Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
File: T43nLlAGr221URXhtwkyAjzuy6Q.mft (raw, json)
Hash identifier: r8MaSMNJmP2c5AFcB1+A0mKDnQJdhqOi+OcvnPYw9SI=
Subject key identifier: C9:B0:CD:E3:82:DC:FD:B6:44:03:22:78:B9:94:B9:FD:A0:1D:27:50
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 0194BD85AE8D1FD48355D9D30954BBFFECBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
Manifest number: 01EC
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 703xyqVyusyMnwZMJe3nVMGXbZM.roa (hash: g0R5Z6NA0XZMjcQp8vVCKtZsmnZp9WjEptEiQEcWRL8=)
2: T43nLlAGr221URXhtwkyAjzuy6Q.crl (hash: x0LkbL1q822cOK0wUkR0ud+ugAfFyJ6G/WEYYzmAZYY=)
3: xHkLuYRtCrVGpuLnGhaks3lRnwA.roa (hash: oO+aRb9k9iEUfToXswGXJDHCnfvH4Pcnu65Wu7dUdc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:8d:1f:d4:83:55:d9:d3:09:54:bb:ff:ec:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=c9b0cde382dcfdb644032278b994b9fda01d2750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:43:48:76:8e:95:7b:11:da:0c:84:00:16:
33:4e:58:ca:01:f9:48:f4:c0:9a:49:c9:a2:95:9c:
5b:d3:74:ae:04:47:1f:7f:f5:7a:d5:42:51:70:b9:
ff:09:00:7c:b2:a9:5b:61:aa:45:34:53:6d:7e:f0:
bf:60:c5:21:fe:10:42:da:6e:b8:f5:76:b2:d6:af:
fd:5f:07:4e:78:cf:68:97:23:2a:55:0b:25:84:7b:
92:6a:29:89:9c:18:f7:26:40:7d:26:86:f9:9f:81:
7b:f7:32:80:e1:43:37:05:ab:e4:1e:f0:47:65:94:
66:8b:f4:9e:30:6a:bc:10:bd:f6:33:a8:59:01:9d:
03:91:d0:53:cb:66:7f:10:c1:ec:be:d2:6e:97:ae:
a6:c3:68:53:a1:70:ff:da:62:69:68:15:39:d9:c3:
e7:83:1a:b4:17:41:32:b9:0b:df:3b:73:da:00:78:
b0:ca:a1:e0:30:89:cb:92:38:9b:b8:9b:53:06:c9:
fc:96:c1:69:10:b8:63:ec:60:49:de:60:1f:75:2c:
e7:09:69:13:5c:53:85:d3:02:12:8a:9e:e2:60:f7:
82:e4:55:37:a1:ae:3f:bb:05:09:fe:66:42:48:1e:
37:83:93:9a:f6:1c:c8:01:f4:99:3f:24:f5:72:fa:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:CD:E3:82:DC:FD:B6:44:03:22:78:B9:94:B9:FD:A0:1D:27:50
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c9:24:d0:43:93:38:0e:a2:25:d6:1c:3e:60:4e:3f:9b:05:
71:52:21:81:bf:b0:1c:f9:c5:8e:bd:22:03:f8:bd:3e:58:93:
8d:69:54:cb:52:08:38:4e:66:fb:1b:2b:3e:ab:55:ec:8c:2d:
bc:d5:db:b1:92:14:24:aa:cd:43:9d:b2:f3:2c:93:ee:5b:51:
e0:f0:b4:4b:f2:99:45:ae:13:50:9f:13:a5:9d:ef:4b:63:9b:
a7:ca:da:cb:4a:34:87:b4:19:99:ad:58:5b:6e:93:b0:a0:da:
3a:c2:ca:b9:b2:c2:ae:72:be:cb:0f:8a:4e:87:58:59:20:54:
00:86:b7:15:9b:82:66:71:c2:59:d9:f3:bf:22:45:7b:51:f1:
7b:f3:7d:2f:8e:b4:41:ad:cb:c7:c9:1f:07:95:f9:a5:d0:5f:
b0:b5:f7:cf:a0:a9:58:2b:99:a7:3b:a2:4d:3e:06:40:10:dc:
73:3c:ef:f6:5f:30:08:96:9e:5d:d3:75:ad:01:00:05:a2:ed:
43:da:17:c6:14:c4:d8:3b:77:d6:ae:08:e5:9c:e9:b7:3b:73:
47:65:bc:97:a6:8d:89:c0:6a:e4:da:a0:7e:f3:4c:aa:1e:1b:
8c:1b:7e:a3:f3:3d:e8:6a:bc:dd:46:cd:e7:39:de:38:5c:c7:
13:22:75:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha6NH9SDVdnTCVS7/+y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGRlNzJlNTAwNmFmNmRiNTUxMTVlMWI3MDkzMjAyM2Nl
ZWNiYTQwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EyhjOWIwY2RlMzgyZGNmZGI2NDQwMzIyNzhiOTk0YjlmZGEwMWQyNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxpDSHaOlXsR2gyEABYzTljKAflI
9MCaScmilZxb03SuBEcff/V61UJRcLn/CQB8sqlbYapFNFNtfvC/YMUh/hBC2m64
9Xay1q/9XwdOeM9olyMqVQslhHuSaimJnBj3JkB9Job5n4F79zKA4UM3BavkHvBH
ZZRmi/SeMGq8EL32M6hZAZ0DkdBTy2Z/EMHsvtJul66mw2hToXD/2mJpaBU52cPn
gxq0F0EyuQvfO3PaAHiwyqHgMInLkjibuJtTBsn8lsFpELhj7GBJ3mAfdSznCWkT
XFOF0wISip7iYPeC5FU3oa4/uwUJ/mZCSB43g5Oa9hzIAfSZPyT1cvoT9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmwzeOC3P22RAMieLmUuf2gHSdQMB8GA1UdIwQY
MBaAFE+N5y5QBq9ttVEV4bcJMgI87sukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQt
NWI1MDc4NjI1ZGVhLzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84ZDJkMGEtMmY3MC00ODU5LWJiNDQtNWI1MDc4NjI1ZGVh
LzEvVDQzbkxsQUdyMjIxVVJYaHR3a3lBanp1eTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApckk0EOT
OA6iJdYcPmBOP5sFcVIhgb+wHPnFjr0iA/i9PliTjWlUy1IIOE5m+xsrPqtV7Iwt
vNXbsZIUJKrNQ52y8yyT7ltR4PC0S/KZRa4TUJ8TpZ3vS2Obp8ray0o0h7QZma1Y
W26TsKDaOsLKubLCrnK+yw+KTodYWSBUAIa3FZuCZnHCWdnzvyJFe1Hxe/N9L460
Qa3Lx8kfB5X5pdBfsLX3z6CpWCuZpzuiTT4GQBDcczzv9l8wCJaeXdN1rQEABaLt
Q9oXxhTE2Dt31q4I5ZzptztzR2W8l6aNicBq5NqgfvNMqh4bjBt+o/M96Gq83UbN
5zneOFzHEyJ1ZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:49 2025 by rpki-client