Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: nuDN8DF2p/WSkHQ2nWEyp1QiDCkfTZkzUfAu2TIfqNU=
Subject key identifier: D6:92:94:B8:54:D2:A9:37:61:8F:9D:D4:A9:97:63:02:8B:9F:C9:1C
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 0194BCAA243B6B4C3BE4804395B0E23D2AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0A5B
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: vboiXE0L2VJspf7E0DeBTrbXsyVuEbWTqrD0x/lb468=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:24:3b:6b:4c:3b:e4:80:43:95:b0:e2:3d:2a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=d69294b854d2a937618f9dd4a99763028b9fc91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:90:0e:5b:f7:82:07:33:f0:05:d7:8e:ed:
9d:8a:3a:93:71:6f:85:9d:d7:c2:af:17:c8:ca:79:
63:5d:57:c5:be:71:ee:56:45:b0:b0:76:71:f5:6d:
2e:fd:a7:bb:c5:76:d0:7f:85:46:84:31:d7:de:b8:
94:b6:98:c0:78:cf:b6:b2:1f:ff:f6:89:58:92:4e:
65:92:19:e0:cb:b6:76:4a:c6:97:57:49:7f:99:a0:
26:e1:a8:21:a6:48:06:74:3f:92:35:f3:47:d5:1d:
4c:55:c5:e2:15:41:04:ac:bd:47:ee:f3:16:6f:e5:
3e:7a:68:86:5d:56:8f:cd:57:d4:d5:7e:15:56:f6:
98:1b:99:5a:75:32:a0:15:bf:a5:11:be:00:4f:d7:
94:91:b7:54:b9:c4:00:40:d5:cb:09:d2:27:ca:c3:
72:ab:d3:c4:ae:56:8f:25:52:57:f2:62:36:4c:f2:
10:a9:13:76:08:6a:00:d5:63:30:b2:9a:b9:89:80:
f1:43:d2:19:23:76:8b:a7:1c:a6:ad:6a:a3:ca:b3:
22:08:3e:46:ce:08:2b:56:13:aa:f9:99:e5:25:8a:
12:03:15:25:9c:cb:00:9b:1d:e0:9c:55:7d:59:8c:
0c:90:35:ad:1a:19:e9:14:bd:34:ff:d5:41:23:58:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:94:B8:54:D2:A9:37:61:8F:9D:D4:A9:97:63:02:8B:9F:C9:1C
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:0f:96:87:01:3a:4f:0f:b2:dc:7f:b5:d0:21:51:6f:32:
01:77:f8:16:38:b8:66:47:b3:2f:35:c6:ac:f4:57:e7:bd:e1:
04:35:c3:f7:41:50:c1:6a:78:c8:e9:1c:8a:34:a0:98:21:5a:
0f:5d:80:05:07:45:a3:b3:29:d2:d2:d9:cd:af:f2:7a:a1:f9:
62:93:47:67:3d:a1:43:8f:45:c9:ee:be:b7:dd:79:73:38:51:
71:d2:5e:31:f7:e8:cb:e9:d9:19:c3:a2:40:33:2f:b0:8d:73:
69:19:dc:dd:57:73:18:d0:8c:81:87:86:a0:40:19:1b:f6:cf:
42:9e:86:f1:e8:57:f9:18:b1:d8:f3:66:16:99:fe:3a:46:32:
ab:df:22:86:91:6b:16:4f:6f:a5:33:9a:3c:23:4f:88:55:f2:
d5:52:34:5a:77:36:d9:0f:4d:6d:ba:7a:ff:00:7f:71:e4:c0:
f6:06:7d:bd:f5:24:51:a7:cd:8a:86:4b:47:4e:13:a4:f9:5c:
70:31:53:bf:36:2e:c0:fa:b6:c4:66:22:e9:45:cb:f7:de:11:
69:bb:d5:e3:e3:98:0e:fa:92:42:91:9d:0a:31:9e:b1:a7:d7:
bc:82:c1:ff:0e:62:63:a9:6a:c2:c1:27:04:8b:17:68:79:dc:
79:7d:f4:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiQ7a0w75IBDlbDiPSqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMwMjljNWIyNjM5Y2QyOWI5ZjlkZDUyOTRjYzk0ZWY1
MmQ2YWYwHhcNMjUwMTMxMTQwMDU0WhcNMjUwMjAxMTQwMDU0WjAzMTEwLwYDVQQD
EyhkNjkyOTRiODU0ZDJhOTM3NjE4ZjlkZDRhOTk3NjMwMjhiOWZjOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSyQDlv3ggcz8AXXju2dijqTcW+F
ndfCrxfIynljXVfFvnHuVkWwsHZx9W0u/ae7xXbQf4VGhDHX3riUtpjAeM+2sh//
9olYkk5lkhngy7Z2SsaXV0l/maAm4aghpkgGdD+SNfNH1R1MVcXiFUEErL1H7vMW
b+U+emiGXVaPzVfU1X4VVvaYG5ladTKgFb+lEb4AT9eUkbdUucQAQNXLCdInysNy
q9PErlaPJVJX8mI2TPIQqRN2CGoA1WMwspq5iYDxQ9IZI3aLpxymrWqjyrMiCD5G
zggrVhOq+ZnlJYoSAxUlnMsAmx3gnFV9WYwMkDWtGhnpFL00/9VBI1gPbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaSlLhU0qk3YY+d1KmXYwKLn8kcMB8GA1UdIwQY
MBaAFEyTApxbJjnNKbn53VKUzJTvUtavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYt
MTg3YjFmNzdjMWE1LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YmQ3MjktOThlNS00M2ZmLWFmZTYtMTg3YjFmNzdjMWE1
LzEvVEpNQ25Gc21PYzBwdWZuZFVwVE1sTzlTMXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKcPlocB
Ok8Pstx/tdAhUW8yAXf4Fji4ZkezLzXGrPRX573hBDXD90FQwWp4yOkcijSgmCFa
D12ABQdFo7Mp0tLZza/yeqH5YpNHZz2hQ49Fye6+t915czhRcdJeMffoy+nZGcOi
QDMvsI1zaRnc3VdzGNCMgYeGoEAZG/bPQp6G8ehX+Rix2PNmFpn+OkYyq98ihpFr
Fk9vpTOaPCNPiFXy1VI0Wnc22Q9Nbbp6/wB/ceTA9gZ9vfUkUafNioZLR04TpPlc
cDFTvzYuwPq2xGYi6UXL994RabvV4+OYDvqSQpGdCjGesafXvILB/w5iY6lqwsEn
BIsXaHnceX30cg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:07 2025 by rpki-client