Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json)
Hash identifier: Mz76cpDvMaZfeXhUihs/bjMpsN4ooFAwZv51/rCqchw=
Subject key identifier: 65:2F:AE:20:65:CD:47:AE:1C:47:EB:54:A1:92:F7:DB:1E:2B:6F:E8
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 0194BC04B62FAB49C943E5F1D18099B6A7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
Manifest number: 0D8C
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=)
2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: Ihusw0dZaG5MYwthw129+YZfNyq9TDSYgHFDItNMgGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:2f:ab:49:c9:43:e5:f1:d1:80:99:b6:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=652fae2065cd47ae1c47eb54a192f7db1e2b6fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:1e:6b:08:4a:fd:f3:3c:0e:ca:ea:18:6b:
2d:4f:d2:75:6f:fb:76:ac:f3:de:1b:9c:4a:a4:5d:
db:97:9a:84:88:4b:76:5d:fd:1f:20:a5:11:e6:76:
24:0f:fb:2c:32:54:16:a1:63:0f:85:dd:73:27:a8:
1f:28:c6:bf:74:8a:62:b6:df:c0:e3:d4:86:5d:e2:
63:36:cd:1c:dc:f8:ae:ea:96:f0:58:6a:bc:25:c3:
0c:36:56:f1:6a:eb:ed:04:53:09:49:5c:da:4d:cf:
0e:78:d6:29:e0:b8:6d:61:b0:1c:d3:5c:b6:58:2b:
7d:dc:e4:59:91:e0:5e:18:8b:70:32:c7:2a:4d:c5:
3f:8a:28:56:7a:c8:05:61:3b:f7:2b:57:13:52:82:
9f:4a:f7:4d:3f:36:7d:bb:b8:f5:66:57:d7:3b:97:
05:d9:f5:fb:8f:54:3d:13:e6:69:f8:31:c7:1b:b9:
7a:48:ff:54:04:c7:cd:a8:da:31:a0:ed:09:04:12:
5b:02:0f:2a:93:27:e2:0c:e6:41:c2:31:ff:9f:d7:
7b:c4:a1:97:86:1e:80:40:9f:24:57:ee:f4:95:59:
d9:49:c8:e5:77:3f:37:a8:1a:4d:d8:07:6d:79:a9:
1e:68:bb:ac:82:79:23:13:ad:57:be:58:a6:ec:07:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:AE:20:65:CD:47:AE:1C:47:EB:54:A1:92:F7:DB:1E:2B:6F:E8
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:e8:e0:32:44:87:e3:59:66:70:74:8d:46:32:f0:17:eb:
8d:56:8c:a9:22:91:66:56:fe:c6:9a:e5:a9:00:89:65:78:3d:
9e:84:9a:db:71:fb:80:06:77:a0:58:ab:28:7c:f0:9b:78:df:
27:da:40:c6:98:45:62:95:c9:6a:74:98:36:9e:c7:86:0f:69:
38:d0:e8:0e:f6:fb:78:9f:7f:0d:15:74:f9:04:3b:bb:2b:a4:
b5:17:a0:c2:53:f0:94:c5:cf:50:86:dc:2a:1e:9d:6c:ea:c3:
9c:3a:7e:61:58:a1:5c:65:76:a8:8d:f1:30:79:fb:0c:d7:b9:
c3:92:20:d3:f2:9c:01:03:19:cb:16:c8:2e:f7:bf:e2:c8:c5:
66:62:28:a6:9b:c9:f8:8d:f2:37:11:d7:0e:d7:b3:cb:fc:0a:
4a:4b:a9:e4:34:fd:15:f8:49:a3:6b:3c:42:8e:bc:e4:6c:c5:
43:ac:f5:b9:77:8d:5a:20:2b:03:78:b4:ec:9b:ee:41:86:2a:
78:33:24:55:0e:29:ec:99:8c:c7:7c:c4:59:6b:ad:e6:3a:8a:
d8:58:46:29:91:e5:4f:75:6d:b8:5d:8c:09:85:33:d6:c6:1e:
9e:82:d7:7e:fb:7f:ed:cc:91:00:0a:b3:2d:73:4e:8e:88:87:
6c:14:89:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLYvq0nJQ+Xx0YCZtqeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi
YmRhNjYwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
Eyg2NTJmYWUyMDY1Y2Q0N2FlMWM0N2ViNTRhMTkyZjdkYjFlMmI2ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwkeawhK/fM8DsrqGGstT9J1b/t2
rPPeG5xKpF3bl5qEiEt2Xf0fIKUR5nYkD/ssMlQWoWMPhd1zJ6gfKMa/dIpitt/A
49SGXeJjNs0c3Piu6pbwWGq8JcMMNlbxauvtBFMJSVzaTc8OeNYp4LhtYbAc01y2
WCt93ORZkeBeGItwMscqTcU/iihWesgFYTv3K1cTUoKfSvdNPzZ9u7j1ZlfXO5cF
2fX7j1Q9E+Zp+DHHG7l6SP9UBMfNqNoxoO0JBBJbAg8qkyfiDOZBwjH/n9d7xKGX
hh6AQJ8kV+70lVnZScjldz83qBpN2AdteakeaLusgnkjE61Xvlim7AfIcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUvriBlzUeuHEfrVKGS99seK2/oMB8GA1UdIwQY
MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt
YzI0ZWUwNDk0NTQxLzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx
LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbbo4DJE
h+NZZnB0jUYy8BfrjVaMqSKRZlb+xprlqQCJZXg9noSa23H7gAZ3oFirKHzwm3jf
J9pAxphFYpXJanSYNp7Hhg9pONDoDvb7eJ9/DRV0+QQ7uyuktRegwlPwlMXPUIbc
Kh6dbOrDnDp+YVihXGV2qI3xMHn7DNe5w5Ig0/KcAQMZyxbILve/4sjFZmIoppvJ
+I3yNxHXDtezy/wKSkup5DT9FfhJo2s8Qo685GzFQ6z1uXeNWiArA3i07JvuQYYq
eDMkVQ4p7JmMx3zEWWut5jqK2FhGKZHlT3VtuF2MCYUz1sYenoLXfvt/7cyRAAqz
LXNOjoiHbBSJiw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:42 2025 by rpki-client