Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File: AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier: UPgT57IClinh0sBTRR+BKscdFwHTV6819kircCRfdpg=
Subject key identifier: 39:76:8E:F0:A3:DA:1F:A4:E7:A3:34:AF:22:81:F7:E1:D4:B7:DB:14
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial: 0194BC727B3E2749C6EF9FC8F715E3567B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: 4r5kkiodC5+Il5gG+/bpoTo592FU7fzWH/fItmgVUpE=)
2: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (hash: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7b:3e:27:49:c6:ef:9f:c8:f7:15:e3:56:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=39768ef0a3da1fa4e7a334af2281f7e1d4b7db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:66:99:bb:1c:e2:b7:76:69:a2:1d:31:d4:
20:89:f7:4d:ff:87:0d:33:30:f9:1b:47:86:8b:b3:
4f:4b:36:c2:18:90:88:97:7d:b0:98:b5:62:14:82:
f4:fd:0e:d9:ba:e3:eb:52:74:11:83:9f:5b:23:22:
f5:9f:ac:fa:fe:d2:46:73:58:7e:ca:50:e0:69:83:
32:7f:07:27:c9:a6:62:d5:26:f8:64:25:e1:b6:49:
0e:d9:58:87:84:72:48:74:a0:90:8c:5b:7f:c6:f1:
3c:51:49:5f:6f:12:ad:8d:51:56:71:02:7d:88:3d:
e2:63:1e:85:5d:cd:4e:ca:e8:ae:f0:a6:d2:87:f6:
76:9d:77:aa:98:7d:44:b9:08:8b:47:81:d6:a2:57:
45:6c:ef:e9:86:cf:31:79:e7:7d:c8:04:d2:f2:82:
51:3e:13:27:88:87:63:ae:33:4b:28:08:5a:6e:e5:
ff:16:c5:f0:91:48:d6:9d:66:bb:2b:4f:c6:d1:5d:
68:9f:42:d4:30:56:0a:18:52:6d:59:e4:6a:4e:da:
69:c5:9f:96:c3:bc:bb:08:6d:89:65:66:68:20:86:
9d:64:e3:4e:29:71:9c:82:e3:67:60:b6:be:92:9b:
ad:1e:69:05:db:89:12:e6:0a:b3:9c:39:ef:38:c4:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:8E:F0:A3:DA:1F:A4:E7:A3:34:AF:22:81:F7:E1:D4:B7:DB:14
X509v3 Authority Key Identifier:
keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:27:0b:38:a1:e4:57:39:e0:d1:b8:6f:4b:58:81:34:d1:55:
ee:7c:06:5e:f4:7e:a9:39:19:57:87:c3:b2:95:00:3b:bc:bc:
0c:71:d3:62:2c:0b:fd:b8:be:c2:88:20:85:9f:45:e7:d6:54:
9d:aa:0f:6e:2d:0b:27:da:12:39:bd:36:56:31:09:a9:0e:3b:
77:b1:72:d1:a3:eb:0f:58:f7:e5:93:d0:bd:e9:f8:e2:ec:67:
41:8d:af:47:c5:b4:7e:05:c0:0e:7b:f9:d3:2c:9e:40:4c:93:
46:55:ae:1e:f1:aa:f2:54:6c:b8:aa:3b:3e:be:2a:1f:5d:9a:
b2:2a:7e:e3:4d:6f:f6:95:87:2c:ae:c9:fa:ba:e7:c4:ed:b4:
fb:71:6e:ef:48:05:eb:e0:62:81:d4:b4:96:b8:e1:e0:41:ef:
60:8f:41:5e:6b:2a:c5:17:02:e9:6d:f2:3c:aa:64:f1:46:ff:
2e:d5:10:f2:5b:32:5c:12:cc:e7:bd:d9:c5:1f:b6:a6:2e:c9:
7c:9a:a3:9e:5b:c8:2e:22:0c:c6:ed:e0:a7:49:ba:0d:b0:98:
d0:13:57:01:db:f7:27:18:90:e9:a3:ce:56:35:4d:51:25:ad:
c4:89:fc:fd:05:3b:77:0f:aa:d7:86:88:47:4c:2c:7a:68:f2:
4b:b0:2e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cns+J0nG75/I9xXjVntrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzRkMDg2Nzk2ZDRkNzc5YWQxNjRjMjRjMjIzZjI2YjMy
ODRlZDQwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
EygzOTc2OGVmMGEzZGExZmE0ZTdhMzM0YWYyMjgxZjdlMWQ0YjdkYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobpmmbsc4rd2aaIdMdQgifdN/4cN
MzD5G0eGi7NPSzbCGJCIl32wmLViFIL0/Q7ZuuPrUnQRg59bIyL1n6z6/tJGc1h+
ylDgaYMyfwcnyaZi1Sb4ZCXhtkkO2ViHhHJIdKCQjFt/xvE8UUlfbxKtjVFWcQJ9
iD3iYx6FXc1Oyuiu8KbSh/Z2nXeqmH1EuQiLR4HWoldFbO/phs8xeed9yATS8oJR
PhMniIdjrjNLKAhabuX/FsXwkUjWnWa7K0/G0V1on0LUMFYKGFJtWeRqTtppxZ+W
w7y7CG2JZWZoIIadZONOKXGcguNnYLa+kputHmkF24kS5gqznDnvOMS0hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDl2jvCj2h+k56M0ryKB9+HUt9sUMB8GA1UdIwQY
MBaAFAJ00IZ5bU13mtFkwkwiPyazKE7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEt
Yjk1NTIwYzg3MmM1LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEtYjk1NTIwYzg3MmM1
LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtycLOKHk
Vzng0bhvS1iBNNFV7nwGXvR+qTkZV4fDspUAO7y8DHHTYiwL/bi+wogghZ9F59ZU
naoPbi0LJ9oSOb02VjEJqQ47d7Fy0aPrD1j35ZPQven44uxnQY2vR8W0fgXADnv5
0yyeQEyTRlWuHvGq8lRsuKo7Pr4qH12asip+401v9pWHLK7J+rrnxO20+3Fu70gF
6+BigdS0lrjh4EHvYI9BXmsqxRcC6W3yPKpk8Ub/LtUQ8lsyXBLM573ZxR+2pi7J
fJqjnlvILiIMxu3gp0m6DbCY0BNXAdv3JxiQ6aPOVjVNUSWtxIn8/QU7dw+q14aI
R0wsemjyS7AuvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:48 2025 by rpki-client