Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: 4W7V0Mw6RDHjAMAZ7aD0F6KyYS2UeK+ovN/ElWN4MEY=
Subject key identifier: 54:95:34:0B:CB:92:00:40:94:CB:97:CC:87:CF:87:C8:23:DB:F8:1B
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 0194BBCE3786B0580DD257BA6D99241C6108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: 8Sr4Y1RS+3Dy8pkzUEmg8Zh5e/xNFBwCy0G8ja7miho=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:86:b0:58:0d:d2:57:ba:6d:99:24:1c:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=5495340bcb92004094cb97cc87cf87c823dbf81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:69:57:72:7d:81:f5:1a:53:09:06:94:da:
0f:34:ee:7b:c3:02:5a:a6:68:8b:f1:dc:f2:20:da:
84:82:7b:33:22:5d:db:04:3d:a1:53:38:b6:a7:21:
8e:c8:ff:a9:19:9b:8f:6c:1d:d1:90:b6:36:c2:fe:
a0:11:d9:c0:32:44:79:e6:03:e1:e4:fe:fe:9c:1c:
9f:a0:53:c0:92:2e:24:6f:e3:29:24:d8:ea:45:b5:
3b:6f:45:cc:12:36:4f:32:87:69:01:6b:31:5f:a5:
2a:bc:0e:11:d2:f8:7c:d4:c4:5b:fa:c9:c0:2a:8e:
fd:00:e8:54:3a:9e:32:84:90:df:f0:7e:6b:24:85:
22:1d:2e:eb:9c:ad:b1:78:6f:69:41:06:14:00:67:
d4:bf:1e:4c:49:98:bd:e2:37:0b:ed:de:c1:ce:05:
22:ee:45:ef:ea:ed:01:b9:f8:49:dc:b9:73:21:af:
2d:e6:49:df:e7:6e:8b:af:67:cf:8a:ed:c4:4b:aa:
af:0c:16:80:e2:c2:c9:70:61:7b:e7:1e:2e:d0:36:
b1:51:58:61:62:c4:e3:4b:45:b4:8e:6d:e0:04:d4:
7c:e4:47:47:4f:e8:39:bb:27:14:ce:d9:da:cf:13:
52:9b:fe:02:6b:60:15:4f:b6:9b:ee:91:34:5e:08:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:34:0B:CB:92:00:40:94:CB:97:CC:87:CF:87:C8:23:DB:F8:1B
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:91:c3:ae:e5:56:46:ea:b1:fa:40:11:d4:a8:67:78:52:80:
a4:97:5f:29:cb:cf:99:36:f0:9b:5a:cc:1c:e6:d3:a2:89:da:
87:2c:f6:b2:39:6a:2a:58:1c:23:59:12:95:dd:dc:3e:e0:76:
70:38:18:d8:a4:61:a5:80:0d:91:77:17:0f:56:7a:5b:52:2c:
89:31:28:66:9e:aa:ac:b3:15:40:2c:14:1a:e4:f4:79:0d:9b:
0f:77:3d:ef:86:b4:02:71:0a:36:01:a0:9a:ba:b1:4b:8b:65:
ef:1a:67:89:88:80:43:8f:c4:1e:13:1f:21:2a:c7:db:4a:72:
93:eb:70:8e:70:6d:4b:6b:9b:a5:cb:9e:36:63:d6:06:0f:bc:
4f:5b:33:53:43:7e:2e:3b:c9:46:e3:b5:45:5a:84:ea:08:7f:
01:d7:6c:ac:1d:65:3e:b3:e7:cd:ef:77:62:1e:30:40:2d:b4:
27:64:e7:d3:67:9c:f0:02:30:b5:c6:82:e2:14:5f:13:a2:c1:
59:8f:a5:41:35:ff:90:05:a9:5c:f9:a0:bc:92:e6:80:63:05:
a5:f4:4a:bf:0d:01:85:f8:15:41:7e:16:52:c9:4a:ac:11:86:
fc:29:73:26:ab:bf:ea:63:cb:21:79:26:36:0a:8f:1a:3b:85:
24:8d:35:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjeGsFgN0le6bZkkHGEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
Eyg1NDk1MzQwYmNiOTIwMDQwOTRjYjk3Y2M4N2NmODdjODIzZGJmODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17xpV3J9gfUaUwkGlNoPNO57wwJa
pmiL8dzyINqEgnszIl3bBD2hUzi2pyGOyP+pGZuPbB3RkLY2wv6gEdnAMkR55gPh
5P7+nByfoFPAki4kb+MpJNjqRbU7b0XMEjZPModpAWsxX6UqvA4R0vh81MRb+snA
Ko79AOhUOp4yhJDf8H5rJIUiHS7rnK2xeG9pQQYUAGfUvx5MSZi94jcL7d7BzgUi
7kXv6u0BufhJ3LlzIa8t5knf526Lr2fPiu3ES6qvDBaA4sLJcGF75x4u0DaxUVhh
YsTjS0W0jm3gBNR85EdHT+g5uycUztnazxNSm/4Ca2AVT7ab7pE0XghzBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSVNAvLkgBAlMuXzIfPh8gj2/gbMB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpHDruVW
Ruqx+kAR1KhneFKApJdfKcvPmTbwm1rMHObToonahyz2sjlqKlgcI1kSld3cPuB2
cDgY2KRhpYANkXcXD1Z6W1IsiTEoZp6qrLMVQCwUGuT0eQ2bD3c974a0AnEKNgGg
mrqxS4tl7xpniYiAQ4/EHhMfISrH20pyk+twjnBtS2ubpcueNmPWBg+8T1szU0N+
LjvJRuO1RVqE6gh/AddsrB1lPrPnze93Yh4wQC20J2Tn02ec8AIwtcaC4hRfE6LB
WY+lQTX/kAWpXPmgvJLmgGMFpfRKvw0BhfgVQX4WUslKrBGG/ClzJqu/6mPLIXkm
NgqPGjuFJI01dw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:45 2025 by rpki-client