Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier: RzdgQh9j/pWe59tDO4Yi9ktj+dSaDWhKuezfeYzWAmU=
Subject key identifier: 18:9C:D5:27:1B:AE:07:E1:86:5F:FE:F3:3A:C3:C6:A4:1A:A3:5A:12
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer: /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial: 0194BD8543C307ED9B50481FD3C1860C7559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number: 0784
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: Dnpb75XdwM7LxtjkYlloNVMA6rs.roa (hash: EzyV/txDtZvmkY6vt32XISbysVcisfy2gnGp9jREhPs=)
2: ZFlE4CwGV5oXv28o6nsvolZlI_Y.roa (hash: S5Q4DAjjTKxkiafJ6he6yLpO30RXNUCaXjGnLWKadCQ=)
3: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: wMskKsyzn3OTKCk0zoqBeKjw35TWthixTVejOzixuJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:c3:07:ed:9b:50:48:1f:d3:c1:86:0c:75:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=189cd5271bae07e1865ffef33ac3c6a41aa35a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:48:f3:77:f4:66:3a:88:ec:6d:f6:82:24:
d0:9c:a3:59:b0:49:c1:1c:90:3f:97:87:6f:b6:dd:
6b:55:d8:b8:f4:96:a4:cf:ea:2b:d6:81:62:c4:a4:
42:af:0d:b6:89:12:a9:e2:4e:de:08:5d:9f:0c:e4:
41:7f:8d:5b:59:48:db:28:f6:04:1d:89:09:36:36:
69:6b:15:4b:7f:35:ad:a8:bf:c4:a0:40:58:b4:09:
31:9d:23:6a:28:7a:c3:f3:c8:e7:c0:a8:e3:cc:4d:
ff:33:1b:50:49:a6:43:66:89:70:33:a2:3a:b2:fa:
4d:d8:94:58:0e:0a:3c:bc:07:35:31:84:e2:a4:ad:
85:8b:49:87:4a:c1:d9:03:80:ce:b1:ba:91:8c:6b:
8f:03:f6:be:6b:74:61:92:bd:fa:87:f7:0e:4e:88:
d1:5a:03:5d:9e:61:2b:7f:04:72:c5:73:96:28:f2:
b4:73:a1:76:96:a5:2e:3e:4f:98:af:88:df:c8:62:
96:46:76:6a:d5:e0:48:c2:19:4b:78:c9:31:0b:8d:
2d:5a:da:ef:e0:f0:e1:83:85:dc:93:59:9d:44:9d:
c6:6d:47:e7:cb:ff:88:9a:f1:b9:52:01:1d:9f:d1:
4b:be:c7:89:20:fd:0d:dc:57:90:7d:16:63:c5:94:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9C:D5:27:1B:AE:07:E1:86:5F:FE:F3:3A:C3:C6:A4:1A:A3:5A:12
X509v3 Authority Key Identifier:
keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:97:6b:e9:5a:25:f4:4f:ae:ac:bb:5d:a9:63:23:b5:d8:5c:
01:c1:41:27:06:76:f2:f3:7e:b0:19:0b:5b:be:8b:1e:42:1b:
df:57:da:dd:09:77:46:d0:ed:d9:e3:4c:c0:c4:0d:f9:bf:04:
53:6e:f8:cf:24:97:23:56:73:23:eb:7c:47:6f:2a:f3:0a:12:
28:5a:29:8d:b8:74:6d:62:12:8b:b2:27:2a:f0:ab:db:f7:7e:
ab:45:58:8b:1e:32:56:ff:15:3f:ee:8c:35:fd:d0:96:30:39:
1a:84:00:13:12:24:22:f2:f7:b9:f0:9d:5a:a2:7c:ad:6e:f5:
20:70:53:88:39:80:8e:37:2b:a7:39:f6:5c:23:8f:a7:79:45:
91:07:6a:af:95:0a:91:6d:33:77:50:c0:34:7e:69:70:42:45:
26:50:be:04:00:c2:4b:88:a9:ae:49:7f:fb:ab:d1:50:e4:a7:
ad:a4:5f:51:a9:0a:4e:2e:c7:32:b0:18:65:db:0b:8e:0e:f3:
66:52:00:34:70:39:a8:4c:cb:d3:35:91:b5:4d:c8:b5:b2:27:
34:db:dd:9c:9c:7f:36:59:94:45:1b:20:51:da:09:ad:46:86:
ca:2c:66:26:98:68:03:d8:1d:91:d6:76:83:f8:a9:a8:f6:d8:
25:b4:2e:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUPDB+2bUEgf08GGDHVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5
OTEwNWUwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EygxODljZDUyNzFiYWUwN2UxODY1ZmZlZjMzYWMzYzZhNDFhYTM1YTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFNI83f0ZjqI7G32giTQnKNZsEnB
HJA/l4dvtt1rVdi49Jakz+or1oFixKRCrw22iRKp4k7eCF2fDORBf41bWUjbKPYE
HYkJNjZpaxVLfzWtqL/EoEBYtAkxnSNqKHrD88jnwKjjzE3/MxtQSaZDZolwM6I6
svpN2JRYDgo8vAc1MYTipK2Fi0mHSsHZA4DOsbqRjGuPA/a+a3Rhkr36h/cOTojR
WgNdnmErfwRyxXOWKPK0c6F2lqUuPk+Yr4jfyGKWRnZq1eBIwhlLeMkxC40tWtrv
4PDhg4Xck1mdRJ3GbUfny/+ImvG5UgEdn9FLvseJIP0N3FeQfRZjxZTTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBic1Scbrgfhhl/+8zrDxqQao1oSMB8GA1UdIwQY
MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt
YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx
LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpdr6Vol
9E+urLtdqWMjtdhcAcFBJwZ28vN+sBkLW76LHkIb31fa3Ql3RtDt2eNMwMQN+b8E
U274zySXI1ZzI+t8R28q8woSKFopjbh0bWISi7InKvCr2/d+q0VYix4yVv8VP+6M
Nf3QljA5GoQAExIkIvL3ufCdWqJ8rW71IHBTiDmAjjcrpzn2XCOPp3lFkQdqr5UK
kW0zd1DANH5pcEJFJlC+BADCS4iprkl/+6vRUOSnraRfUakKTi7HMrAYZdsLjg7z
ZlIANHA5qEzL0zWRtU3ItbInNNvdnJx/NlmURRsgUdoJrUaGyixmJphoA9gdkdZ2
g/ipqPbYJbQuKg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:54 2025 by rpki-client