Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File: t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier: PAu0mFHdnk9iWKPh87hlbwdT0GEMAfRRKXV0xJ3Jedo=
Subject key identifier: B2:C1:73:51:C3:EF:C6:61:09:1F:D3:EA:B9:EE:03:F5:D2:95:25:D1
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 0194BC04BCDE2247A33D010143FE092AE73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 0qa8r-MxNMLt6tCXa-K5V6QBkro.roa (hash: oU+YFw1zeHKoa31/el8AmGzlkf3ldrnYHs0Qc542gzw=)
2: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (hash: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=)
3: 8trwTS6zWWIc2CXU2a9uB3EK1CE.roa (hash: cB6Sm/NTvhdg/vAHTGU6288+fVcpUIfblu8fCuXy72c=)
4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: rCOqJfpITFZpsDzyF2HzgN0tZtR+Mge3sl+Z/t4Do7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:de:22:47:a3:3d:01:01:43:fe:09:2a:e7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=b2c17351c3efc661091fd3eab9ee03f5d29525d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:47:fb:5f:d2:d3:67:3b:70:85:5a:97:01:
40:26:bb:a3:84:54:a1:90:d5:02:04:c9:1c:8f:d5:
55:0a:80:85:eb:f2:75:bc:56:61:f7:5f:63:8a:73:
d9:1c:dc:38:a6:0a:d1:5b:4b:ae:06:bb:9f:b9:ea:
ed:85:09:77:d3:50:da:ae:f1:b2:b0:4b:8e:65:e5:
26:a4:08:a9:f9:dc:7d:32:10:88:58:ac:50:09:65:
89:2a:ea:78:5d:ac:47:87:0d:8a:f2:50:9a:b6:9f:
02:b2:e7:76:46:93:4a:60:87:56:ed:94:18:52:3d:
25:c8:ee:b2:f9:7b:2a:ce:4d:8f:24:a2:37:e7:8b:
e8:ef:c7:71:0e:67:0f:97:83:2d:68:04:54:8b:d6:
70:04:58:ce:dd:97:4b:de:57:27:de:05:b8:bc:94:
74:69:91:40:96:9f:2b:c0:8f:90:3b:e6:3b:d2:85:
f3:cc:e0:48:ed:1f:7d:9b:e8:91:86:bf:49:1d:9f:
c3:37:39:7a:21:75:21:7b:63:c7:47:cb:c0:cf:bb:
77:92:37:78:25:49:b3:13:3a:3c:b1:2e:64:ba:31:
c0:bf:0e:0f:71:d2:87:fb:f5:b7:9f:e0:3f:1e:6d:
0b:e2:c2:f5:2e:be:f7:13:63:9b:e8:a8:0a:4a:e4:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:73:51:C3:EF:C6:61:09:1F:D3:EA:B9:EE:03:F5:D2:95:25:D1
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:ec:f9:79:de:5f:8a:54:af:96:b1:17:61:1a:e6:4d:84:
4b:c8:ee:6f:cb:38:7d:49:1d:52:c3:f2:eb:20:84:44:73:63:
e7:64:b2:4a:2d:e5:30:81:c6:3a:c8:7c:47:f5:4e:ee:0a:69:
4b:2b:dd:9a:8d:f8:49:3a:8e:b5:4c:83:8a:d8:92:43:e5:88:
ef:e5:dc:f8:80:1c:f3:cf:ff:a6:9e:6b:31:ad:53:c0:b5:41:
88:cd:b3:54:94:72:3c:31:e9:45:e4:ae:72:f1:3a:47:5c:30:
1c:80:a7:ca:89:79:06:0e:f3:2b:40:a7:f4:ed:a8:f3:1d:28:
41:b4:0f:c0:15:11:9e:ab:34:b9:53:89:66:89:32:da:8e:73:
3f:31:85:23:e2:34:75:74:a9:0d:7f:a2:9f:85:4c:9b:7f:47:
d1:52:42:13:af:c4:d1:18:1d:d2:d1:4f:9c:14:a9:24:57:97:
2c:1a:e4:7d:c6:a8:4a:1f:5c:f2:94:35:24:7b:bc:01:02:0f:
42:42:2d:01:cc:33:38:4c:7c:5c:b5:04:6e:76:d2:56:2f:57:
2c:0b:81:0e:ad:84:58:95:2e:34:e4:1c:a0:bd:5e:2f:5b:9e:
22:f5:ed:21:1b:11:8d:0f:c2:53:fd:a0:22:d3:49:c6:88:ca:
37:11:66:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLzeIkejPQEBQ/4JKuc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EyhiMmMxNzM1MWMzZWZjNjYxMDkxZmQzZWFiOWVlMDNmNWQyOTUyNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIFH+1/S02c7cIValwFAJrujhFSh
kNUCBMkcj9VVCoCF6/J1vFZh919jinPZHNw4pgrRW0uuBrufuerthQl301DarvGy
sEuOZeUmpAip+dx9MhCIWKxQCWWJKup4XaxHhw2K8lCatp8Csud2RpNKYIdW7ZQY
Uj0lyO6y+Xsqzk2PJKI354vo78dxDmcPl4MtaARUi9ZwBFjO3ZdL3lcn3gW4vJR0
aZFAlp8rwI+QO+Y70oXzzOBI7R99m+iRhr9JHZ/DNzl6IXUhe2PHR8vAz7t3kjd4
JUmzEzo8sS5kujHAvw4PcdKH+/W3n+A/Hm0L4sL1Lr73E2Ob6KgKSuQzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLBc1HD78ZhCR/T6rnuA/XSlSXRMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+zs+Xne
X4pUr5axF2Ea5k2ES8jub8s4fUkdUsPy6yCERHNj52SySi3lMIHGOsh8R/VO7gpp
Syvdmo34STqOtUyDitiSQ+WI7+Xc+IAc88//pp5rMa1TwLVBiM2zVJRyPDHpReSu
cvE6R1wwHICnyol5Bg7zK0Cn9O2o8x0oQbQPwBURnqs0uVOJZoky2o5zPzGFI+I0
dXSpDX+in4VMm39H0VJCE6/E0Rgd0tFPnBSpJFeXLBrkfcaoSh9c8pQ1JHu8AQIP
QkItAcwzOEx8XLUEbnbSVi9XLAuBDq2EWJUuNOQcoL1eL1ueIvXtIRsRjQ/CU/2g
ItNJxojKNxFmgg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:38 2025 by rpki-client