Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
File: TVg7b1bPCSco3lk62VKuoZzjGIY.mft (raw, json)
Hash identifier: gu5BkdHM91MsDfbFxBKcyAyU4ERjsbx0YRgKowRnMNQ=
Subject key identifier: C1:5D:AB:2D:84:51:56:D9:0F:38:E6:CE:D4:24:1E:0E:0C:B6:23:E9
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 0194BC731A510BA25ED94A31D4AFE178C73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: TVg7b1bPCSco3lk62VKuoZzjGIY.crl (hash: Thm9A36+YEL8+68mgeugXceepBesW+GMmYTwOXqWayA=)
2: rAEXG8LVncu-VzH6pWQ3O-v7vJk.roa (hash: pHtLRGskuQm7vCqkOegxgViLMoHSueDTg44n3jic3FY=)
3: s8YTzQCjPllmRUuDRE4IISZsF0g.roa (hash: J89y02Ib27gaY3fS/eJXUK03X90Fo4Z1uGocN19BCUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1a:51:0b:a2:5e:d9:4a:31:d4:af:e1:78:c7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=c15dab2d845156d90f38e6ced4241e0e0cb623e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:c6:f3:67:e3:bf:92:c7:fe:94:66:ba:76:
d7:a8:84:aa:43:0c:29:ec:2f:08:98:e2:d7:02:ac:
75:f6:e2:00:ff:a4:34:8a:0e:00:65:1b:b6:8f:72:
47:da:c3:12:a2:82:35:5f:b8:e0:0f:2d:fe:cb:00:
91:02:f7:56:da:3b:2a:c5:5e:e5:66:64:51:98:9c:
4a:53:96:2f:6b:22:45:d5:7b:45:97:fc:4b:2a:e4:
e7:9f:78:b2:ab:7d:3c:5b:c2:06:55:67:6a:76:eb:
68:51:c0:8a:ac:a4:77:e3:b5:02:c8:0f:d1:32:ce:
df:a9:74:45:1b:ce:2f:4e:bc:5b:a7:20:89:f6:70:
92:33:33:51:ed:bf:6b:1d:d8:a8:72:41:0b:85:1f:
44:21:2f:2a:7b:94:34:06:c1:2c:f7:64:4d:10:31:
b2:6e:01:5c:e0:4e:74:f2:e2:d5:d1:c2:0a:72:66:
a7:a9:ee:e6:00:d4:1a:3c:6f:a3:37:4f:ac:f5:be:
5e:90:fb:82:22:5b:37:09:eb:43:cf:78:04:71:55:
28:f5:34:4d:7f:33:09:a6:63:e0:01:23:a9:64:7d:
c5:f0:b8:5a:7d:ad:95:a2:84:c2:7c:07:b1:af:98:
70:85:c2:10:cf:53:89:fa:7b:0e:86:fa:70:f5:f1:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:AB:2D:84:51:56:D9:0F:38:E6:CE:D4:24:1E:0E:0C:B6:23:E9
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:ee:e3:f3:ce:46:89:8f:9b:60:63:1d:39:e7:51:d8:d7:
1b:66:30:ad:53:e1:f8:df:33:dd:7b:eb:9b:8c:19:93:0d:e3:
38:53:26:ba:83:42:6c:95:1a:1c:6c:9f:b3:41:9d:a1:78:81:
73:87:6a:db:b1:a4:39:e1:e7:92:a9:b0:f5:ba:b1:56:4d:fe:
3b:4b:0e:cf:22:1b:7d:c5:d0:6a:b7:a3:65:d3:c1:f5:b6:44:
32:5f:f0:3e:14:cc:55:cf:36:65:47:4f:bb:90:5b:54:80:4b:
4a:63:18:5f:84:ac:c3:57:52:73:aa:9a:cf:c7:c8:97:d2:c8:
4f:4c:61:ee:95:be:22:13:86:df:5b:47:ab:6a:ff:4d:e7:6e:
24:21:bf:10:4d:02:79:88:23:f5:d1:5f:88:15:77:79:82:ea:
d4:cc:5e:34:43:a5:da:2e:21:9b:c8:ab:f5:ba:e7:6e:d8:b0:
88:6f:1f:03:12:88:0e:dd:bc:53:4f:a4:26:03:47:bc:6c:c7:
f4:a7:ed:73:a8:c6:6a:31:7e:3d:23:7b:a3:0e:e4:58:30:37:
4d:d8:cf:bc:96:4a:85:d7:9a:53:41:0c:2e:c7:d9:f9:a7:30:
4c:23:9a:3a:d8:48:7c:16:1e:fa:21:af:5a:00:89:65:19:d8:
ab:c0:ac:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxpRC6Je2Uox1K/heMc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNTgzYjZmNTZjZjA5MjcyOGRlNTkzYWQ5NTJhZWExOWNl
MzE4ODYwHhcNMjUwMTMxMTMwMDQ3WhcNMjUwMjAxMTMwMDQ3WjAzMTEwLwYDVQQD
EyhjMTVkYWIyZDg0NTE1NmQ5MGYzOGU2Y2VkNDI0MWUwZTBjYjYyM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+rG82fjv5LH/pRmunbXqISqQwwp
7C8ImOLXAqx19uIA/6Q0ig4AZRu2j3JH2sMSooI1X7jgDy3+ywCRAvdW2jsqxV7l
ZmRRmJxKU5YvayJF1XtFl/xLKuTnn3iyq308W8IGVWdqdutoUcCKrKR347UCyA/R
Ms7fqXRFG84vTrxbpyCJ9nCSMzNR7b9rHdiockELhR9EIS8qe5Q0BsEs92RNEDGy
bgFc4E508uLV0cIKcmanqe7mANQaPG+jN0+s9b5ekPuCIls3CetDz3gEcVUo9TRN
fzMJpmPgASOpZH3F8Lhafa2VooTCfAexr5hwhcIQz1OJ+nsOhvpw9fHISwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFdqy2EUVbZDzjmztQkHg4MtiPpMB8GA1UdIwQY
MBaAFE1YO29WzwknKN5ZOtlSrqGc4xiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQt
MGI0ZjcxN2FhMzYzLzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83MzU4YmQtYzcyZi00ZDliLWJiMGQtMGI0ZjcxN2FhMzYz
LzEvVFZnN2IxYlBDU2NvM2xrNjJWS3VvWnpqR0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay7u4/PO
RomPm2BjHTnnUdjXG2YwrVPh+N8z3Xvrm4wZkw3jOFMmuoNCbJUaHGyfs0GdoXiB
c4dq27GkOeHnkqmw9bqxVk3+O0sOzyIbfcXQarejZdPB9bZEMl/wPhTMVc82ZUdP
u5BbVIBLSmMYX4Ssw1dSc6qaz8fIl9LIT0xh7pW+IhOG31tHq2r/TeduJCG/EE0C
eYgj9dFfiBV3eYLq1MxeNEOl2i4hm8ir9brnbtiwiG8fAxKIDt28U0+kJgNHvGzH
9Kftc6jGajF+PSN7ow7kWDA3TdjPvJZKhdeaU0EMLsfZ+acwTCOaOthIfBYe+iGv
WgCJZRnYq8Cs2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:09 2025 by rpki-client