Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: EtdHrEuHKUPxCA9AZAbKYw+gDYHCzwdkQAhL+JB/D+U=
Subject key identifier: 85:56:D3:B3:39:69:1B:53:8F:25:83:D3:25:1F:67:D8:06:81:54:BA
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 0194BD17B9B81856F34FB28E85296E426657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=)
2: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: pdUnNdcTWlOfygnqiVgAjeDfy7TfQaTglN9VY5Nm91c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:b8:18:56:f3:4f:b2:8e:85:29:6e:42:66:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=8556d3b339691b538f2583d3251f67d8068154ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:76:38:02:7b:ce:e3:5d:54:34:49:8d:36:
21:e8:51:1a:38:98:0b:e2:cc:20:7d:1d:60:80:cb:
8c:24:ea:cc:c8:4c:2c:cb:98:f5:bf:4e:f7:f2:81:
d7:62:13:9c:d6:2d:23:d2:ff:5d:2b:0f:a5:1c:c6:
c1:29:86:91:91:f2:81:d4:d2:c0:bc:15:61:4a:b0:
08:7c:db:89:33:97:53:e3:1e:69:4c:fc:d6:41:28:
ae:bc:47:ef:8f:71:33:e5:7c:bc:25:6a:18:ea:9d:
d9:c8:af:3d:b0:48:b6:fb:04:ff:a5:6b:f9:a3:f8:
e3:ac:e8:8d:42:64:d3:66:23:f4:16:11:8b:a4:9b:
99:62:0f:73:8b:a2:50:b8:32:e8:4b:95:2d:ad:95:
7b:be:ed:78:4c:2f:ce:27:43:f9:ce:c2:95:95:33:
b2:2c:3d:1d:de:75:65:4d:ff:20:f9:c7:00:04:16:
5e:53:c1:ca:61:4b:f9:11:1a:1d:39:a7:19:31:e4:
29:f0:9f:9f:18:1a:ec:8e:cc:6b:ff:75:f1:23:a7:
be:ba:35:00:f8:09:02:6f:51:b0:2e:f6:90:b8:18:
e1:dc:ca:48:c6:53:da:c3:8b:3d:fe:4d:87:19:b3:
2f:2a:92:cb:a7:67:73:87:7b:76:7e:1d:2b:59:32:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:D3:B3:39:69:1B:53:8F:25:83:D3:25:1F:67:D8:06:81:54:BA
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:86:b1:df:37:b3:46:5e:3c:09:2a:ac:16:27:13:81:db:f1:
84:a1:d6:10:92:f3:e9:48:87:97:77:7f:14:d0:a1:df:5e:4b:
04:13:8d:04:4e:cb:c7:79:22:20:cb:86:95:05:56:12:bf:f6:
a4:ff:f9:94:69:ea:e2:a6:df:31:59:b6:0a:96:16:4e:3c:55:
88:85:2b:51:11:ee:9b:1a:74:b4:41:b6:5b:2f:59:5f:8b:90:
01:d7:ec:87:a3:75:3a:45:87:43:96:17:1e:ca:2a:21:54:9f:
94:9d:5c:98:4e:cd:04:ce:f0:51:52:3a:80:1c:18:2c:15:3f:
b7:39:49:cb:01:61:11:ec:d5:c7:51:18:80:09:34:8a:e1:36:
f2:c7:75:6e:f0:2d:af:91:a1:50:5d:96:3f:f2:03:2f:2f:ff:
e7:ff:80:78:45:96:93:d1:02:98:9b:70:62:98:79:7d:26:2e:
11:f6:54:f4:5f:82:6e:0e:83:e7:58:82:d5:df:1e:ae:a4:fc:
39:59:a2:92:8a:ee:11:eb:dc:0f:76:88:fd:9c:62:50:37:6f:
70:2b:27:d4:8b:96:8a:99:fb:6f:92:6f:61:0f:3b:22:88:61:
5b:56:da:0f:17:f8:c6:42:eb:62:07:80:c1:a3:33:f0:85:82:
c9:6b:a3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7m4GFbzT7KOhSluQmZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh
MGRmODQwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
Eyg4NTU2ZDNiMzM5NjkxYjUzOGYyNTgzZDMyNTFmNjdkODA2ODE1NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/R2OAJ7zuNdVDRJjTYh6FEaOJgL
4swgfR1ggMuMJOrMyEwsy5j1v0738oHXYhOc1i0j0v9dKw+lHMbBKYaRkfKB1NLA
vBVhSrAIfNuJM5dT4x5pTPzWQSiuvEfvj3Ez5Xy8JWoY6p3ZyK89sEi2+wT/pWv5
o/jjrOiNQmTTZiP0FhGLpJuZYg9zi6JQuDLoS5UtrZV7vu14TC/OJ0P5zsKVlTOy
LD0d3nVlTf8g+ccABBZeU8HKYUv5ERodOacZMeQp8J+fGBrsjsxr/3XxI6e+ujUA
+AkCb1GwLvaQuBjh3MpIxlPaw4s9/k2HGbMvKpLLp2dzh3t2fh0rWTKvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVW07M5aRtTjyWD0yUfZ9gGgVS6MB8GA1UdIwQY
MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct
NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux
LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIax3zez
Rl48CSqsFicTgdvxhKHWEJLz6UiHl3d/FNCh315LBBONBE7Lx3kiIMuGlQVWEr/2
pP/5lGnq4qbfMVm2CpYWTjxViIUrURHumxp0tEG2Wy9ZX4uQAdfsh6N1OkWHQ5YX
HsoqIVSflJ1cmE7NBM7wUVI6gBwYLBU/tzlJywFhEezVx1EYgAk0iuE28sd1bvAt
r5GhUF2WP/IDLy//5/+AeEWWk9ECmJtwYph5fSYuEfZU9F+Cbg6D51iC1d8erqT8
OVmikoruEevcD3aI/ZxiUDdvcCsn1IuWipn7b5JvYQ87IohhW1baDxf4xkLrYgeA
waMz8IWCyWujcg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:26 2025 by rpki-client