Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File: TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier: fEeonf4x5Rh3VrGwW8vNpYJg6C1FJNyRaQI/s0sSu8o=
Subject key identifier: 2D:49:E9:49:48:38:AB:F8:DE:58:C9:BA:C0:72:5A:D5:7F:C2:57:86
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 0194BCA9D824CAF3250C835E89B8D5ACA0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number: 135E
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: ZERJdQqtwng2TDfRp3r0KP4a7JX1qCPoQ9cZAEpRLMo=)
2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:24:ca:f3:25:0c:83:5e:89:b8:d5:ac:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=2d49e9494838abf8de58c9bac0725ad57fc25786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:6a:99:0a:7a:17:ea:48:63:e1:80:f5:cd:
03:3d:bd:54:6c:41:e3:c1:2b:3d:5b:87:46:09:87:
63:63:19:c0:2a:36:9e:7f:b7:dc:c2:d6:f0:0f:42:
42:26:ba:98:a4:93:cb:0e:a1:ae:d8:36:2b:9b:5c:
bf:cd:62:2f:8f:ea:d7:de:26:86:0a:8f:39:1d:06:
45:13:f6:a5:83:55:f2:5a:b9:87:2f:02:fc:2b:ca:
9f:e9:17:c9:56:ff:ba:c5:5d:55:cb:ae:d5:97:86:
c7:9e:6e:56:d3:31:3c:b4:61:a7:4c:ae:92:7b:2c:
18:cc:37:5d:bf:60:b3:70:6d:66:cc:46:f1:cf:f7:
d6:48:7b:33:a8:5f:e3:56:eb:e5:a6:0a:14:45:78:
fa:71:b0:5d:ec:83:0a:8e:94:6c:d3:af:0e:b5:f8:
e9:d1:ce:e3:e9:ee:0c:74:5c:bd:15:13:f2:c2:b5:
94:e2:35:d8:53:95:90:e5:69:ad:81:b4:2c:21:dc:
07:89:1b:d6:da:ab:41:35:eb:6a:90:6a:f7:11:f1:
40:ad:96:a3:de:73:31:eb:6f:dd:b0:50:57:df:57:
16:f1:8a:da:04:14:65:a0:b4:b3:eb:f1:7b:7d:eb:
46:11:53:9f:eb:a6:9e:78:aa:f2:78:12:a4:d0:b4:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:E9:49:48:38:AB:F8:DE:58:C9:BA:C0:72:5A:D5:7F:C2:57:86
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4f:71:e8:3a:10:3f:78:38:37:11:71:0b:e2:71:64:57:c4:
0d:31:ac:2b:4d:0d:5f:69:5f:46:1f:4f:49:81:55:be:65:63:
73:82:23:39:0f:d7:80:ae:5c:aa:f7:ff:20:16:23:0b:30:b4:
f0:4e:be:28:62:b2:a4:47:71:c8:a5:c7:42:22:29:3b:79:ab:
1a:84:4a:fb:85:69:09:94:96:06:3c:32:8d:55:58:80:41:c0:
8a:94:57:a3:8f:41:d6:9c:96:96:58:63:29:13:2c:5f:1e:36:
69:18:dc:47:c6:30:8e:dd:e5:08:e3:81:8b:97:f2:3c:53:e8:
6e:5c:6c:19:b8:8c:07:8b:bf:3f:94:0c:d8:09:bb:46:d3:46:
ef:c9:2b:6f:95:65:b0:f2:b9:ef:6a:f7:d5:51:84:60:55:98:
3c:76:c2:7c:69:bc:bf:8e:57:de:a6:a0:bd:69:11:42:e8:90:
bd:f2:b0:91:63:27:61:5e:4f:d3:50:91:32:ca:7d:ea:f1:98:
03:f7:c1:e1:95:c2:43:15:2a:3f:45:79:4c:a9:57:ae:a6:2f:
9e:88:84:ad:f2:0a:76:7c:6b:4e:d2:4a:ae:55:f3:6e:c2:1e:
3e:05:12:e1:1f:aa:97:2d:69:42:13:65:04:87:ec:09:4a:3b:
e6:7b:64:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdgkyvMlDINeibjVrKD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWYxMTE1MGNlNWZlOWY3MGYzNmM5ODA2NzQ3YmI2ODJi
MWNhMjEwHhcNMjUwMTMxMTQwMDM0WhcNMjUwMjAxMTQwMDM0WjAzMTEwLwYDVQQD
EygyZDQ5ZTk0OTQ4MzhhYmY4ZGU1OGM5YmFjMDcyNWFkNTdmYzI1Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkBqmQp6F+pIY+GA9c0DPb1UbEHj
wSs9W4dGCYdjYxnAKjaef7fcwtbwD0JCJrqYpJPLDqGu2DYrm1y/zWIvj+rX3iaG
Co85HQZFE/alg1XyWrmHLwL8K8qf6RfJVv+6xV1Vy67Vl4bHnm5W0zE8tGGnTK6S
eywYzDddv2CzcG1mzEbxz/fWSHszqF/jVuvlpgoURXj6cbBd7IMKjpRs068Otfjp
0c7j6e4MdFy9FRPywrWU4jXYU5WQ5WmtgbQsIdwHiRvW2qtBNetqkGr3EfFArZaj
3nMx62/dsFBX31cW8YraBBRloLSz6/F7fetGEVOf66aeeKryeBKk0LSnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1J6UlIOKv43ljJusByWtV/wleGMB8GA1UdIwQY
MBaAFEyvERUM5f6fcPNsmAZ0e7aCscohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMzY5NWMtZTM0MC00ZTJmLWFmZWIt
NmI5NWQzYzg5YzkxLzEvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMzY5NWMtZTM0MC00ZTJmLWFmZWItNmI5NWQzYzg5Yzkx
LzEvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk9x6DoQ
P3g4NxFxC+JxZFfEDTGsK00NX2lfRh9PSYFVvmVjc4IjOQ/XgK5cqvf/IBYjCzC0
8E6+KGKypEdxyKXHQiIpO3mrGoRK+4VpCZSWBjwyjVVYgEHAipRXo49B1pyWllhj
KRMsXx42aRjcR8Ywjt3lCOOBi5fyPFPoblxsGbiMB4u/P5QM2Am7RtNG78krb5Vl
sPK572r31VGEYFWYPHbCfGm8v45X3qagvWkRQuiQvfKwkWMnYV5P01CRMsp96vGY
A/fB4ZXCQxUqP0V5TKlXrqYvnoiErfIKdnxrTtJKrlXzbsIePgUS4R+qly1pQhNl
BIfsCUo75ntk+w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:31 2025 by rpki-client