Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
File: t4SM0jk8F4NlegV3erMV45jrsj8.mft (raw, json)
Hash identifier: OOHnux0ShPvE5sSpN6p1+iAqea+2dwJHTZrv/k+meNc=
Subject key identifier: 85:32:6E:0D:7E:C6:92:C3:40:28:20:3C:17:E4:FC:9E:50:54:6A:72
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 0194BCE0A84D694632A2F59BDC50CA9E1334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
Manifest number: 050A
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: pTPPFKoFJuWdMRGvxA7E4jX80_c.roa (hash: HeJcd3mD5OFJbnZMPOd7wMALaLnR8ioIMvdpAeeFOz0=)
2: t4SM0jk8F4NlegV3erMV45jrsj8.crl (hash: +896wMd0v1wnX4YPWp7sa+PTqIJBSEjH+GteC8blDbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a8:4d:69:46:32:a2:f5:9b:dc:50:ca:9e:13:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=85326e0d7ec692c34028203c17e4fc9e50546a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:5e:c0:96:f7:09:80:37:c7:3a:3b:96:c1:
41:2b:87:1c:f2:79:74:1b:a3:5d:c5:1d:3a:26:76:
ea:6f:4b:aa:ad:7f:99:cf:ab:80:ac:64:0d:0a:9c:
6f:14:25:99:84:64:f0:62:c3:fe:b5:2d:20:d7:a4:
3c:98:55:0d:0c:a8:42:b4:c2:a7:7a:bb:93:12:c9:
99:ab:4c:4e:b1:10:0f:02:8e:30:3c:3f:52:2d:f8:
71:0f:e8:f1:b6:61:fe:e2:d1:3e:a6:cf:04:6a:05:
d8:94:cd:5d:83:00:34:4b:f6:84:c5:2b:5d:8d:21:
60:de:09:01:ac:77:2d:1f:b4:66:e4:0c:4f:5e:94:
97:c4:77:8d:64:cc:e7:79:d3:d6:1d:8e:b4:40:29:
23:32:1d:87:3a:8f:ee:07:53:d8:2e:95:85:87:6e:
d1:28:34:fc:b5:0a:d9:da:b2:7a:23:93:78:3d:cc:
88:56:41:1a:22:65:b3:31:70:c3:87:95:87:ae:7d:
7f:85:31:9d:9c:dc:2c:9d:43:b0:2b:c5:ca:bd:af:
12:e9:84:f4:fb:3f:65:a6:ac:ba:44:0a:ce:bb:6f:
8b:f2:8e:3b:91:bb:d3:16:d2:24:a1:0c:08:bd:94:
13:5a:c3:34:36:7c:6c:64:ff:1c:85:5b:d2:c0:27:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:6E:0D:7E:C6:92:C3:40:28:20:3C:17:E4:FC:9E:50:54:6A:72
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e0:5f:c7:c7:0b:ec:96:3c:b1:fe:55:f4:91:04:a1:40:50:
9f:1d:91:0e:f7:ea:5a:22:65:82:fd:d8:ec:2d:85:ec:9b:6f:
c4:fc:df:94:29:b4:92:d5:2d:41:de:4e:ff:1f:dc:6b:5d:11:
48:5d:39:4c:34:cd:20:cb:2f:d2:e4:97:31:cf:cf:66:c4:23:
3b:73:7e:d6:e3:a4:24:8d:40:5c:31:9f:63:5a:27:3f:30:ec:
75:c1:ce:13:d4:c8:89:6e:22:aa:ae:be:39:44:e0:e2:2e:49:
c7:44:e4:ca:83:a4:dd:bd:f7:40:ce:79:a1:9b:45:97:24:54:
e3:47:58:55:1c:fb:42:d2:f2:10:06:bb:8f:18:3f:86:a9:cb:
ca:5f:fa:d3:07:68:11:c1:65:4b:43:33:ee:ad:a7:a6:ca:be:
93:66:13:07:b2:57:84:a3:15:26:97:33:93:c7:d7:94:1f:0b:
91:30:e9:a1:ad:43:2a:51:b2:37:3b:92:ec:7c:0e:dd:98:0b:
cd:6b:e5:a6:a1:e5:d2:2c:89:5e:4f:1f:9d:43:02:e7:5e:3f:
70:27:76:5e:8d:bc:6a:06:9e:b5:9a:58:65:df:7e:af:99:54:
85:da:bf:c8:58:1d:5e:c1:30:09:62:12:b3:ff:4e:c5:bb:80:
9b:88:17:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KhNaUYyovWb3FDKnhM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODQ4Y2QyMzkzYzE3ODM2NTdhMDU3NzdhYjMxNWUzOThl
YmIyM2YwHhcNMjUwMTMxMTUwMDI3WhcNMjUwMjAxMTUwMDI3WjAzMTEwLwYDVQQD
Eyg4NTMyNmUwZDdlYzY5MmMzNDAyODIwM2MxN2U0ZmM5ZTUwNTQ2YTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqpewJb3CYA3xzo7lsFBK4cc8nl0
G6NdxR06Jnbqb0uqrX+Zz6uArGQNCpxvFCWZhGTwYsP+tS0g16Q8mFUNDKhCtMKn
eruTEsmZq0xOsRAPAo4wPD9SLfhxD+jxtmH+4tE+ps8EagXYlM1dgwA0S/aExStd
jSFg3gkBrHctH7Rm5AxPXpSXxHeNZMznedPWHY60QCkjMh2HOo/uB1PYLpWFh27R
KDT8tQrZ2rJ6I5N4PcyIVkEaImWzMXDDh5WHrn1/hTGdnNwsnUOwK8XKva8S6YT0
+z9lpqy6RArOu2+L8o47kbvTFtIkoQwIvZQTWsM0NnxsZP8chVvSwCcsHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUybg1+xpLDQCggPBfk/J5QVGpyMB8GA1UdIwQY
MBaAFLeEjNI5PBeDZXoFd3qzFeOY67I/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDIt
NWFhYWMyY2IwZGYxLzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDItNWFhYWMyY2IwZGYx
LzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuBfx8cL
7JY8sf5V9JEEoUBQnx2RDvfqWiJlgv3Y7C2F7JtvxPzflCm0ktUtQd5O/x/ca10R
SF05TDTNIMsv0uSXMc/PZsQjO3N+1uOkJI1AXDGfY1onPzDsdcHOE9TIiW4iqq6+
OUTg4i5Jx0TkyoOk3b33QM55oZtFlyRU40dYVRz7QtLyEAa7jxg/hqnLyl/60wdo
EcFlS0Mz7q2npsq+k2YTB7JXhKMVJpczk8fXlB8LkTDpoa1DKlGyNzuS7HwO3ZgL
zWvlpqHl0iyJXk8fnUMC514/cCd2Xo28agaetZpYZd9+r5lUhdq/yFgdXsEwCWIS
s/9OxbuAm4gX9A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client