Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
File: TDn4uP66ttIJokmB45n9YEMuHMk.mft (raw, json)
Hash identifier: o+fBER91Kvcit+OCdDvAaiCdTh1QnDbRQvzZlwoexwQ=
Subject key identifier: 1B:7C:85:8E:00:23:63:46:6D:88:98:6A:89:70:EF:C3:DC:79:8C:F5
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 0194BC3C6144153019AB8A659923539660C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
Manifest number: 0896
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: BGPcLkk4F9FLxsMbGn-M_F2CXto.roa (hash: PqbiTHE+O2cRLL+2/Q85oltHntGJN/X4GOAuPJ95eug=)
2: TDn4uP66ttIJokmB45n9YEMuHMk.crl (hash: +gK1HJu5IOuOGKhsxiZBtRoALWYNZiN+KwfsgMZ5XYY=)
3: nGObtVTwcFKea1knaujpvqhbims.roa (hash: l9jwJiOaQQcxbUJC1OWeTnOmsW+JZFElguXsrGzJSD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:61:44:15:30:19:ab:8a:65:99:23:53:96:60:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=1b7c858e002363466d88986a8970efc3dc798cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:c4:2e:01:66:c7:76:68:52:31:a1:86:35:
35:2b:be:bb:23:d7:c7:54:71:13:06:59:a4:d6:a8:
78:06:00:08:35:e6:42:d3:21:58:35:96:ca:57:5e:
54:b0:e3:47:65:98:9c:97:05:c5:8f:a9:88:1e:ad:
0d:6c:d4:cb:44:b4:5c:8a:fc:cd:57:f2:57:92:52:
e5:8c:b1:75:4d:0c:ac:d7:95:91:df:2b:41:da:d7:
b9:b8:2b:f2:28:1b:20:97:49:e4:ab:67:6e:5b:82:
1d:1a:f3:a3:93:df:21:0d:d9:51:92:bd:32:f9:e2:
c3:cf:45:5a:d2:6c:16:47:62:cc:d1:d5:13:1d:b4:
4f:19:a3:28:1e:e6:14:e7:c1:02:49:51:6a:99:08:
4a:15:9e:26:33:5d:0f:55:82:6c:1e:1d:5e:0d:46:
03:d4:0e:0c:eb:44:d8:df:d6:68:71:8a:f4:d2:4d:
94:95:cc:3f:0e:10:9d:3e:a8:99:d9:df:70:f0:24:
a6:6c:49:8d:4a:7c:b4:97:a5:c0:a0:11:19:a6:10:
95:d7:54:dc:37:ac:01:fd:89:8f:d0:00:ab:50:86:
93:13:3b:46:c6:4d:7d:a0:12:90:ef:48:ce:b2:34:
fd:db:d2:53:ed:48:db:d9:8b:f2:77:71:72:e7:40:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:85:8E:00:23:63:46:6D:88:98:6A:89:70:EF:C3:DC:79:8C:F5
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:96:1a:cd:76:f1:08:b7:7f:ae:27:61:16:31:4c:04:d1:b3:
e5:84:d6:be:23:9d:b7:38:ff:a8:f5:d1:d5:94:8f:c0:db:b2:
e8:ab:0f:e7:97:13:2b:09:e2:c8:1e:4f:d9:5e:f8:32:5a:c7:
c9:e0:3d:f2:c4:eb:9c:b7:2d:74:38:9b:9a:a0:34:22:90:73:
e4:24:39:b1:33:35:44:0e:da:4c:a5:0b:0e:17:82:3b:b3:fd:
72:28:e8:48:ea:43:52:6d:1f:8a:37:ba:01:aa:b5:f5:57:3b:
7c:fb:0e:71:4b:fa:2c:82:7f:97:74:1a:ba:26:72:3c:4c:ae:
ef:3e:ac:b0:e6:6f:8e:64:04:ef:9e:fc:ee:6c:3c:8f:ce:9b:
00:69:91:09:75:3e:61:8e:bc:d2:2a:66:9d:a6:4d:98:73:4b:
54:73:03:ea:0b:8c:51:cf:3b:55:28:b5:f8:03:8d:4e:e4:45:
f5:f8:6e:5a:1c:50:f5:c5:83:2c:4a:cb:36:89:21:9c:53:2d:
cd:d3:ec:a8:ad:29:70:2a:4d:3e:93:59:5e:d2:24:5f:34:99:
ac:2d:43:cf:ea:3d:e1:4e:19:a7:2e:c2:a3:6c:0c:f9:51:42:
1d:45:bb:0b:f4:86:7a:7a:b2:29:db:fc:32:fb:d2:ac:b8:36:
29:89:bf:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGFEFTAZq4plmSNTlmDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
EygxYjdjODU4ZTAwMjM2MzQ2NmQ4ODk4NmE4OTcwZWZjM2RjNzk4Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JDELgFmx3ZoUjGhhjU1K767I9fH
VHETBlmk1qh4BgAINeZC0yFYNZbKV15UsONHZZiclwXFj6mIHq0NbNTLRLRcivzN
V/JXklLljLF1TQys15WR3ytB2te5uCvyKBsgl0nkq2duW4IdGvOjk98hDdlRkr0y
+eLDz0Va0mwWR2LM0dUTHbRPGaMoHuYU58ECSVFqmQhKFZ4mM10PVYJsHh1eDUYD
1A4M60TY39ZocYr00k2Ulcw/DhCdPqiZ2d9w8CSmbEmNSny0l6XAoBEZphCV11Tc
N6wB/YmP0ACrUIaTEztGxk19oBKQ70jOsjT929JT7Ujb2Yvyd3Fy50ArLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBt8hY4AI2NGbYiYaolw78PceYz1MB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZYazXbx
CLd/ridhFjFMBNGz5YTWviOdtzj/qPXR1ZSPwNuy6KsP55cTKwniyB5P2V74MlrH
yeA98sTrnLctdDibmqA0IpBz5CQ5sTM1RA7aTKULDheCO7P9cijoSOpDUm0fije6
Aaq19Vc7fPsOcUv6LIJ/l3QauiZyPEyu7z6ssOZvjmQE75787mw8j86bAGmRCXU+
YY680ipmnaZNmHNLVHMD6guMUc87VSi1+AONTuRF9fhuWhxQ9cWDLErLNokhnFMt
zdPsqK0pcCpNPpNZXtIkXzSZrC1Dz+o94U4Zpy7Co2wM+VFCHUW7C/SGenqyKdv8
MvvSrLg2KYm/jg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:56 2025 by rpki-client