Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: p4NFRrLYM4LzW/CyESNmvpFBrPkZljRNkCmoz7Z6PS4=
Subject key identifier: 35:A7:98:0A:DF:F2:87:9E:B5:CB:15:CD:3F:CF:DF:88:87:5B:8F:83
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 0194BD4E803BDDD75600169998A989E67977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (hash: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=)
2: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: EKlFYhD8eRSPrNSiZRdsukt7+XXOoKeOz1hvTC4Cl6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:3b:dd:d7:56:00:16:99:98:a9:89:e6:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=35a7980adff2879eb5cb15cd3fcfdf88875b8f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:41:87:02:49:52:59:35:03:54:6d:e2:4b:0a:
36:a5:4e:56:23:2a:77:fd:b9:d0:1d:7f:7c:b9:3d:
b4:80:cc:bf:a2:e8:2c:8a:9d:39:35:d7:9b:a4:b3:
0d:41:1c:bc:c2:f5:ea:82:e0:16:c5:93:af:e0:0d:
c6:bb:ee:7a:03:bb:84:a8:96:18:2d:c1:d2:85:5f:
ad:9c:a3:9f:0d:a4:4a:d5:18:b7:b9:b7:96:68:24:
4e:bf:0e:c4:f2:96:b5:95:a8:c2:fc:94:6c:78:78:
8a:3c:8c:82:90:c1:ac:cb:08:d9:b0:7d:a7:05:96:
91:d0:a3:b8:65:d3:28:6c:06:7a:d4:83:e1:d8:66:
5e:dc:7b:52:c2:8b:89:61:40:88:f2:6c:5b:12:79:
6d:59:18:83:e1:3f:91:96:55:37:21:8e:96:dd:47:
5c:10:fd:32:c0:4a:9a:c2:2a:f7:75:5e:e1:13:da:
74:36:65:29:22:3a:5a:47:bc:43:f2:64:09:1b:d8:
df:04:4d:8d:b1:2a:93:43:ea:d1:2c:e1:4a:a2:e3:
a6:66:d4:df:57:0a:ed:ae:98:ea:db:e8:6e:ed:ba:
d2:77:65:ed:0d:9f:d5:58:93:fa:96:0b:cb:2b:a7:
11:78:e9:6d:34:02:b7:8a:df:56:62:76:38:16:be:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A7:98:0A:DF:F2:87:9E:B5:CB:15:CD:3F:CF:DF:88:87:5B:8F:83
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4c:d5:61:ee:c7:e1:9c:85:0b:b6:e1:db:d4:e9:ca:90:9c:
9f:ec:b1:c8:29:43:93:d2:d4:d2:e3:04:e4:e0:6b:81:f8:27:
76:c7:20:5c:7a:f2:d3:d6:84:3e:35:8e:8a:18:2e:50:89:27:
27:fb:d8:be:e5:4b:d9:61:75:6b:5f:db:0e:89:e1:e2:ce:c8:
fd:88:47:54:30:18:3a:6a:78:09:5a:43:c4:00:66:23:8f:bb:
73:97:f2:73:7f:dd:49:49:29:ab:57:c6:7d:85:77:84:2c:43:
b1:7f:31:30:0b:e7:3c:ec:0d:b9:18:f6:12:4a:cc:af:d4:9b:
58:e4:03:55:7b:80:74:23:b3:73:a3:5e:b1:27:7c:7b:60:ec:
ee:a3:5f:46:ad:e4:4f:c9:6f:38:1d:ad:8c:51:82:fd:fc:30:
81:70:78:53:75:4b:d5:e1:33:91:30:4a:88:2d:88:e9:ee:4a:
df:3f:88:e6:ce:a2:ff:7c:21:ab:0f:54:42:ff:69:14:ca:b8:
c3:4d:4e:fb:48:cf:76:41:40:26:fd:07:c1:6a:79:f1:89:bb:
5a:b1:50:70:b8:56:fc:f2:ae:33:4d:48:a1:d9:0e:c1:0f:9f:
c7:69:74:32:a2:fc:33:2e:fd:33:bd:29:ec:63:00:6d:4d:5a:
be:e1:82:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToA73ddWABaZmKmJ5nl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl
OGE5ZmIwHhcNMjUwMTMxMTcwMDI1WhcNMjUwMjAxMTcwMDI1WjAzMTEwLwYDVQQD
EygzNWE3OTgwYWRmZjI4NzllYjVjYjE1Y2QzZmNmZGY4ODg3NWI4ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EGHAklSWTUDVG3iSwo2pU5WIyp3
/bnQHX98uT20gMy/ougsip05NdebpLMNQRy8wvXqguAWxZOv4A3Gu+56A7uEqJYY
LcHShV+tnKOfDaRK1Ri3ubeWaCROvw7E8pa1lajC/JRseHiKPIyCkMGsywjZsH2n
BZaR0KO4ZdMobAZ61IPh2GZe3HtSwouJYUCI8mxbEnltWRiD4T+RllU3IY6W3Udc
EP0ywEqawir3dV7hE9p0NmUpIjpaR7xD8mQJG9jfBE2NsSqTQ+rRLOFKouOmZtTf
Vwrtrpjq2+hu7brSd2XtDZ/VWJP6lgvLK6cReOltNAK3it9WYnY4Fr5kDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWnmArf8oeetcsVzT/P34iHW4+DMB8GA1UdIwQY
MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt
NzlkNDI4ODJjOGMwLzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw
LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0zVYe7H
4ZyFC7bh29TpypCcn+yxyClDk9LU0uME5OBrgfgndscgXHry09aEPjWOihguUIkn
J/vYvuVL2WF1a1/bDonh4s7I/YhHVDAYOmp4CVpDxABmI4+7c5fyc3/dSUkpq1fG
fYV3hCxDsX8xMAvnPOwNuRj2EkrMr9SbWOQDVXuAdCOzc6NesSd8e2Ds7qNfRq3k
T8lvOB2tjFGC/fwwgXB4U3VL1eEzkTBKiC2I6e5K3z+I5s6i/3whqw9UQv9pFMq4
w01O+0jPdkFAJv0HwWp58Ym7WrFQcLhW/PKuM01IodkOwQ+fx2l0MqL8My79M70p
7GMAbU1avuGCMg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:35 2025 by rpki-client