Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File: TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier: 0F3ltRSfNMR69mpuf0wswbYb2w73g12wKAJ9+38C1+Q=
Subject key identifier: 41:24:93:EA:13:44:D5:77:E2:13:1C:E2:1C:33:ED:88:CE:88:28:59
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer: /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial: 0194BCE093A814906810DC621AECBEF28FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number: 03D7
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: InvlOQlXHysCNzw0ls55YDrBMiI.roa (hash: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=)
2: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: VQWNut9TLc4ixqidkYoPFhiH5oz6zzUZaezJcfy2VIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:a8:14:90:68:10:dc:62:1a:ec:be:f2:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=412493ea1344d577e2131ce21c33ed88ce882859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:c4:ff:22:11:12:34:37:56:07:8c:e8:6a:
1c:58:a0:28:f0:39:39:c0:63:ae:d2:3e:28:12:0c:
ea:fb:01:2a:9a:87:eb:f2:cc:27:d1:0b:0c:ed:27:
4b:6f:9e:d3:b7:5f:8e:66:61:e4:10:b3:07:b4:ea:
49:4e:35:bc:b7:18:69:5c:93:4c:92:53:21:ee:04:
e2:71:e0:27:17:e4:8f:bb:b5:55:62:d8:1a:c1:e3:
f6:e2:c0:62:8a:3a:56:90:4d:e7:13:f7:2f:83:03:
7e:4f:94:0e:0e:e9:c6:83:2c:a7:1a:cd:dc:31:65:
c7:d3:19:e9:f7:66:a1:eb:81:d1:99:67:32:76:9f:
c8:de:e6:20:69:8c:a5:69:9f:67:f0:29:5e:48:82:
b2:36:ed:c6:ce:b2:a8:69:f4:85:fa:74:ac:fc:85:
33:54:e9:70:b9:2f:d9:47:0a:56:40:bc:cb:1e:1e:
a5:2e:e0:1a:84:49:ba:50:7c:dc:ff:60:38:6c:a6:
06:82:06:12:ba:be:15:06:aa:e3:64:07:a6:d7:a3:
81:8b:f6:6d:fd:9e:a0:b8:8e:5e:d7:56:8b:49:74:
84:e8:2a:57:74:74:64:1a:4d:73:df:ca:10:f3:94:
43:cb:8e:ea:99:f8:52:b3:57:1c:05:59:74:b0:a6:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:24:93:EA:13:44:D5:77:E2:13:1C:E2:1C:33:ED:88:CE:88:28:59
X509v3 Authority Key Identifier:
keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:af:ba:8e:43:1d:54:22:97:4c:5d:0d:17:67:70:19:6a:a0:
a8:6d:12:da:37:0e:80:4f:f2:1f:c7:09:fa:18:7b:b6:91:81:
e8:b2:c3:b3:74:22:dc:5e:36:75:da:04:ec:4c:60:36:50:4f:
af:5e:12:9b:db:6e:da:d5:3d:bc:50:9a:c3:11:88:4c:9d:b1:
a9:83:be:f3:ef:27:8f:ef:c0:55:bd:72:9e:e2:40:74:c5:2e:
2d:94:25:9d:15:1c:a2:31:f4:c4:3b:05:1f:e9:3a:0f:ea:b5:
a2:f6:8a:0f:99:d0:d8:f1:21:51:2d:6f:dd:d9:38:8a:f1:9b:
f3:de:d9:33:c2:59:a7:35:04:81:96:6b:73:64:fc:65:6d:bb:
38:09:ca:99:d0:d5:b0:ec:32:e0:11:72:93:dd:b4:aa:49:69:
65:d1:4f:1d:d2:e8:5c:63:de:2f:81:f8:7a:df:f3:5d:64:fb:
a6:42:13:21:52:10:ad:15:38:3c:3c:5f:01:8f:7e:6f:86:ac:
0a:e0:e1:f1:cc:6b:f5:87:a3:3b:aa:47:e9:82:d4:21:b6:0e:
90:5b:ef:bf:62:41:46:0f:f7:3b:ea:40:2c:94:cc:2a:73:87:
5b:a5:81:ed:b9:6d:08:75:0c:3d:79:21:ab:69:1c:60:91:d0:
2b:5a:d1:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JOoFJBoENxiGuy+8o/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjBmZDA5NDFmM2QyZjdhMjljMzU2MWU1NjMxODZlZjc3
NWExZTUwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
Eyg0MTI0OTNlYTEzNDRkNTc3ZTIxMzFjZTIxYzMzZWQ4OGNlODgyODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuTE/yIREjQ3VgeM6GocWKAo8Dk5
wGOu0j4oEgzq+wEqmofr8swn0QsM7SdLb57Tt1+OZmHkELMHtOpJTjW8txhpXJNM
klMh7gTiceAnF+SPu7VVYtgaweP24sBiijpWkE3nE/cvgwN+T5QODunGgyynGs3c
MWXH0xnp92ah64HRmWcydp/I3uYgaYylaZ9n8CleSIKyNu3GzrKoafSF+nSs/IUz
VOlwuS/ZRwpWQLzLHh6lLuAahEm6UHzc/2A4bKYGggYSur4VBqrjZAem16OBi/Zt
/Z6guI5e11aLSXSE6CpXdHRkGk1z38oQ85RDy47qmfhSs1ccBVl0sKYUEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEkk+oTRNV34hMc4hwz7YjOiChZMB8GA1UdIwQY
MBaAFExg/QlB89L3opw1YeVjGG73daHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNTVjOGItMDRhNC00MTJiLThiZGEt
MWY1ZDZmNTZjZjcyLzEvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNTVjOGItMDRhNC00MTJiLThiZGEtMWY1ZDZmNTZjZjcy
LzEvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfa+6jkMd
VCKXTF0NF2dwGWqgqG0S2jcOgE/yH8cJ+hh7tpGB6LLDs3Qi3F42ddoE7ExgNlBP
r14Sm9tu2tU9vFCawxGITJ2xqYO+8+8nj+/AVb1ynuJAdMUuLZQlnRUcojH0xDsF
H+k6D+q1ovaKD5nQ2PEhUS1v3dk4ivGb897ZM8JZpzUEgZZrc2T8ZW27OAnKmdDV
sOwy4BFyk920qklpZdFPHdLoXGPeL4H4et/zXWT7pkITIVIQrRU4PDxfAY9+b4as
CuDh8cxr9YejO6pH6YLUIbYOkFvvv2JBRg/3O+pALJTMKnOHW6WB7bltCHUMPXkh
q2kcYJHQK1rRmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client