Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: F+V5LbS7R/oWRyiXnHyu4o0WLrjnqa+y0S5ADAH+xWk=
Subject key identifier: 7F:07:B1:D3:EA:F6:F2:A0:B3:94:48:5E:A6:62:49:BB:01:05:F5:CA
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 0194BCE0864C2EAAB6AA5DC5106B5B8B1E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: zVMLSNPhTn5Ob6wEHFwwYMTKNCRmWJ+2n1SCu//qp5E=)
2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:86:4c:2e:aa:b6:aa:5d:c5:10:6b:5b:8b:1e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=7f07b1d3eaf6f2a0b394485ea66249bb0105f5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:44:84:55:5a:22:58:72:13:e1:16:85:56:
70:cb:e2:e4:56:b2:52:fd:46:0c:21:49:33:c4:e6:
fc:be:31:50:68:df:da:a1:7f:c7:85:e7:cc:88:03:
06:d7:f9:3f:50:c9:ef:67:96:57:7e:e1:08:1a:ca:
8a:f3:98:f2:ba:23:37:fd:8d:73:24:f5:d3:82:4e:
4f:5d:06:d6:09:8d:d9:1d:13:44:7e:67:07:a2:e0:
cb:2c:74:f0:88:d5:b0:8c:58:c0:86:f3:51:6d:b1:
82:b8:e0:03:6f:77:16:aa:42:93:c3:68:47:4d:b9:
61:c0:99:c9:08:22:f1:1a:e6:29:c2:b2:11:48:44:
77:8f:97:9e:e9:2b:ba:0a:91:a7:bd:82:f3:4d:d8:
c9:b8:ae:21:e1:8b:6a:df:29:ed:ad:3e:03:5c:2c:
6e:1b:f2:08:62:44:9e:00:3f:c1:b7:2a:86:a4:78:
6c:7a:cf:cc:8f:58:2f:11:47:63:08:dc:4c:f9:d2:
d6:7a:33:34:4b:a0:7f:d3:68:81:85:c3:e4:1a:0f:
24:24:f8:c0:48:0a:72:6e:cf:75:20:f5:96:34:fc:
19:d0:c5:b2:c8:78:f1:b3:16:f1:39:c7:d8:93:3c:
77:b7:8b:57:78:cd:7b:50:5c:ac:2e:ff:48:b7:40:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:B1:D3:EA:F6:F2:A0:B3:94:48:5E:A6:62:49:BB:01:05:F5:CA
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b8:9a:3d:56:35:ca:55:40:69:6c:4a:80:73:1f:ab:e1:b4:
a8:8a:aa:d0:3f:96:86:b3:24:c5:57:4f:6a:5d:d9:4a:98:7d:
b2:90:b3:e8:47:b8:1f:8a:89:f7:cf:cc:2a:7c:78:6b:4e:5a:
b3:c4:44:53:b4:66:22:a3:a8:75:0a:30:5f:c5:af:b3:8f:01:
02:f2:4f:5f:e7:e5:69:8a:5d:fc:2d:14:d1:54:2a:ac:4b:d9:
62:85:ff:36:ab:65:db:95:37:f8:81:d4:c9:6d:3d:88:27:44:
dc:a7:20:86:85:de:57:db:69:22:e2:ef:46:36:91:bf:85:5b:
b7:8c:6d:67:aa:6a:22:a9:b1:aa:4f:b7:c5:b9:35:39:3b:7f:
e5:c3:06:d3:ce:fe:4f:00:7e:3b:7b:fa:9b:99:b6:42:1d:14:
c1:f6:65:43:e0:31:6a:3a:0d:68:04:ed:75:af:dc:9a:3d:a0:
4a:6a:db:59:07:ab:22:49:fe:68:5a:b7:83:0f:89:fb:39:9e:
48:ad:5a:e3:ea:17:34:40:c2:3c:3d:69:5b:c0:dd:ce:61:99:
3c:cf:ca:bc:75:9e:47:8f:ff:51:dd:e4:e7:da:a8:73:34:b4:
67:90:61:d6:ff:69:b6:b5:a2:67:1f:eb:ae:fd:5c:6b:24:e3:
ae:e8:ee:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IZMLqq2ql3FEGtbix43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTY3ZWU1ZjhkMmFjMGQ5Y2MwMTM3YjQxOTEyZjE4MWIw
NDg5YjAwHhcNMjUwMTMxMTUwMDE4WhcNMjUwMjAxMTUwMDE4WjAzMTEwLwYDVQQD
Eyg3ZjA3YjFkM2VhZjZmMmEwYjM5NDQ4NWVhNjYyNDliYjAxMDVmNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GFEhFVaIlhyE+EWhVZwy+LkVrJS
/UYMIUkzxOb8vjFQaN/aoX/HhefMiAMG1/k/UMnvZ5ZXfuEIGsqK85jyuiM3/Y1z
JPXTgk5PXQbWCY3ZHRNEfmcHouDLLHTwiNWwjFjAhvNRbbGCuOADb3cWqkKTw2hH
TblhwJnJCCLxGuYpwrIRSER3j5ee6Su6CpGnvYLzTdjJuK4h4Ytq3yntrT4DXCxu
G/IIYkSeAD/BtyqGpHhses/Mj1gvEUdjCNxM+dLWejM0S6B/02iBhcPkGg8kJPjA
SApybs91IPWWNPwZ0MWyyHjxsxbxOcfYkzx3t4tXeM17UFysLv9It0DAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8HsdPq9vKgs5RIXqZiSbsBBfXKMB8GA1UdIwQY
MBaAFE4WfuX40qwNnMATe0GRLxgbBImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2Et
ZjY2MmIwYTY1ZThlLzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2EtZjY2MmIwYTY1ZThl
LzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7iaPVY1
ylVAaWxKgHMfq+G0qIqq0D+WhrMkxVdPal3ZSph9spCz6Ee4H4qJ98/MKnx4a05a
s8REU7RmIqOodQowX8Wvs48BAvJPX+flaYpd/C0U0VQqrEvZYoX/Nqtl25U3+IHU
yW09iCdE3KcghoXeV9tpIuLvRjaRv4Vbt4xtZ6pqIqmxqk+3xbk1OTt/5cMG087+
TwB+O3v6m5m2Qh0UwfZlQ+AxajoNaATtda/cmj2gSmrbWQerIkn+aFq3gw+J+zme
SK1a4+oXNEDCPD1pW8DdzmGZPM/KvHWeR4//Ud3k59qoczS0Z5Bh1v9ptrWiZx/r
rv1cayTjruju0w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:06 2025 by rpki-client