Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: lDtFvBuxunpW+to6sE7DjJr8x3J7pYNIjQLicqPn1GY=
Subject key identifier: 2C:2E:4C:5A:34:06:95:32:11:1D:FB:AE:42:F1:61:7C:95:02:0A:08
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0194BBCED0D8F5B49C25EA192FA56BC2CCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: zFSj4xha/MpranofdCbuNmtGfskxamzUZUI+Sk47CRA=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:d8:f5:b4:9c:25:ea:19:2f:a5:6b:c2:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=2c2e4c5a34069532111dfbae42f1617c95020a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:45:c1:38:ca:23:cd:4b:ba:03:13:17:45:
81:5e:a1:65:8a:48:e0:5a:0c:7f:4c:d4:56:52:6d:
a9:ab:da:ea:87:6c:04:6e:e7:6e:54:b0:f9:f9:03:
c4:df:d5:7a:85:d3:58:4a:d2:f7:9c:30:d4:99:b9:
fb:ec:09:be:03:1f:61:11:42:df:88:53:ee:97:72:
d7:d1:f9:14:3f:78:fb:47:97:b6:fd:c0:0c:c7:80:
5d:d2:12:bd:c7:8c:34:fd:f7:aa:c1:d0:c8:da:d5:
98:97:69:61:d1:82:19:9f:93:f1:f4:49:b5:58:c0:
14:83:00:2d:ef:6f:1d:1d:20:b3:0c:b3:70:24:81:
1b:58:68:15:c5:9b:c7:e0:f4:94:a1:83:15:72:9d:
fd:b9:65:07:dc:78:9b:24:5c:40:e0:78:50:87:e7:
54:44:cc:a0:0d:cd:ca:50:bf:61:77:fe:20:4a:c1:
23:39:e8:b4:e1:5f:d6:31:07:9c:fc:36:9c:af:80:
73:ac:17:a2:80:84:73:e6:8a:fb:70:63:2b:aa:ff:
dd:6e:95:66:23:8f:3f:6e:3a:68:0a:73:12:73:ba:
82:82:7a:bf:32:6a:cd:ec:b9:8e:9b:1f:73:03:e0:
5d:1e:e6:f6:fd:69:3f:c7:76:2b:f0:39:f8:db:09:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2E:4C:5A:34:06:95:32:11:1D:FB:AE:42:F1:61:7C:95:02:0A:08
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:82:84:58:bf:91:0f:61:db:19:29:06:f3:bb:65:0b:41:fb:
99:a5:72:ce:20:8b:17:63:73:e3:8f:a0:43:44:50:c5:8f:e2:
cb:0b:dc:42:7e:6e:9e:df:60:59:46:ff:f5:1c:f7:c9:93:7d:
24:24:7d:fc:29:12:c9:bf:42:33:e4:e5:88:ab:f4:33:9f:24:
bf:6f:04:5f:83:20:ed:89:aa:2c:a0:8e:bd:14:d1:0e:0d:b7:
32:4b:1a:9c:68:6b:95:c4:c2:b4:73:81:06:29:bb:ef:f3:90:
42:61:37:11:58:6e:10:d6:01:57:7b:44:29:63:9c:b2:fd:54:
b9:d5:be:4a:b9:1a:5c:26:76:dc:22:c7:69:f4:dc:56:f2:1b:
9a:cf:f5:9f:fc:f0:0e:2a:99:52:e4:5c:aa:b6:30:b1:7d:16:
dd:67:ed:c1:31:c5:7b:1e:4f:05:bc:0f:94:c6:21:64:49:d2:
e6:c4:49:87:fb:b5:fe:60:93:6c:f3:8b:16:5e:46:72:50:cb:
a7:1a:5a:09:d1:0a:a7:f5:9a:af:3e:5a:78:f3:c3:a1:aa:e6:
b9:53:cb:e4:4f:84:69:f2:59:e8:0b:9f:e2:f3:91:24:0d:1c:
33:4f:0a:71:ab:53:54:83:cf:c6:96:5d:e8:6a:dc:5e:ad:34:
e0:5b:f1:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztDY9bScJeoZL6VrwszLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzVmOGZhYzcwNjJmNzdmMjRiOThjZDVjM2I1NGE4OWJh
ZDQ4MzgwHhcNMjUwMTMxMTAwMTIwWhcNMjUwMjAxMTAwMTIwWjAzMTEwLwYDVQQD
EygyYzJlNGM1YTM0MDY5NTMyMTExZGZiYWU0MmYxNjE3Yzk1MDIwYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLxFwTjKI81LugMTF0WBXqFlikjg
Wgx/TNRWUm2pq9rqh2wEbuduVLD5+QPE39V6hdNYStL3nDDUmbn77Am+Ax9hEULf
iFPul3LX0fkUP3j7R5e2/cAMx4Bd0hK9x4w0/feqwdDI2tWYl2lh0YIZn5Px9Em1
WMAUgwAt728dHSCzDLNwJIEbWGgVxZvH4PSUoYMVcp39uWUH3HibJFxA4HhQh+dU
RMygDc3KUL9hd/4gSsEjOei04V/WMQec/Dacr4BzrBeigIRz5or7cGMrqv/dbpVm
I48/bjpoCnMSc7qCgnq/MmrN7LmOmx9zA+BdHub2/Wk/x3Yr8Dn42wligwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwuTFo0BpUyER37rkLxYXyVAgoIMB8GA1UdIwQY
MBaAFNU1+PrHBi938kuYzVw7VKibrUg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQt
YjMxMGQ3MWMyY2FkLzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8wOTdkYTEtN2NjOS00MzQzLTgwMjQtYjMxMGQ3MWMyY2Fk
LzEvMVRYNC1zY0dMM2Z5UzVqTlhEdFVxSnV0U0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYKEWL+R
D2HbGSkG87tlC0H7maVyziCLF2Nz44+gQ0RQxY/iywvcQn5unt9gWUb/9Rz3yZN9
JCR9/CkSyb9CM+TliKv0M58kv28EX4Mg7YmqLKCOvRTRDg23MksanGhrlcTCtHOB
Bim77/OQQmE3EVhuENYBV3tEKWOcsv1UudW+SrkaXCZ23CLHafTcVvIbms/1n/zw
DiqZUuRcqrYwsX0W3WftwTHFex5PBbwPlMYhZEnS5sRJh/u1/mCTbPOLFl5GclDL
pxpaCdEKp/Warz5aePPDoarmuVPL5E+EafJZ6Auf4vORJA0cM08KcatTVIPPxpZd
6GrcXq004FvxiQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:55 2025 by rpki-client