Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: z8SepUVYyLPZBR4LjAg1YpYSCNo0ZxPfeKKT2d/69+g=
Subject key identifier: 0D:6D:2C:2A:DA:2A:3D:78:2C:99:2B:4C:92:BE:CC:AD:B8:89:FB:45
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 0194BC3CA1B69B4ED42B6C417D967CE18BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 4lhTaQhjom1qkpeBd0ZsbdWiEJ4.roa (hash: XdHlLCQ2Kh6iuUQP6DmaSkVFP47PPhEh+iIit9uDq/c=)
2: Loamkgq2liGt_WerD0xhgg9VD4c.roa (hash: HJiMbQmWc3n1Lwl3vm8HBtMiaI2Ev5JS4MMKRu/Y4gU=)
3: kTZKdp3t576jj7V1laKryCYz0Og.roa (hash: HbtSMYd2T/15rtkOhZspTZMKwAPA+sik9h0BqyVd10U=)
4: rZB_JVvkOIqma6Wh66SCnHCJS8Q.roa (hash: UNrRcAyslLxjeDmqjrPzHbwMyZ4AtgV3GxOrJgdzxQg=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: I7lDkzauxFY3ZWs8iukzf9HveW0lp4rkopWtDZSwwSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a1:b6:9b:4e:d4:2b:6c:41:7d:96:7c:e1:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=0d6d2c2ada2a3d782c992b4c92beccadb889fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:89:39:03:b3:c4:f8:ce:bd:9a:a8:2b:eb:
16:ee:f3:51:af:a4:4b:c3:f7:7b:ed:46:cb:c5:cf:
5e:a0:8a:31:f0:08:88:c3:dd:40:ef:9c:3f:64:17:
1d:b6:9f:f9:7f:fb:ed:56:10:88:c7:15:4c:3b:26:
39:d7:e0:fc:bb:be:8c:d6:50:ea:eb:b4:75:42:dc:
8d:4b:15:c7:80:5b:3a:9e:17:17:54:41:0a:10:d0:
45:2c:00:78:ea:fd:66:c0:d3:40:fa:db:28:24:71:
7c:20:83:93:a8:14:85:6f:16:90:d0:84:01:70:74:
b9:27:e1:2a:96:2f:aa:4f:92:54:46:0a:c9:b0:e5:
ae:6b:3a:89:a6:c3:21:bb:20:ce:af:4f:00:5c:2a:
b3:37:99:4d:f4:49:6b:2a:3f:40:d0:83:21:5b:4b:
e5:92:01:f9:b9:03:89:d3:c3:29:8f:25:9a:c9:77:
c9:31:b0:a0:78:f5:75:b7:c1:e4:50:60:8f:6c:a8:
f1:a8:0b:15:35:a3:d0:92:47:54:0e:56:08:86:02:
54:a9:bb:79:50:81:f9:e9:c0:75:30:79:67:2a:12:
2e:d5:9e:27:5e:19:60:d1:01:7b:6e:81:cc:b4:69:
e2:5b:63:51:35:fa:6c:14:f3:bc:cf:44:f5:a9:33:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:2C:2A:DA:2A:3D:78:2C:99:2B:4C:92:BE:CC:AD:B8:89:FB:45
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2a:3f:7a:3c:af:d7:92:67:3e:0f:78:7f:7d:bd:61:c0:e7:
c8:e3:83:41:27:32:0a:ed:30:12:8d:ab:89:47:02:10:9f:df:
6b:e7:56:1c:dd:c1:e4:e5:94:78:be:b6:f8:c9:72:f1:32:7a:
65:48:fd:8a:a9:4e:b4:17:cd:75:d5:ce:83:da:bd:e9:31:46:
f1:be:e9:95:45:7c:a8:35:05:23:06:c6:db:ef:c6:76:7d:aa:
72:27:80:12:00:e8:95:53:a7:6b:2b:92:fc:43:a8:97:17:d6:
c4:e1:ea:88:53:5d:af:0b:e5:39:b4:a9:66:7a:dc:d6:a8:8f:
3c:ef:9b:32:c8:95:8f:50:96:cf:a7:13:ff:7e:48:98:7e:ea:
ad:db:5c:21:20:2b:99:c6:2f:37:1d:12:52:a3:d4:fb:24:1f:
25:b7:68:9c:93:c8:62:d4:4b:92:f0:fc:51:48:37:ac:2a:1c:
d2:47:84:6b:31:24:6e:3e:2a:53:c6:fd:03:e1:61:74:f3:8a:
af:e7:e7:17:e6:64:31:a1:5a:77:f6:33:4c:93:0e:d0:76:86:
e0:e7:75:fe:68:35:55:39:8b:60:79:70:21:8b:37:cf:ea:54:
40:c8:c6:d5:ea:3b:05:ad:a7:55:02:3c:cc:ab:4d:8f:ba:de:
4e:77:8e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKG2m07UK2xBfZZ84YvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjUwMTMxMTIwMTE3WhcNMjUwMjAxMTIwMTE3WjAzMTEwLwYDVQQD
EygwZDZkMmMyYWRhMmEzZDc4MmM5OTJiNGM5MmJlY2NhZGI4ODlmYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA076JOQOzxPjOvZqoK+sW7vNRr6RL
w/d77UbLxc9eoIox8AiIw91A75w/ZBcdtp/5f/vtVhCIxxVMOyY51+D8u76M1lDq
67R1QtyNSxXHgFs6nhcXVEEKENBFLAB46v1mwNNA+tsoJHF8IIOTqBSFbxaQ0IQB
cHS5J+Eqli+qT5JURgrJsOWuazqJpsMhuyDOr08AXCqzN5lN9ElrKj9A0IMhW0vl
kgH5uQOJ08MpjyWayXfJMbCgePV1t8HkUGCPbKjxqAsVNaPQkkdUDlYIhgJUqbt5
UIH56cB1MHlnKhIu1Z4nXhlg0QF7boHMtGniW2NRNfpsFPO8z0T1qTOCxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1tLCraKj14LJkrTJK+zK24iftFMB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCo/ejyv
15JnPg94f329YcDnyOODQScyCu0wEo2riUcCEJ/fa+dWHN3B5OWUeL62+Mly8TJ6
ZUj9iqlOtBfNddXOg9q96TFG8b7plUV8qDUFIwbG2+/Gdn2qcieAEgDolVOnayuS
/EOolxfWxOHqiFNdrwvlObSpZnrc1qiPPO+bMsiVj1CWz6cT/35ImH7qrdtcISAr
mcYvNx0SUqPU+yQfJbdonJPIYtRLkvD8UUg3rCoc0keEazEkbj4qU8b9A+FhdPOK
r+fnF+ZkMaFad/YzTJMO0HaG4Od1/mg1VTmLYHlwIYs3z+pUQMjG1eo7Ba2nVQI8
zKtNj7reTneO1A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:47 2025 by rpki-client