Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: ZZgERPLoKWmKyl8ARsj4SOLZx4M6r6nbfq7aHIg2Ly0=
Subject key identifier: 09:2D:73:4D:E1:95:A7:DD:DA:D4:53:2E:68:8E:7F:A4:3C:1D:DE:D1
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 0194BD85A9E8042EF77440516E53F7D9B3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: hrqEKTykKr09BUd_K3mCMU0oC6Q.roa (hash: pufSFJ+QVHIcFkxQwEPRtygVlxFuvFk+kfnkYeAvjWg=)
2: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: 3rUiTC4EeM+PeA4s4ssW7DMMdG8S/wEWb0xFgfpGrW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:e8:04:2e:f7:74:40:51:6e:53:f7:d9:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=092d734de195a7dddad4532e688e7fa43c1dded1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:2f:55:5e:50:a1:82:85:6c:46:76:96:47:
4e:bd:ce:ee:d5:0a:be:53:a8:94:23:5d:72:9d:ef:
30:2a:83:79:de:2a:84:5d:5a:a4:12:06:2f:78:5b:
b6:c4:23:f3:c1:17:9a:bc:02:f1:dd:b5:81:a1:11:
1c:0c:68:5d:90:fe:38:99:33:e1:b6:74:e5:2a:a6:
50:12:7e:00:86:ab:19:19:b6:91:53:43:43:ea:5b:
ac:89:61:17:f0:a2:a2:5c:75:f8:27:b3:fe:d9:ed:
07:85:04:5a:81:29:66:e5:22:3c:cf:c4:20:43:b8:
b1:a2:80:51:53:5d:67:85:b1:11:6b:9a:28:bc:14:
36:72:bc:d8:f6:b2:a5:8d:30:cd:c3:0f:27:7c:8f:
69:0b:ab:33:22:b5:d6:9a:cf:a2:a2:ab:d0:52:de:
59:cb:27:b2:f2:14:f5:45:a7:4e:aa:2c:09:eb:98:
5b:21:10:58:0f:4f:cc:6b:29:b3:c2:fc:c5:67:88:
04:25:ae:f5:12:9a:a9:9f:9a:17:82:aa:1f:89:47:
a2:83:c8:af:a5:c2:41:34:0e:b9:b9:b7:3d:98:ab:
e1:29:a0:1e:55:5c:1b:dc:f9:9f:21:10:a1:02:12:
80:49:e4:b6:5d:33:76:1c:26:8d:bf:17:b0:03:ab:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2D:73:4D:E1:95:A7:DD:DA:D4:53:2E:68:8E:7F:A4:3C:1D:DE:D1
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:79:36:f8:ba:ed:bc:e4:4a:fc:6a:e9:20:90:8e:15:a3:48:
d9:96:18:d5:4d:38:58:ab:34:47:bb:bf:ad:da:5b:e8:41:15:
47:8a:84:fa:6f:58:29:e1:fc:bd:7e:ce:2d:aa:58:03:ef:35:
b5:7a:10:10:ca:5c:5a:c7:00:3f:72:3a:8b:fd:6c:7e:96:8d:
17:46:eb:0e:21:8b:94:65:94:60:de:b5:4f:29:48:56:f0:72:
9b:f1:7d:95:6c:dc:f6:68:bc:d2:01:58:d9:2e:aa:3a:2c:8d:
d0:c6:b8:ea:9f:dc:c8:57:49:d1:99:60:e2:b2:5e:f2:4b:c4:
f5:2f:c8:57:2a:03:35:46:ba:1d:40:38:56:3d:73:35:e9:ba:
8d:57:f4:63:3b:ef:ad:35:81:49:01:c2:3c:aa:c9:79:4d:93:
70:b1:0d:18:11:63:2a:a6:b0:d4:13:a5:7d:60:a4:5e:76:15:
ce:62:1a:5c:7b:09:3d:d3:af:68:80:5f:fe:19:fa:77:b7:af:
47:a4:3f:87:d3:31:5f:7c:0e:fc:8c:4d:39:63:6c:4b:9d:85:
ea:c4:99:22:94:06:db:fa:ff:46:ec:e5:b2:d1:e2:b7:f1:9f:
08:dc:e9:1e:84:03:d2:86:85:74:1e:a8:ef:93:95:fb:62:77:
c9:0c:53:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hanoBC73dEBRblP32bP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2
MDI0NDgwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygwOTJkNzM0ZGUxOTVhN2RkZGFkNDUzMmU2ODhlN2ZhNDNjMWRkZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriwvVV5QoYKFbEZ2lkdOvc7u1Qq+
U6iUI11yne8wKoN53iqEXVqkEgYveFu2xCPzwReavALx3bWBoREcDGhdkP44mTPh
tnTlKqZQEn4AhqsZGbaRU0ND6lusiWEX8KKiXHX4J7P+2e0HhQRagSlm5SI8z8Qg
Q7ixooBRU11nhbERa5oovBQ2crzY9rKljTDNww8nfI9pC6szIrXWms+ioqvQUt5Z
yyey8hT1RadOqiwJ65hbIRBYD0/MaymzwvzFZ4gEJa71Epqpn5oXgqofiUeig8iv
pcJBNA65ubc9mKvhKaAeVVwb3PmfIRChAhKASeS2XTN2HCaNvxewA6vdkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAktc03hlafd2tRTLmiOf6Q8Hd7RMB8GA1UdIwQY
MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt
NTU3YTRjMzFlMDJlLzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl
LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXk2+Lrt
vORK/GrpIJCOFaNI2ZYY1U04WKs0R7u/rdpb6EEVR4qE+m9YKeH8vX7OLapYA+81
tXoQEMpcWscAP3I6i/1sfpaNF0brDiGLlGWUYN61TylIVvBym/F9lWzc9mi80gFY
2S6qOiyN0Ma46p/cyFdJ0Zlg4rJe8kvE9S/IVyoDNUa6HUA4Vj1zNem6jVf0Yzvv
rTWBSQHCPKrJeU2TcLENGBFjKqaw1BOlfWCkXnYVzmIaXHsJPdOvaIBf/hn6d7ev
R6Q/h9MxX3wO/IxNOWNsS52F6sSZIpQG2/r/RuzlstHit/GfCNzpHoQD0oaFdB6o
75OV+2J3yQxTdg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:42 2025 by rpki-client