Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier: FNAWQig6SnqefxeoxCNcn8ufBtAAytwZMmBucQFmbTk=
Subject key identifier: A3:50:6E:C0:1C:F7:8B:8B:D4:6E:72:31:AA:54:93:3B:A3:66:9C:49
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer: /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial: 0194BD4E8BDAA09D8E21EF45585D06A687AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number: 1117
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: 9ykTfaxNeEIbk7wOARPuxoyYN9I.roa (hash: t511WQ9hIp1WWZqq1Z1Tp5plKXaqmdK3FlJidSm8B5Q=)
2: TVu5aQ7CXqbPlsSn9wNLY8tYilE.roa (hash: B5zfotvyVUd7f8T5ZgXVly2iMRkx4aTHfTXgfsPh/CI=)
3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: 4HVHn+jxcEojX1JDHIXLYvRkO03/Ck1A0ofXvcW7fyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:da:a0:9d:8e:21:ef:45:58:5d:06:a6:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=a3506ec01cf78b8bd46e7231aa54933ba3669c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:2c:42:ff:2d:c7:e5:00:e2:f7:a8:68:10:
a7:66:38:da:04:ee:7e:48:55:a4:7f:e4:58:f6:4a:
72:de:77:0d:4f:1f:e2:72:77:67:de:f1:4f:39:6c:
61:41:6a:59:2f:21:19:76:42:3b:2e:cf:73:2f:23:
bc:11:39:1e:05:4f:e1:59:d3:f4:49:10:3e:28:32:
89:49:76:89:7f:01:34:80:a2:27:bc:ef:f6:bd:c8:
c4:a7:31:66:e2:50:6b:5c:ec:d1:39:92:fb:85:3e:
31:14:95:b0:7c:ca:49:45:e0:80:d0:4f:23:34:87:
32:97:4e:0e:19:2e:15:b5:25:a9:7a:b2:e6:2f:c0:
99:5c:f7:5c:4b:9d:6b:34:4a:d1:00:44:b0:01:ce:
8a:3b:99:36:be:36:36:07:0b:f9:e2:81:f8:9f:d4:
4b:a9:dd:70:36:64:90:a7:a7:f2:a1:dd:58:e9:f1:
8c:33:99:90:9c:83:76:e5:bd:d7:bb:74:ad:a6:87:
1d:70:6e:cc:83:b0:1f:d7:e6:c4:a5:16:7c:39:86:
8f:64:58:df:45:3d:b5:e5:31:ef:2c:d7:c2:cf:f6:
99:7e:c0:1b:64:37:51:e9:08:14:2d:ed:36:05:e1:
44:ad:f3:d5:6b:0e:24:f6:8f:e1:10:d7:a4:b9:ed:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:50:6E:C0:1C:F7:8B:8B:D4:6E:72:31:AA:54:93:3B:A3:66:9C:49
X509v3 Authority Key Identifier:
keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3c:75:8e:cc:46:bb:64:f8:ee:70:04:82:c2:84:34:f8:86:
ce:5c:09:21:f2:90:5d:50:95:c1:03:20:99:80:b5:2d:eb:14:
f1:82:81:c6:72:b6:68:ab:33:f9:4c:aa:96:07:2c:be:0a:82:
aa:d9:ef:d6:93:4a:14:9e:9b:84:3c:39:3d:13:8c:3e:11:55:
55:ea:27:6a:52:83:1f:1e:15:9f:64:37:13:df:e1:36:d3:dc:
68:11:a9:81:26:41:af:78:de:b6:8e:59:0e:0b:47:5f:70:48:
7e:34:ff:d4:e1:bb:fd:f0:bf:32:56:74:24:2b:ae:be:80:6b:
aa:4f:23:9a:1c:07:82:f3:f7:8d:c5:49:f8:5a:0e:e8:ba:66:
ba:81:55:fb:ef:98:36:d5:d4:d2:84:af:d9:67:5a:76:d9:0d:
62:62:3d:23:0b:04:84:fa:90:37:ac:e9:d9:27:8c:da:93:51:
a8:9a:47:64:3f:ec:ba:f1:92:70:99:71:03:1b:35:07:3f:2d:
e9:14:0e:c4:4c:51:b1:82:06:08:ff:d9:e3:ff:41:75:c9:26:
cc:28:08:2d:f7:e6:ce:e4:a6:e1:34:c8:ad:e6:8f:ee:92:26:
5d:93:04:d9:2d:55:f0:f6:a3:e1:e7:b1:09:55:0d:ab:77:2c:
90:32:52:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TovaoJ2OIe9FWF0GpoerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzIxZWViZjRmOTViZTlmODFmMGYyMzNmODlmMzYwMmQy
ZjAwNzQwHhcNMjUwMTMxMTcwMDI4WhcNMjUwMjAxMTcwMDI4WjAzMTEwLwYDVQQD
EyhhMzUwNmVjMDFjZjc4YjhiZDQ2ZTcyMzFhYTU0OTMzYmEzNjY5YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx0sQv8tx+UA4veoaBCnZjjaBO5+
SFWkf+RY9kpy3ncNTx/icndn3vFPOWxhQWpZLyEZdkI7Ls9zLyO8ETkeBU/hWdP0
SRA+KDKJSXaJfwE0gKInvO/2vcjEpzFm4lBrXOzROZL7hT4xFJWwfMpJReCA0E8j
NIcyl04OGS4VtSWperLmL8CZXPdcS51rNErRAESwAc6KO5k2vjY2Bwv54oH4n9RL
qd1wNmSQp6fyod1Y6fGMM5mQnIN25b3Xu3StpocdcG7Mg7Af1+bEpRZ8OYaPZFjf
RT215THvLNfCz/aZfsAbZDdR6QgULe02BeFErfPVaw4k9o/hENekue032wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNQbsAc94uL1G5yMapUkzujZpxJMB8GA1UdIwQY
MBaAFLYyHuv0+Vvp+B8PIz+J82AtLwB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAt
MDFiYWY3OGVjNzNmLzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81YzkyZDEtNDFlNS00NDNlLWEyNTAtMDFiYWY3OGVjNzNm
LzEvdGpJZTZfVDVXLW40SHc4alA0bnpZQzB2QUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTx1jsxG
u2T47nAEgsKENPiGzlwJIfKQXVCVwQMgmYC1LesU8YKBxnK2aKsz+UyqlgcsvgqC
qtnv1pNKFJ6bhDw5PROMPhFVVeonalKDHx4Vn2Q3E9/hNtPcaBGpgSZBr3jeto5Z
DgtHX3BIfjT/1OG7/fC/MlZ0JCuuvoBrqk8jmhwHgvP3jcVJ+FoO6LpmuoFV+++Y
NtXU0oSv2WdadtkNYmI9IwsEhPqQN6zp2SeM2pNRqJpHZD/suvGScJlxAxs1Bz8t
6RQOxExRsYIGCP/Z4/9BdckmzCgILffmzuSm4TTIreaP7pImXZME2S1V8Paj4eex
CVUNq3cskDJS2A==
-----END CERTIFICATE-----
Generated at Thu May 1 13:44:05 2025 by rpki-client