Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
File: T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft (raw, json)
Hash identifier: aBCP5VkVGiesbdr0+wldU7+qocKbL/lqo3/MbnMMZsc=
Subject key identifier: F8:B8:0D:ED:AC:58:09:02:72:E3:3D:84:33:E7:4F:CC:F3:D4:D9:6A
Authority key identifier: 4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
Certificate issuer: /CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Certificate serial: 0194BD176AB7762A5B4B19CB6E95DED86F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
Manifest number: 0574
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: O4ZnlVhhx3zd5V2McWkK5lXbTfU.roa (hash: 1/S6pfTZfcr0nY65o+eT5Gg2Gukw2uRx/s1OdeKWKmE=)
2: T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl (hash: c6u2pL9iLoCPEEK/c0lYYUkQW+cUDyYaDmdKs081Pjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:b7:76:2a:5b:4b:19:cb:6e:95:de:d8:6f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f50a0dcc71c42923e407011bd212afa5c62e59d
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=f8b80dedac58090272e33d8433e74fccf3d4d96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:2d:94:bc:5f:c9:a4:40:12:0e:48:df:b2:
f3:a6:0b:64:f1:f5:51:1e:4a:71:27:e0:36:08:c7:
69:44:78:6b:82:35:13:65:30:47:76:ae:9f:48:3f:
36:21:49:07:4f:13:cc:07:4c:b6:ae:6b:06:77:90:
f0:66:c0:9b:a3:bb:b9:77:83:4d:a5:98:6d:76:de:
e0:34:50:de:10:b4:98:f5:88:7b:75:ba:c0:32:fe:
c4:47:e1:c3:0b:ef:e1:bb:c1:78:09:61:3d:05:5b:
a6:d2:df:19:8c:26:39:a4:06:6e:3b:02:70:42:2e:
57:9e:72:15:aa:3f:20:98:6c:44:47:0f:12:6b:56:
21:ad:f1:f3:84:b6:98:3c:95:af:2e:dd:79:73:9d:
6c:e6:58:33:73:00:03:3f:81:9e:29:87:b9:1a:34:
eb:02:fb:b3:23:46:37:c1:28:b7:3d:8e:43:1f:4c:
2a:e0:2d:52:8d:a0:6e:59:f5:4e:3d:a1:7d:df:57:
f4:b7:b2:72:01:71:4f:dd:41:4b:ca:c0:0d:f0:c5:
30:52:3f:50:50:54:93:ee:20:ee:55:dc:a6:36:6d:
08:0d:ce:b0:2f:9f:db:15:d7:d5:c1:d7:89:4f:49:
06:11:d1:56:ce:ee:ae:26:a2:17:68:9a:68:23:13:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:0D:ED:AC:58:09:02:72:E3:3D:84:33:E7:4F:CC:F3:D4:D9:6A
X509v3 Authority Key Identifier:
keyid:4F:50:A0:DC:C7:1C:42:92:3E:40:70:11:BD:21:2A:FA:5C:62:E5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1Cg3MccQpI-QHARvSEq-lxi5Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/30a2bf-b51e-4d72-b409-ca8b2758be15/1/T1Cg3MccQpI-QHARvSEq-lxi5Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:4c:c1:7f:b4:c0:48:10:6c:c9:f6:f0:5e:b1:c6:38:a3:
3c:29:14:4e:24:36:e2:e2:d2:50:69:53:86:4f:91:68:26:7e:
e3:82:d2:eb:d0:42:b4:83:4c:9f:f3:cf:14:b2:62:59:bc:bf:
1d:0e:23:07:b3:cf:05:a8:01:dc:bb:11:21:5b:1a:75:0c:ba:
61:18:f6:4a:7b:44:53:aa:f5:3e:d4:13:be:59:e6:0f:f1:50:
4b:7f:54:1e:4a:26:57:3e:0d:49:ef:dd:e6:28:12:6b:de:0c:
62:01:6b:bc:98:bf:93:f6:d2:4d:95:bb:30:44:84:ff:34:a3:
a2:e1:2d:b5:5b:80:66:eb:f1:7d:3e:4b:8f:90:79:bd:97:a8:
5e:55:e9:fd:ba:16:a0:64:e1:fc:89:32:5a:2e:31:ca:1c:4b:
2c:8e:dd:86:66:c1:24:bf:06:f7:69:c7:0d:f2:b3:12:70:39:
ad:51:fa:0a:10:d0:93:74:73:18:5e:0d:84:4f:0e:f9:e5:62:
08:62:7f:4a:ac:da:8d:57:7c:63:52:77:fb:04:79:4a:5b:cd:
83:0c:55:81:e1:f8:47:d0:79:46:de:84:70:02:00:e9:f5:33:
d8:02:b9:80:c8:81:3f:c7:ae:25:90:95:54:72:8e:7a:17:c9:
62:df:8c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2q3dipbSxnLbpXe2G87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTBhMGRjYzcxYzQyOTIzZTQwNzAxMWJkMjEyYWZhNWM2
MmU1OWQwHhcNMjUwMTMxMTYwMDE1WhcNMjUwMjAxMTYwMDE1WjAzMTEwLwYDVQQD
EyhmOGI4MGRlZGFjNTgwOTAyNzJlMzNkODQzM2U3NGZjY2YzZDRkOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnngtlLxfyaRAEg5I37Lzpgtk8fVR
HkpxJ+A2CMdpRHhrgjUTZTBHdq6fSD82IUkHTxPMB0y2rmsGd5DwZsCbo7u5d4NN
pZhtdt7gNFDeELSY9Yh7dbrAMv7ER+HDC+/hu8F4CWE9BVum0t8ZjCY5pAZuOwJw
Qi5XnnIVqj8gmGxERw8Sa1YhrfHzhLaYPJWvLt15c51s5lgzcwADP4GeKYe5GjTr
AvuzI0Y3wSi3PY5DH0wq4C1SjaBuWfVOPaF931f0t7JyAXFP3UFLysAN8MUwUj9Q
UFST7iDuVdymNm0IDc6wL5/bFdfVwdeJT0kGEdFWzu6uJqIXaJpoIxMFiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi4De2sWAkCcuM9hDPnT8zz1NlqMB8GA1UdIwQY
MBaAFE9QoNzHHEKSPkBwEb0hKvpcYuWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDkt
Y2E4YjI3NThiZTE1LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zMGEyYmYtYjUxZS00ZDcyLWI0MDktY2E4YjI3NThiZTE1
LzEvVDFDZzNNY2NRcEktUUhBUnZTRXEtbHhpNVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATANMwX+0
wEgQbMn28F6xxjijPCkUTiQ24uLSUGlThk+RaCZ+44LS69BCtINMn/PPFLJiWby/
HQ4jB7PPBagB3LsRIVsadQy6YRj2SntEU6r1PtQTvlnmD/FQS39UHkomVz4NSe/d
5igSa94MYgFrvJi/k/bSTZW7MESE/zSjouEttVuAZuvxfT5Lj5B5vZeoXlXp/boW
oGTh/IkyWi4xyhxLLI7dhmbBJL8G92nHDfKzEnA5rVH6ChDQk3RzGF4NhE8O+eVi
CGJ/SqzajVd8Y1J3+wR5SlvNgwxVgeH4R9B5Rt6EcAIA6fUz2AK5gMiBP8euJZCV
VHKOehfJYt+M7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:12 2025 by rpki-client