Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File: TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier: YtdcgLRRKFZEVH0mGQY8KlCjxTUvmoX1vxPLiFIzcoY=
Subject key identifier: 7F:F4:86:30:13:9F:03:E0:44:65:44:18:4F:4A:CD:B0:E0:B7:9E:28
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer: /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial: 0194BBCE1E0861FFFA1EF1BA8666638771F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number: 03E9
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: aA43QWwRYxdfD9oMxeDD95+MhvZsaW2eCyQP7w2uSl0=)
3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1e:08:61:ff:fa:1e:f1:ba:86:66:63:87:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=7ff48630139f03e0446544184f4acdb0e0b79e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:a3:dc:28:82:02:4c:c6:b7:35:eb:77:93:
33:7a:86:0b:26:4b:d7:51:ed:36:36:4a:75:22:08:
a7:47:db:aa:03:d6:fd:98:b7:f3:b8:0d:1d:2e:11:
9e:46:32:f8:83:db:e7:9d:9b:94:1b:0d:7e:8f:af:
1b:8a:6d:d6:3e:b2:4f:f9:e4:f8:0f:81:d2:0e:08:
69:80:6e:ae:6d:03:fc:e5:da:71:12:a7:87:c5:85:
a2:0b:f8:8b:e3:54:8a:fb:49:9d:f7:a4:5e:6f:04:
b5:a8:4c:ee:8f:de:d1:f5:35:fc:47:0a:12:5e:3b:
a5:30:84:60:a1:7f:ed:a5:47:0d:c9:8f:75:52:b1:
7c:18:fc:98:c4:40:29:51:94:f3:8f:58:9e:57:b1:
35:c4:ba:7c:f4:04:3e:84:a8:85:ac:20:a9:1a:bc:
47:6c:8e:2e:39:0b:c1:dd:7e:df:a5:7a:1d:0e:38:
5f:52:3b:b9:2f:75:d8:d4:52:79:18:81:65:7c:74:
f9:9a:a6:d1:80:d5:cc:d7:17:d2:5a:99:44:72:cb:
e3:68:29:4b:d3:40:62:e0:87:f5:e2:6d:7a:e7:ed:
52:0a:f8:ca:e3:d3:e5:5c:01:1e:da:cc:ae:4c:24:
2b:77:13:fd:3a:a3:21:b9:2d:01:75:ba:07:70:45:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:86:30:13:9F:03:E0:44:65:44:18:4F:4A:CD:B0:E0:B7:9E:28
X509v3 Authority Key Identifier:
keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a9:e6:ea:44:e2:49:0e:98:b5:a8:c3:19:e9:81:b8:78:e7:
45:7e:30:8b:d5:99:81:a1:7f:e6:1b:df:e0:a1:e0:5b:77:df:
65:4c:ae:bc:0d:73:ae:fc:bf:53:24:5c:a1:65:78:69:b4:72:
1a:26:1e:d9:8f:22:4e:a9:f6:18:91:7a:39:6d:48:37:0a:c8:
6a:9c:03:e1:fc:b8:df:cd:98:37:cc:d4:2f:73:9a:f5:31:4c:
95:fd:c8:b9:ee:6d:be:47:52:13:fd:33:07:d0:db:c9:55:1e:
54:ba:7b:31:74:c5:1b:df:ce:55:f4:84:84:7d:b5:6f:ea:32:
34:4a:99:dc:57:ff:3d:01:1d:b0:50:76:1e:2d:15:8f:ae:f9:
8f:70:18:e0:e4:59:26:ca:21:9c:28:e2:39:24:6a:0d:67:fd:
fb:68:5e:97:c0:71:94:89:1f:96:d5:88:d3:ee:84:80:b9:1f:
0e:9a:c6:6d:d6:0e:9d:14:8a:31:da:44:99:6e:0f:cd:48:d7:
ed:af:9e:3e:d9:7c:9c:da:a7:b3:d2:62:25:66:ac:6d:b2:5c:
14:25:c9:00:c0:4e:22:83:d1:73:a4:96:be:06:27:83:ff:b4:
40:f4:13:fb:06:df:ec:07:87:10:05:66:39:e2:5c:5c:f0:ec:
ec:b0:5e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zh4IYf/6HvG6hmZjh3HxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjE4MTFmMzk5N2I5NTBhYzg5ZTQxMGVhM2VmMDE4YTY3
M2Q1ZmMwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
Eyg3ZmY0ODYzMDEzOWYwM2UwNDQ2NTQ0MTg0ZjRhY2RiMGUwYjc5ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ej3CiCAkzGtzXrd5MzeoYLJkvX
Ue02Nkp1IginR9uqA9b9mLfzuA0dLhGeRjL4g9vnnZuUGw1+j68bim3WPrJP+eT4
D4HSDghpgG6ubQP85dpxEqeHxYWiC/iL41SK+0md96RebwS1qEzuj97R9TX8RwoS
XjulMIRgoX/tpUcNyY91UrF8GPyYxEApUZTzj1ieV7E1xLp89AQ+hKiFrCCpGrxH
bI4uOQvB3X7fpXodDjhfUju5L3XY1FJ5GIFlfHT5mqbRgNXM1xfSWplEcsvjaClL
00Bi4If14m165+1SCvjK49PlXAEe2syuTCQrdxP9OqMhuS0BdboHcEV4kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/0hjATnwPgRGVEGE9KzbDgt54oMB8GA1UdIwQY
MBaAFE3xgR85l7lQrInkEOo+8Bimc9X8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZHQkh6bVh1VkNzaWVRUTZqN3dHS1p6MWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZmU5MzEtN2RkNi00NDNiLWFhZGUt
ZDlhNjE5MzdhMWU1LzEvVGZHQkh6bVh1VkNzaWVRUTZqN3dHS1p6MWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zZmU5MzEtN2RkNi00NDNiLWFhZGUtZDlhNjE5MzdhMWU1
LzEvVGZHQkh6bVh1VkNzaWVRUTZqN3dHS1p6MWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqnm6kTi
SQ6YtajDGemBuHjnRX4wi9WZgaF/5hvf4KHgW3ffZUyuvA1zrvy/UyRcoWV4abRy
GiYe2Y8iTqn2GJF6OW1INwrIapwD4fy4382YN8zUL3Oa9TFMlf3Iue5tvkdSE/0z
B9DbyVUeVLp7MXTFG9/OVfSEhH21b+oyNEqZ3Ff/PQEdsFB2Hi0Vj675j3AY4ORZ
JsohnCjiOSRqDWf9+2hel8BxlIkfltWI0+6EgLkfDprGbdYOnRSKMdpEmW4PzUjX
7a+ePtl8nNqns9JiJWasbbJcFCXJAMBOIoPRc6SWvgYng/+0QPQT+wbf7AeHEAVm
OeJcXPDs7LBe0A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:05 2025 by rpki-client