Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
File: TyKDTEeXR7CovQphKfn-ZfgwJtA.mft (raw, json)
Hash identifier: rqQbc4zUuR8AyLMw9QuIQXul28T8vhRK2CaCis3wpcU=
Subject key identifier: 16:0E:18:42:84:5F:EA:46:A2:8F:FE:72:06:C9:11:DD:43:88:D3:32
Authority key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
Certificate issuer: /CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Certificate serial: 0194BBCE1EF67CE490B39E426CD8A45D00BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
Manifest number: 0215
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 5_qRdcU_zBI67bUjjCeGmUT4bso.roa (hash: S33Bj4i6cQIjVG+I+Gmo76E+1aI2U06ldTXtc0u4sXQ=)
2: TyKDTEeXR7CovQphKfn-ZfgwJtA.crl (hash: YGsnL1xBPKsW1TWyU2TXHX8er9DEgo1cHwCo2cTKjfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1e:f6:7c:e4:90:b3:9e:42:6c:d8:a4:5d:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=160e1842845fea46a28ffe7206c911dd4388d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:88:81:53:b6:38:fa:50:1c:ba:79:c0:87:
0c:84:68:c0:52:82:2c:e1:03:11:a6:62:f8:d3:9d:
22:7b:f9:04:3b:43:bf:05:f8:7b:a3:6d:4b:80:d7:
5a:59:c8:d7:79:96:b3:ae:98:11:2a:53:da:ea:f2:
02:f6:f3:40:0b:62:71:0a:a7:81:88:03:2a:33:34:
c7:17:3a:88:af:5f:6f:30:63:99:cb:4c:49:a5:3e:
62:d7:ed:ff:f9:bd:a3:0f:e0:d9:6d:b5:6e:04:f8:
d8:7c:ea:3d:3f:ec:e9:50:1f:1a:1d:cd:4f:0c:51:
d6:0f:5b:e4:8c:10:85:30:c0:51:75:21:11:9d:4e:
05:b4:1d:50:1d:f1:3b:25:3d:b3:b1:c8:c2:38:93:
0a:c4:0b:42:90:4c:0b:84:ea:9a:d9:91:df:af:07:
87:20:05:ed:28:74:de:42:a7:70:df:54:3f:30:9d:
aa:51:a0:8b:f1:04:17:d0:be:34:69:5e:8b:05:ab:
9c:48:db:4b:c5:3e:84:af:25:a5:61:e8:77:24:5f:
64:ec:1a:56:4f:f0:ee:34:0d:06:66:70:4c:4f:26:
e6:e2:b8:cc:b3:37:35:e8:62:ea:6c:8a:e1:74:6a:
0f:cf:b3:a9:f2:c0:9b:27:60:4f:9a:11:19:cc:48:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:18:42:84:5F:EA:46:A2:8F:FE:72:06:C9:11:DD:43:88:D3:32
X509v3 Authority Key Identifier:
keyid:4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:de:00:98:ba:cd:fd:48:c1:fd:6d:9e:e1:ca:f3:d9:af:06:
cc:2f:0a:df:aa:69:03:b5:ed:18:4a:b3:00:30:6e:52:03:f4:
17:55:b2:60:36:ac:23:03:ab:bb:3d:7c:85:be:b5:c7:b5:1d:
20:99:2b:6b:c7:02:4e:89:a0:a4:1d:c3:dc:52:b2:5d:b6:b4:
3b:e7:6d:43:d2:90:25:79:6d:79:25:64:12:4e:b3:f5:30:69:
88:4a:30:cd:f6:e2:75:27:8c:39:49:b1:73:9b:da:db:f4:fd:
52:4b:aa:ee:7e:51:1c:12:8e:e1:d0:76:d6:83:84:e3:da:b4:
d3:6f:3f:1e:d5:2c:5a:e5:ce:d8:82:d1:66:78:4f:82:a0:39:
13:77:27:09:9f:4b:c4:1e:8d:6a:45:20:0f:26:c9:c3:53:a5:
ec:3d:4a:dd:fe:37:06:bc:46:2e:90:df:da:2d:0a:bd:c7:a9:
17:52:16:98:00:4d:c3:5e:89:be:13:0d:57:08:d6:10:58:a1:
10:0b:56:6a:56:ba:4a:37:fd:ad:2e:a5:05:9c:9a:d9:51:48:
4d:e3:18:8b:e2:29:79:bc:f2:22:fe:cf:d4:77:f5:e0:19:5b:
51:cd:65:12:5d:48:c7:1e:91:e8:bf:9c:db:67:c9:95:4e:de:
22:b1:89:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zh72fOSQs55CbNikXQC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMjI4MzRjNDc5NzQ3YjBhOGJkMGE2MTI5ZjlmZTY1Zjgz
MDI2ZDAwHhcNMjUwMTMxMTAwMDM1WhcNMjUwMjAxMTAwMDM1WjAzMTEwLwYDVQQD
EygxNjBlMTg0Mjg0NWZlYTQ2YTI4ZmZlNzIwNmM5MTFkZDQzODhkMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5eIgVO2OPpQHLp5wIcMhGjAUoIs
4QMRpmL4050ie/kEO0O/Bfh7o21LgNdaWcjXeZazrpgRKlPa6vIC9vNAC2JxCqeB
iAMqMzTHFzqIr19vMGOZy0xJpT5i1+3/+b2jD+DZbbVuBPjYfOo9P+zpUB8aHc1P
DFHWD1vkjBCFMMBRdSERnU4FtB1QHfE7JT2zscjCOJMKxAtCkEwLhOqa2ZHfrweH
IAXtKHTeQqdw31Q/MJ2qUaCL8QQX0L40aV6LBaucSNtLxT6EryWlYeh3JF9k7BpW
T/DuNA0GZnBMTybm4rjMszc16GLqbIrhdGoPz7Op8sCbJ2BPmhEZzEgIRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYOGEKEX+pGoo/+cgbJEd1DiNMyMB8GA1UdIwQY
MBaAFE8ig0xHl0ewqL0KYSn5/mX4MCbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iOWEwNTAtNzcyNi00ZWI1LWI0MDMt
N2JmNzI0MDU2MTUzLzEvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iOWEwNTAtNzcyNi00ZWI1LWI0MDMtN2JmNzI0MDU2MTUz
LzEvVHlLRFRFZVhSN0NvdlFwaEtmbi1aZmd3SnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi94AmLrN
/UjB/W2e4crz2a8GzC8K36ppA7XtGEqzADBuUgP0F1WyYDasIwOruz18hb61x7Ud
IJkra8cCTomgpB3D3FKyXba0O+dtQ9KQJXlteSVkEk6z9TBpiEowzfbidSeMOUmx
c5va2/T9Ukuq7n5RHBKO4dB21oOE49q0028/HtUsWuXO2ILRZnhPgqA5E3cnCZ9L
xB6NakUgDybJw1Ol7D1K3f43BrxGLpDf2i0KvcepF1IWmABNw16JvhMNVwjWEFih
EAtWala6Sjf9rS6lBZya2VFITeMYi+IpebzyIv7P1Hf14BlbUc1lEl1Ixx6R6L+c
22fJlU7eIrGJtw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:28 2025 by rpki-client