Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: UeZmfmbkGUKFnNCe6bifv3krgUpjLb5SnVdSNmJuBnM=
Subject key identifier: 77:AB:FC:BB:35:FC:FB:BE:69:D2:7E:F6:32:6F:6F:4B:8B:41:1E:CB
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 0194BC72A84CDDE5D3362AB9269C7CE3097D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: UqEBZWL8NbZPZ1EfFLPmlbvrhCIR3iVrsOh2lCUV/tE=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:4c:dd:e5:d3:36:2a:b9:26:9c:7c:e3:09:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=77abfcbb35fcfbbe69d27ef6326f6f4b8b411ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:94:54:83:25:46:47:bf:e4:be:88:c1:04:
d3:f2:11:31:87:2c:24:5e:ce:1f:9a:29:8d:81:5a:
99:d6:ce:85:08:43:f8:13:fc:21:bd:bb:2a:81:1e:
90:0e:b0:b8:f4:df:28:cb:c3:65:b4:b6:e6:8c:15:
9e:fb:51:ce:68:96:b1:53:ec:b5:99:67:a0:ef:fc:
0f:5e:d7:19:de:1c:7a:82:b2:38:84:4b:ee:a5:9e:
ce:e7:ba:7d:2b:7f:b2:33:6b:be:ed:30:ee:d4:c2:
cd:1b:2e:8b:15:ec:34:7a:58:fb:ad:b7:89:0b:ae:
5e:62:30:bb:e6:29:32:51:6a:c7:aa:9f:0e:35:fe:
a1:df:ab:24:17:2f:d4:4a:76:d4:b7:ca:63:37:8b:
be:bb:c0:9a:8e:c4:4a:ac:17:0a:d8:22:d6:3d:29:
f8:17:85:46:9a:7f:16:a7:e8:96:36:6f:f5:00:92:
86:e7:bf:54:1d:cf:64:70:47:47:b4:d9:5d:c6:17:
65:dc:5b:f0:c6:28:a3:42:2a:3f:02:c6:d9:05:dc:
3e:ee:27:53:39:ff:8e:2a:40:bc:eb:0c:d8:15:33:
f5:fc:e7:6b:21:c7:32:03:35:df:d4:6e:d1:40:d6:
59:5e:53:e4:1d:86:32:b6:44:82:c2:6f:93:19:e7:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:FC:BB:35:FC:FB:BE:69:D2:7E:F6:32:6F:6F:4B:8B:41:1E:CB
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4f:4a:d8:22:cd:24:b4:e9:0f:ac:84:a2:b1:e4:e9:a6:75:
40:42:c5:ed:c3:bb:c1:1c:c2:6f:1d:77:84:92:65:07:4d:96:
87:b2:88:50:ac:e6:09:1d:5e:68:ac:ea:0a:b5:76:b6:6a:d2:
5c:43:e8:b7:89:e0:b1:df:77:42:ab:63:5f:91:da:e7:ee:d6:
72:5c:5c:4b:dd:cb:51:68:8d:ac:11:6e:9a:f1:19:12:2d:d0:
9b:f5:ff:23:21:64:e9:c1:b4:10:e1:75:01:f0:88:42:8a:fc:
93:fe:ba:75:a6:9e:33:a2:51:c2:4b:04:7f:f5:dc:04:0d:e3:
c3:0d:e9:7f:53:aa:73:07:b9:b4:b3:eb:87:6f:43:2e:ec:c1:
16:a8:fe:b0:13:4e:36:06:03:f2:18:57:c3:97:ce:f1:6e:1a:
52:b3:24:88:4e:89:75:7d:b4:c3:2b:ad:5c:33:6f:29:42:dd:
e3:72:6e:97:96:a5:2c:44:e6:73:1f:ca:58:ed:2f:53:6e:6e:
30:7a:fe:bc:25:b1:b4:11:8a:f2:98:e7:f6:01:15:f9:79:21:
4a:1c:b5:12:d4:2f:d2:22:e3:7e:9e:a6:af:7a:55:4a:98:f6:
1c:9a:a3:06:22:aa:2d:13:ca:12:00:25:06:ce:c2:9d:72:33:
1c:6f:6c:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqhM3eXTNiq5Jpx84wl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDMwMjA1ZmEzNjVlOWY0OWZmNGVhNzUwNmRmOTEyZDVl
ZDgzNjAwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
Eyg3N2FiZmNiYjM1ZmNmYmJlNjlkMjdlZjYzMjZmNmY0YjhiNDExZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAaUVIMlRke/5L6IwQTT8hExhywk
Xs4fmimNgVqZ1s6FCEP4E/whvbsqgR6QDrC49N8oy8NltLbmjBWe+1HOaJaxU+y1
mWeg7/wPXtcZ3hx6grI4hEvupZ7O57p9K3+yM2u+7TDu1MLNGy6LFew0elj7rbeJ
C65eYjC75ikyUWrHqp8ONf6h36skFy/USnbUt8pjN4u+u8CajsRKrBcK2CLWPSn4
F4VGmn8Wp+iWNm/1AJKG579UHc9kcEdHtNldxhdl3FvwxiijQio/AsbZBdw+7idT
Of+OKkC86wzYFTP1/OdrIccyAzXf1G7RQNZZXlPkHYYytkSCwm+TGedkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHer/Ls1/Pu+adJ+9jJvb0uLQR7LMB8GA1UdIwQY
MBaAFE8DAgX6Nl6fSf9Op1Bt+RLV7YNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgt
M2NlNjExY2I2Nzk5LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgtM2NlNjExY2I2Nzk5
LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU9K2CLN
JLTpD6yEorHk6aZ1QELF7cO7wRzCbx13hJJlB02Wh7KIUKzmCR1eaKzqCrV2tmrS
XEPot4ngsd93QqtjX5Ha5+7WclxcS93LUWiNrBFumvEZEi3Qm/X/IyFk6cG0EOF1
AfCIQor8k/66daaeM6JRwksEf/XcBA3jww3pf1Oqcwe5tLPrh29DLuzBFqj+sBNO
NgYD8hhXw5fO8W4aUrMkiE6JdX20wyutXDNvKULd43Jul5alLETmcx/KWO0vU25u
MHr+vCWxtBGK8pjn9gEV+XkhShy1EtQv0iLjfp6mr3pVSpj2HJqjBiKqLRPKEgAl
Bs7CnXIzHG9sKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client