Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: a/lEnkzLKPM+y8KgAdHSeRNn6Uktie9/Z9pzft3Kpy0=
Subject key identifier: BB:43:C0:85:A1:B0:9D:92:27:05:BF:79:01:E2:08:91:9C:0C:69:B4
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 0194BC729E1DFC37344061E2C7C0FCF89D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 126D
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: 8dIZyTeciOC3hJmtQnBNJtCw5uul3yi3G9Sm3Fzi/AY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:1d:fc:37:34:40:61:e2:c7:c0:fc:f8:9d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=bb43c085a1b09d922705bf7901e208919c0c69b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:95:d6:76:09:f4:8f:44:9c:2c:8a:43:75:
d4:b7:7b:d0:b7:06:02:30:03:dc:78:2a:54:d3:23:
15:c3:d0:e8:10:27:d4:64:9c:af:ab:21:fa:9e:19:
41:2f:5f:b4:f3:81:05:83:94:16:8d:2b:c3:f8:1c:
0b:db:03:c2:c7:ed:ad:73:a4:1f:4b:f3:8a:58:2e:
f3:ec:be:ab:9b:96:fe:20:d4:4b:93:4e:e3:c6:cf:
83:bb:fa:4d:c2:88:4d:7e:8b:91:98:f8:7c:73:0f:
5e:bd:11:09:dd:d0:d4:ff:ce:cc:31:c8:22:bf:47:
77:1a:8c:22:d6:6d:e5:6d:4e:91:18:68:fa:60:7c:
17:8e:b1:93:64:b8:b1:b1:f9:61:af:67:ba:fa:48:
00:f3:11:1c:e7:db:2c:5b:c1:83:05:15:ed:e6:16:
36:01:c5:ee:83:cb:09:cf:8a:d2:70:9e:84:03:8e:
01:b3:68:ca:d7:b4:46:dd:b9:5b:7e:e5:24:d5:4c:
e9:f8:0d:ee:6b:2c:4f:13:db:ca:1c:52:48:7b:7a:
77:7f:54:2f:b4:48:a0:fe:54:56:20:47:cf:99:ac:
ea:9d:84:d6:97:b2:56:f8:54:0f:c5:ed:66:bd:dc:
44:6a:7a:2d:d0:c4:97:14:8b:ff:d9:69:74:31:41:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:43:C0:85:A1:B0:9D:92:27:05:BF:79:01:E2:08:91:9C:0C:69:B4
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:fa:ee:a8:ef:9e:c0:ed:af:6d:01:d0:44:27:0e:47:d3:
83:18:d2:2b:ed:b8:38:13:b0:12:3f:90:ee:80:7e:e3:58:6a:
5e:68:3d:fa:5e:a6:2d:ab:57:a9:cf:a8:e1:03:80:c4:7b:2c:
c1:1d:9a:e7:53:8d:e9:7a:62:80:7d:cb:ab:e3:04:91:59:4b:
74:c8:9c:1f:a5:c7:3a:4e:dd:0d:36:c0:02:78:51:51:e1:7e:
a7:6e:69:64:53:8f:81:fe:88:78:08:58:e0:fa:9f:35:70:e9:
5b:79:73:ce:ef:94:64:0b:d3:9d:e2:cc:f0:cc:c4:a3:44:5a:
93:13:49:97:4b:1f:5f:d0:38:2c:dc:46:c8:1c:83:b5:2a:29:
0d:a9:81:84:e9:d3:1a:77:0e:01:81:2f:8f:0e:c5:4c:26:cf:
0f:cf:a9:2b:17:ed:e0:a7:0f:a1:da:31:f1:3b:07:68:19:67:
94:6b:bc:52:10:f9:a6:2f:4e:e0:8f:02:87:f0:c3:f1:2c:97:
4e:54:e2:c9:3e:09:68:3d:aa:be:67:f5:d8:6a:db:ce:e2:ad:
31:33:b2:3f:9f:f5:8b:2d:1a:b3:d2:37:2e:40:eb:af:bb:16:
89:25:a5:74:77:93:50:d6:91:58:43:d9:99:9c:86:be:c8:d9:
c6:09:c0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cp4d/Dc0QGHix8D8+J1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4
MzIwYzUwHhcNMjUwMTMxMTMwMDE1WhcNMjUwMjAxMTMwMDE1WjAzMTEwLwYDVQQD
EyhiYjQzYzA4NWExYjA5ZDkyMjcwNWJmNzkwMWUyMDg5MTljMGM2OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmWV1nYJ9I9EnCyKQ3XUt3vQtwYC
MAPceCpU0yMVw9DoECfUZJyvqyH6nhlBL1+084EFg5QWjSvD+BwL2wPCx+2tc6Qf
S/OKWC7z7L6rm5b+INRLk07jxs+Du/pNwohNfouRmPh8cw9evREJ3dDU/87MMcgi
v0d3Gowi1m3lbU6RGGj6YHwXjrGTZLixsflhr2e6+kgA8xEc59ssW8GDBRXt5hY2
AcXug8sJz4rScJ6EA44Bs2jK17RG3blbfuUk1Uzp+A3uayxPE9vKHFJIe3p3f1Qv
tEig/lRWIEfPmazqnYTWl7JW+FQPxe1mvdxEanot0MSXFIv/2Wl0MUGoQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtDwIWhsJ2SJwW/eQHiCJGcDGm0MB8GA1UdIwQY
MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt
NTcyOGZiMjRiZjBlLzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl
LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHr67qjv
nsDtr20B0EQnDkfTgxjSK+24OBOwEj+Q7oB+41hqXmg9+l6mLatXqc+o4QOAxHss
wR2a51ON6XpigH3Lq+MEkVlLdMicH6XHOk7dDTbAAnhRUeF+p25pZFOPgf6IeAhY
4PqfNXDpW3lzzu+UZAvTneLM8MzEo0RakxNJl0sfX9A4LNxGyByDtSopDamBhOnT
GncOAYEvjw7FTCbPD8+pKxft4KcPodox8TsHaBlnlGu8UhD5pi9O4I8Ch/DD8SyX
TlTiyT4JaD2qvmf12GrbzuKtMTOyP5/1iy0as9I3LkDrr7sWiSWldHeTUNaRWEPZ
mZyGvsjZxgnAVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:00 2025 by rpki-client