Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier: pQ00n3XF1yvSSkzrkwVrHH4Tta/TpmX0aLUk50TN4lg=
Subject key identifier: EF:13:EC:F9:E2:1B:6F:BA:36:CE:F2:E5:86:DE:54:AC:76:D7:99:E2
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial: 0194BC3BC1704B972DB44A3F464A5F1A6E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number: 039B
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: oHUBc7oQENaIEl9+zCLoj4UDn1aSmArkAsslZ196iiM=)
2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c1:70:4b:97:2d:b4:4a:3f:46:4a:5f:1a:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=ef13ecf9e21b6fba36cef2e586de54ac76d799e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:95:9f:18:29:ac:29:96:f6:55:ce:20:ac:
c5:f1:09:4c:e1:ce:6a:97:7d:8b:dd:ad:50:0e:91:
b5:4b:fb:bd:bd:f4:32:22:6e:60:39:2e:4c:7a:89:
ea:3c:1b:3c:22:8d:cf:48:56:99:d1:64:07:84:29:
b5:91:d5:14:dd:c8:85:ec:91:0a:4c:1f:3a:ff:e9:
5b:0d:6f:c3:e1:29:5b:a7:f5:27:08:54:a7:f0:56:
fb:ae:44:20:5b:08:ac:70:5f:85:24:a6:7b:73:e6:
8e:c1:30:01:ee:4d:fa:ab:0f:93:b3:3a:1f:84:39:
44:c5:3f:72:1a:60:8c:df:3e:45:3e:66:29:a3:46:
d1:ff:63:55:77:cf:cd:e4:2a:fd:b6:ca:d2:c0:3b:
35:64:ad:4e:7e:43:7f:97:d9:c3:c2:fb:90:a8:60:
26:8d:91:a9:27:f9:92:2c:2a:fa:fe:fb:ab:5a:3d:
ef:ee:56:8e:ff:bc:69:98:b6:60:64:02:db:6c:ba:
d0:8a:f2:8e:d7:60:9b:2e:79:60:85:de:2d:27:f3:
96:32:be:b9:93:28:0e:5f:b9:b1:fa:95:7e:31:b7:
cd:6a:bc:64:f6:22:c5:b3:4f:20:e8:7c:03:0e:2f:
3d:54:42:5b:18:a5:d3:59:26:02:8a:a9:be:6d:8b:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:EC:F9:E2:1B:6F:BA:36:CE:F2:E5:86:DE:54:AC:76:D7:99:E2
X509v3 Authority Key Identifier:
keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:84:f5:b0:63:63:e9:3b:b3:b0:19:20:1c:be:20:77:64:
1c:9e:7d:c0:2b:04:0c:19:ee:c8:c8:81:da:2b:02:59:ea:78:
62:db:c4:de:ec:7a:47:66:0d:db:da:bd:11:09:8c:57:9a:78:
17:1b:3f:47:de:57:65:bf:0a:47:5d:0d:27:41:c8:79:25:f3:
7b:b7:d1:b5:2b:5d:b2:7b:3d:2f:64:e5:6a:95:cd:0b:01:ea:
2d:e9:74:50:0d:5d:7c:c2:55:67:b9:86:12:18:90:c4:d2:a9:
69:61:86:18:12:c3:c7:34:dc:69:18:53:fe:5b:7a:c8:0d:c0:
76:da:3c:32:69:6d:b4:6a:bd:a3:70:93:5d:47:05:22:67:05:
46:fd:b5:c5:9e:b1:87:18:ca:cb:04:a7:05:d9:28:f5:92:c5:
c5:46:4e:e2:db:3a:06:1e:21:5f:67:6d:fd:56:59:56:1d:84:
08:de:b1:e0:c2:1d:e1:9b:9b:e8:e1:f2:de:0b:f2:66:b4:52:
21:7f:52:f9:a9:22:10:aa:71:4b:19:0b:fd:6f:2b:55:d5:0b:
2e:27:bd:c5:4c:0c:d9:78:d9:40:4b:da:bb:8c:1a:64:09:80:
e0:f5:52:33:ae:c1:c8:70:76:75:fe:7c:4a:9f:95:eb:f7:4e:
a3:88:a5:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8FwS5cttEo/RkpfGm5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTAxZmY1MWI2N2VlZmUwZDY3ODAwZTc2ZDM2MDZkZjRj
OTQ3MjEwHhcNMjUwMTMxMTIwMDIwWhcNMjUwMjAxMTIwMDIwWjAzMTEwLwYDVQQD
EyhlZjEzZWNmOWUyMWI2ZmJhMzZjZWYyZTU4NmRlNTRhYzc2ZDc5OWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEeVnxgprCmW9lXOIKzF8QlM4c5q
l32L3a1QDpG1S/u9vfQyIm5gOS5MeonqPBs8Io3PSFaZ0WQHhCm1kdUU3ciF7JEK
TB86/+lbDW/D4Slbp/UnCFSn8Fb7rkQgWwiscF+FJKZ7c+aOwTAB7k36qw+Tszof
hDlExT9yGmCM3z5FPmYpo0bR/2NVd8/N5Cr9tsrSwDs1ZK1OfkN/l9nDwvuQqGAm
jZGpJ/mSLCr6/vurWj3v7laO/7xpmLZgZALbbLrQivKO12CbLnlghd4tJ/OWMr65
kygOX7mx+pV+MbfNarxk9iLFs08g6HwDDi89VEJbGKXTWSYCiqm+bYulfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8T7PniG2+6Ns7y5YbeVKx215niMB8GA1UdIwQY
MBaAFEwQH/UbZ+7+DWeADnbTYG30yUchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQt
Y2NhYTZlYjNjNTEzLzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQtY2NhYTZlYjNjNTEz
LzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfviE9bBj
Y+k7s7AZIBy+IHdkHJ59wCsEDBnuyMiB2isCWep4YtvE3ux6R2YN29q9EQmMV5p4
Fxs/R95XZb8KR10NJ0HIeSXze7fRtStdsns9L2TlapXNCwHqLel0UA1dfMJVZ7mG
EhiQxNKpaWGGGBLDxzTcaRhT/lt6yA3Adto8MmlttGq9o3CTXUcFImcFRv21xZ6x
hxjKywSnBdko9ZLFxUZO4ts6Bh4hX2dt/VZZVh2ECN6x4MId4Zub6OHy3gvyZrRS
IX9S+akiEKpxSxkL/W8rVdULLie9xUwM2XjZQEvau4waZAmA4PVSM67ByHB2df58
Sp+V6/dOo4ilqw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:05 2025 by rpki-client