Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: RTvvEBgR/zIaUFFTwiB6nY0fP6CSVrdma70xJNm/vT8=
Subject key identifier: A7:82:EE:AD:0F:27:21:C0:EC:07:50:42:32:C5:40:F9:BF:14:58:A6
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 0194BD4E40283EC2E29949EFF63379550464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 1076
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: cpv9h02pCrV6gGhZpyQ0cGLMUYYWGjGQDOlb9TAKNgs=)
2: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (hash: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:40:28:3e:c2:e2:99:49:ef:f6:33:79:55:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=a782eead0f2721c0ec07504232c540f9bf1458a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:21:8a:6f:68:b4:3e:cb:89:8c:eb:4d:bd:
ce:04:1b:b6:ef:bf:ee:f5:ee:e4:d0:b4:04:10:23:
e9:9c:04:66:f6:84:7f:b8:89:e0:b8:eb:7b:ff:c9:
08:22:fe:27:24:f9:03:f2:7d:a6:3a:cb:e8:77:6c:
02:1b:09:b5:b5:9c:d2:95:c4:11:2e:b8:24:7a:ea:
e8:bf:0d:f9:4b:69:6f:3c:c5:7d:9d:8b:c0:8d:11:
ec:0b:51:09:d0:84:1b:99:f8:a8:c9:11:d1:4d:75:
41:ac:7b:5c:4c:1b:87:c9:43:37:14:ed:48:c5:58:
c4:20:40:44:84:58:af:d4:47:8f:15:a0:23:d2:cd:
0e:aa:a3:16:00:46:f6:5a:59:b2:f3:7a:ba:7d:b3:
84:96:76:8b:96:a9:17:88:a5:82:40:f4:3d:e2:13:
77:03:a8:18:26:e5:89:f7:6a:c4:7c:76:21:93:b9:
30:50:b6:f6:46:b0:6f:4b:e6:8b:fc:fc:31:2a:3f:
e1:4a:f6:51:16:af:7b:9f:83:f8:18:7a:89:a3:bf:
e7:63:cc:dc:20:0a:16:79:f9:2e:5d:3f:8d:b2:60:
55:46:f1:87:86:75:2f:f4:44:69:43:bb:a0:8d:b1:
a4:f3:e3:23:e7:5a:6e:37:e6:ac:ce:91:43:61:ac:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:EE:AD:0F:27:21:C0:EC:07:50:42:32:C5:40:F9:BF:14:58:A6
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:40:9d:5c:a3:f9:b8:76:e6:37:b8:bc:c0:f9:35:62:87:9d:
d6:31:36:80:cc:a5:dd:92:18:bd:f8:2a:b3:31:0b:20:34:08:
9a:1d:15:00:98:b2:0f:67:2f:67:52:c3:05:50:39:28:8e:1d:
79:71:4f:24:f2:51:0e:2d:a5:8b:15:dd:8f:8f:91:de:98:7a:
4b:37:65:fb:c3:f9:1a:11:b4:2b:bc:dd:c1:ec:ca:8b:7d:f3:
87:76:2d:c3:94:26:10:99:83:09:a5:68:b8:65:6d:84:61:00:
55:2b:66:2f:2a:45:9e:28:7d:ed:e4:a9:80:98:d6:31:68:15:
88:57:c9:4a:00:46:56:3f:b1:eb:0b:44:48:6a:13:fd:ce:14:
78:5a:ec:34:61:1d:2b:ae:3d:21:eb:9d:b0:c6:d7:8d:dd:37:
6c:b8:46:74:52:26:a2:79:80:2b:e2:fa:b9:d7:5b:3b:58:50:
40:93:51:4e:bf:77:1f:61:e3:09:48:f9:3b:b0:aa:68:92:91:
66:c6:3e:5d:be:05:cc:d0:99:dd:5b:dc:b0:0a:bd:92:85:b6:
c1:ca:86:bc:97:b4:e4:a5:7d:2a:81:0d:16:e4:67:99:c3:3a:
36:f1:9e:87:7d:fe:2a:62:7e:00:0f:24:b7:f3:1b:15:13:19:
4e:9f:7b:91
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9TkAoPsLimUnv9jN5VQRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzliMDNmMTI5NGViZDM1YTNiMTVkNjk1ZDdlOTFmOGNi
NDFmYTAwHhcNMjUwMTMxMTcwMDA5WhcNMjUwMjAxMTcwMDA5WjAzMTEwLwYDVQQD
EyhhNzgyZWVhZDBmMjcyMWMwZWMwNzUwNDIzMmM1NDBmOWJmMTQ1OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/Ehim9otD7LiYzrTb3OBBu277/u
9e7k0LQEECPpnARm9oR/uInguOt7/8kIIv4nJPkD8n2mOsvod2wCGwm1tZzSlcQR
Lrgkeurovw35S2lvPMV9nYvAjRHsC1EJ0IQbmfioyRHRTXVBrHtcTBuHyUM3FO1I
xVjEIEBEhFiv1EePFaAj0s0OqqMWAEb2Wlmy83q6fbOElnaLlqkXiKWCQPQ94hN3
A6gYJuWJ92rEfHYhk7kwULb2RrBvS+aL/PwxKj/hSvZRFq97n4P4GHqJo7/nY8zc
IAoWefkuXT+NsmBVRvGHhnUv9ERpQ7ugjbGk8+Mj51puN+aszpFDYayv5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKeC7q0PJyHA7AdQQjLFQPm/FFimMB8GA1UdIwQY
MBaAFPk5sD8SlOvTWjsV1pXX6R+MtB+gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UbXdQeEtVNjlOYU94WFdsZGZwSDR5MEg2QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4LWNlZjItNGQ4ZC1hOTIw
LTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhXbGRmcEg0eTBINkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzBjOWRlOC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3
N2MvMS8xLVRtd1B4S1U2OU5hT3hYV2xkZnBINHkwSDZBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakCd
XKP5uHbmN7i8wPk1Yoed1jE2gMyl3ZIYvfgqszELIDQImh0VAJiyD2cvZ1LDBVA5
KI4deXFPJPJRDi2lixXdj4+R3ph6Szdl+8P5GhG0K7zdwezKi33zh3Ytw5QmEJmD
CaVouGVthGEAVStmLypFnih97eSpgJjWMWgViFfJSgBGVj+x6wtESGoT/c4UeFrs
NGEdK649IeudsMbXjd03bLhGdFImonmAK+L6uddbO1hQQJNRTr93H2HjCUj5O7Cq
aJKRZsY+Xb4FzNCZ3VvcsAq9koW2wcqGvJe05KV9KoENFuRnmcM6NvGeh33+KmJ+
AA8kt/MbFRMZTp97kQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:19 2025 by rpki-client