704281681FA0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number: 02A9
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: RYE7oKnwG08J5e36Fg8USMQ6n/DeKA44Nhm3e/OjNBs=)
2: br9nNW8HTMSPThu0IYs9YJPit9M.roa (hash: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:80:c5:5b:eb:3e:f5:70:42:81:68:1f:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=41fb185ae912f7aecc8fbad31f8a7237265eef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:33:8b:33:e2:04:44:05:a6:0a:fa:ac:2e:
5a:72:59:35:90:7a:8e:a3:c7:f9:5a:dc:d7:c3:4c:
8a:1b:df:de:51:59:8a:fb:1e:54:2b:ef:36:a0:3e:
a2:0c:64:fc:f8:e3:06:fb:7f:a8:c2:a6:1c:b9:a4:
b6:0f:c5:a7:62:73:19:08:7e:05:b3:be:95:b0:4a:
22:0c:b3:45:25:c4:37:cd:2d:ed:57:2a:35:af:2e:
78:45:dd:c0:a7:12:69:61:ba:91:7c:ae:6c:49:7b:
6e:01:2f:03:9c:0d:c3:80:15:14:58:07:22:76:5b:
1a:94:49:c6:12:dc:43:05:c8:8c:69:6d:25:87:7f:
3b:8f:53:80:60:4f:96:fe:e6:10:41:d5:ac:e5:8a:
00:c6:7c:8d:91:7d:dc:f1:00:b0:9a:7d:75:de:67:
62:99:4e:33:a8:b4:c6:08:40:fa:34:a0:0b:6c:e2:
b1:fd:97:63:bd:99:17:e6:11:cd:36:33:1c:e8:da:
a1:b8:f6:e4:4d:51:e3:c6:bb:c1:1b:3d:89:d1:cc:
17:2a:82:50:3b:87:d3:64:61:7d:4f:6e:41:97:a5:
c2:1c:20:ff:36:ec:a8:c1:63:45:8b:10:c6:26:48:
ab:f0:05:40:be:71:a7:e3:f3:42:11:34:f0:b9:0f:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:18:5A:E9:12:F7:AE:CC:8F:BA:D3:1F:8A:72:37:26:5E:EF:5D
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:d3:4d:18:34:07:d3:30:96:02:37:93:f0:40:61:1b:e9:
80:e0:ef:d6:e2:85:81:6a:3c:f7:6d:a4:32:40:20:50:bb:f1:
77:58:b3:fc:da:03:2e:ee:e2:9d:41:cf:76:6a:08:bc:80:7f:
9f:4d:bb:f4:7f:5f:72:9c:39:6d:39:a4:30:11:97:5a:ce:37:
13:c6:7d:c6:5c:00:ef:c9:66:87:a1:05:39:84:84:7f:6b:f0:
30:b8:d5:c0:32:8e:c7:53:b3:c3:8d:9d:8c:ec:22:ef:4c:55:
39:b5:c1:1c:c4:8f:8f:a6:d6:14:2f:2e:97:ef:84:9f:39:9e:
43:62:b5:be:6f:80:cb:0f:8e:9a:d0:b3:e8:07:94:5b:69:ad:
c0:c2:df:43:0e:bf:e9:40:57:20:a6:56:0f:8f:ef:11:01:a5:
cd:1a:86:b6:4b:9d:7f:04:c0:02:4c:d4:8c:e6:4f:e1:da:be:
f2:c6:3e:cf:a1:59:a8:86:34:5e:05:44:c9:c7:71:fe:85:be:
73:1c:4a:3c:58:76:0e:13:c6:bd:9a:7a:a8:28:9e:76:15:fc:
fc:c7:b4:2e:b8:84:c3:4a:c3:91:81:32:52:60:3a:89:d1:57:
66:f9:e6:b6:e6:8d:10:ee:2c:9e:1b:8c:12:a5:f3:d2:2f:0d:
43:c9:4c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JmAxVvrPvVwQoFoH6DQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl
MjJiNmYwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
Eyg0MWZiMTg1YWU5MTJmN2FlY2M4ZmJhZDMxZjhhNzIzNzI2NWVlZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWkzizPiBEQFpgr6rC5aclk1kHqO
o8f5WtzXw0yKG9/eUVmK+x5UK+82oD6iDGT8+OMG+3+owqYcuaS2D8WnYnMZCH4F
s76VsEoiDLNFJcQ3zS3tVyo1ry54Rd3ApxJpYbqRfK5sSXtuAS8DnA3DgBUUWAci
dlsalEnGEtxDBciMaW0lh387j1OAYE+W/uYQQdWs5YoAxnyNkX3c8QCwmn113mdi
mU4zqLTGCED6NKALbOKx/ZdjvZkX5hHNNjMc6NqhuPbkTVHjxrvBGz2J0cwXKoJQ
O4fTZGF9T25Bl6XCHCD/NuyowWNFixDGJkir8AVAvnGn4/NCETTwuQ8hdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH7GFrpEveuzI+60x+KcjcmXu9dMB8GA1UdIwQY
MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt
ZWE1ODdmZDY1OGIyLzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy
LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdfTTRg0
B9MwlgI3k/BAYRvpgODv1uKFgWo8922kMkAgULvxd1iz/NoDLu7inUHPdmoIvIB/
n0279H9fcpw5bTmkMBGXWs43E8Z9xlwA78lmh6EFOYSEf2vwMLjVwDKOx1Ozw42d
jOwi70xVObXBHMSPj6bWFC8ul++EnzmeQ2K1vm+Ayw+OmtCz6AeUW2mtwMLfQw6/
6UBXIKZWD4/vEQGlzRqGtkudfwTAAkzUjOZP4dq+8sY+z6FZqIY0XgVEycdx/oW+
cxxKPFh2DhPGvZp6qCiedhX8/Me0LriEw0rDkYEyUmA6idFXZvnmtuaNEO4snhuM
EqXz0i8NQ8lM2Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:12 2025 by rpki-client