Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
File: T0d31JE06rdaecERgyrX7OcmcUU.mft (raw, json)
Hash identifier: oITtTohr7poNUkPR1LVkwmueRDBXw14A3X5fvH6Of30=
Subject key identifier: 96:3B:D3:1A:50:92:17:C3:2F:D6:B8:B1:E1:0B:BD:C4:D2:63:EA:17
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0194BD85861D0FB8FBC192DD440A3C5FB4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
Manifest number: 0395
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa (hash: m9j0WMeURx0X/gO3nVCQhucXNdsmWk+LDFj4hOxWEBE=)
2: T0d31JE06rdaecERgyrX7OcmcUU.crl (hash: G3o/UpSodVjA1Sa6U0xH0QFTh1aSRq93D1UJxRjcc2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:1d:0f:b8:fb:c1:92:dd:44:0a:3c:5f:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=963bd31a509217c32fd6b8b1e10bbdc4d263ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:77:32:3d:df:47:a1:2a:eb:45:f6:c5:3a:
bc:71:62:d3:a3:7b:05:0f:ec:5a:c2:5e:83:a2:16:
b3:60:fd:ed:91:d0:18:9a:98:01:12:d4:b6:30:7b:
cf:4c:62:e1:4d:5e:51:b2:dd:ae:5b:1a:24:db:67:
dd:77:df:51:bb:37:ac:f3:1f:6a:92:21:5c:b6:8c:
67:2f:7e:58:5d:48:b9:fe:8c:16:32:9a:ce:00:32:
54:a9:f9:2e:b4:c8:11:8c:c8:1e:48:53:f0:ee:34:
48:9c:a9:94:a2:cc:4f:10:f5:d3:3d:be:89:3f:b5:
99:56:72:94:a9:2e:ea:26:24:33:0e:fc:a0:50:75:
1e:ea:d9:fa:05:0e:ca:b1:2c:fb:81:d5:2b:0b:0c:
76:a6:9c:07:18:42:41:63:a6:cd:ed:a1:6a:ce:f2:
60:0a:aa:1e:dd:3f:a4:a4:a1:21:2e:2a:24:d0:3e:
1e:32:86:a5:b2:38:af:14:d4:3f:3e:c3:14:8d:c6:
22:7d:ec:ce:d6:16:bc:a2:e4:e6:0b:67:0c:19:7c:
33:ca:38:f8:f9:6d:a3:38:66:d6:5c:42:50:f9:33:
bb:66:40:79:a2:08:92:a3:d6:a0:81:21:cf:31:b6:
c8:48:b6:9d:11:03:a5:e5:cd:29:05:99:13:06:ff:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:D3:1A:50:92:17:C3:2F:D6:B8:B1:E1:0B:BD:C4:D2:63:EA:17
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ce:ab:17:18:e8:78:4e:fb:87:48:7b:c4:53:f2:0f:41:c1:
83:59:48:a6:56:91:1d:44:5d:ad:b1:0d:db:9b:e8:71:03:40:
d9:9d:0d:a0:d0:5a:19:d1:74:cb:7a:cf:03:f6:c3:61:2b:45:
b1:33:b2:2f:d1:27:a2:91:05:cf:26:cc:dd:5b:af:e2:60:5e:
44:48:c5:19:3b:bc:2f:90:71:f8:c7:62:33:ed:25:25:9b:4f:
cb:6e:cf:70:23:e2:f5:e9:81:18:39:e3:12:4a:c3:bf:06:65:
af:87:af:2e:2c:db:89:d1:9f:87:ba:3c:2b:38:61:8f:9c:cc:
bb:0d:19:9e:0e:50:f8:fb:60:d2:c7:a7:97:8d:17:c5:c0:a3:
f9:e0:1c:69:5b:ab:22:f1:75:6d:bb:22:0f:44:6b:52:7d:03:
7c:b3:c9:5f:c9:b5:3e:c9:58:63:6e:ee:bd:6a:c5:03:c2:65:
6f:29:18:92:ed:a9:e1:78:29:5d:d0:77:fe:a2:f9:a8:7c:7d:
0f:c5:36:35:04:62:a2:a1:b2:1d:33:01:2b:e6:69:7e:58:e8:
99:90:0f:2f:a7:df:1d:c2:b9:71:54:75:99:75:8f:4e:2c:82:
42:2a:07:65:40:64:c6:fc:14:f5:e0:4a:bc:c5:e8:b3:66:02:
ab:90:2b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYYdD7j7wZLdRAo8X7TtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy
NjcxNDUwHhcNMjUwMTMxMTgwMDMxWhcNMjUwMjAxMTgwMDMxWjAzMTEwLwYDVQQD
Eyg5NjNiZDMxYTUwOTIxN2MzMmZkNmI4YjFlMTBiYmRjNGQyNjNlYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrB3Mj3fR6Eq60X2xTq8cWLTo3sF
D+xawl6DohazYP3tkdAYmpgBEtS2MHvPTGLhTV5Rst2uWxok22fdd99Ruzes8x9q
kiFctoxnL35YXUi5/owWMprOADJUqfkutMgRjMgeSFPw7jRInKmUosxPEPXTPb6J
P7WZVnKUqS7qJiQzDvygUHUe6tn6BQ7KsSz7gdUrCwx2ppwHGEJBY6bN7aFqzvJg
Cqoe3T+kpKEhLiok0D4eMoalsjivFNQ/PsMUjcYifezO1ha8ouTmC2cMGXwzyjj4
+W2jOGbWXEJQ+TO7ZkB5ogiSo9aggSHPMbbISLadEQOl5c0pBZkTBv/4HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY70xpQkhfDL9a4seELvcTSY+oXMB8GA1UdIwQY
MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt
OGVjMWJmOWZkYTJiLzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi
LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAec6rFxjo
eE77h0h7xFPyD0HBg1lIplaRHURdrbEN25vocQNA2Z0NoNBaGdF0y3rPA/bDYStF
sTOyL9EnopEFzybM3Vuv4mBeREjFGTu8L5Bx+MdiM+0lJZtPy27PcCPi9emBGDnj
EkrDvwZlr4evLizbidGfh7o8Kzhhj5zMuw0Zng5Q+Ptg0senl40XxcCj+eAcaVur
IvF1bbsiD0RrUn0DfLPJX8m1PslYY27uvWrFA8JlbykYku2p4XgpXdB3/qL5qHx9
D8U2NQRioqGyHTMBK+ZpfljomZAPL6ffHcK5cVR1mXWPTiyCQioHZUBkxvwU9eBK
vMXos2YCq5ArUw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:32 2025 by rpki-client