Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
File: TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft (raw, json)
Hash identifier: 3QyHL/dn9sNAkfgGOaRARcqPiYif73swSsCBdI+Jz8E=
Subject key identifier: 8C:9A:02:80:FC:19:0B:9C:50:81:E3:A5:37:79:8B:31:C0:A3:30:07
Authority key identifier: 4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
Certificate issuer: /CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Certificate serial: 0194BC731F58E0A4BE71F748AEB57D638308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
Manifest number: 11F0
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: HJZuFg-aBDGic40vRoWhakH94Zo.roa (hash: b1vEsVgABbRc+hOZI2FcJP4+qO85CVqkQZmViTsB2bU=)
2: TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl (hash: 5GhZHigHv+/y+QjgSFXIv+kBoeEt9ymLXwgG2eYDzlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1f:58:e0:a4:be:71:f7:48:ae:b5:7d:63:83:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea5b2f37524c3d38dc80a71d8f001ed2c45e89c
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=8c9a0280fc190b9c5081e3a537798b31c0a33007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:cb:a5:73:63:d8:b3:68:e9:40:d5:30:d2:
14:3d:2c:7a:9e:42:c5:9d:0d:ba:5a:2e:d5:d2:1a:
a8:21:4d:42:bc:fb:6e:e7:66:0b:34:66:10:d9:77:
02:d5:27:3f:dc:5d:b6:3d:4f:8f:08:12:c1:20:5b:
79:b5:24:70:7b:01:d3:f1:9d:bb:40:e9:90:e4:8d:
5b:b3:08:39:65:b4:2d:d2:c7:54:4d:fa:66:9b:29:
04:58:58:d6:6e:c9:b5:eb:01:64:44:5d:54:52:32:
3a:b0:33:66:90:56:6b:9d:55:0a:61:0a:99:6b:10:
99:16:dc:79:8a:9a:82:39:21:9f:30:7e:6b:36:a0:
f4:88:7e:07:7f:92:2e:92:4a:73:51:f5:09:2e:32:
d7:d1:80:19:54:7e:5b:8e:a1:1b:5f:18:59:25:68:
61:c4:b2:c6:f5:b1:9c:7a:cf:d1:2b:89:8e:40:1b:
a5:46:5b:f0:32:52:ce:e7:20:5f:98:60:38:7a:3a:
a3:21:32:ea:e0:f5:dc:a2:e6:a5:12:9c:68:47:4f:
70:fc:be:07:67:10:17:ce:da:aa:cb:9e:2b:65:21:
4d:68:e2:e0:79:eb:73:9b:a9:75:9f:cf:62:55:c3:
d6:86:fd:44:28:98:5a:34:ca:46:ea:64:ff:51:7f:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9A:02:80:FC:19:0B:9C:50:81:E3:A5:37:79:8B:31:C0:A3:30:07
X509v3 Authority Key Identifier:
keyid:4E:A5:B2:F3:75:24:C3:D3:8D:C8:0A:71:D8:F0:01:ED:2C:45:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqWy83Ukw9ONyApx2PAB7SxF6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9041b7-f543-4c63-8e2b-366a9761ea20/1/TqWy83Ukw9ONyApx2PAB7SxF6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:96:53:ff:7e:74:a4:72:c5:2c:04:d2:d2:27:a9:25:31:
01:54:9d:98:2a:e6:6c:1f:dd:6f:3b:f1:a9:39:ef:52:32:c2:
39:75:b1:4c:c7:bc:86:12:8d:49:10:5f:f1:58:64:14:bc:95:
71:13:3e:e6:c7:ce:ae:76:c2:62:f4:1c:5d:b8:82:f9:f4:75:
29:86:7c:37:f8:60:7f:a8:b6:b9:98:c5:67:e3:e0:44:f8:87:
e6:06:ad:9d:44:bd:88:7d:4f:cc:0d:ce:c8:ee:15:66:e9:c6:
44:b4:c0:a1:6d:7d:f5:c4:0f:28:9e:52:c6:21:bf:87:92:a0:
98:ef:71:96:d9:e4:bb:82:68:d8:2b:a5:58:b7:f9:3b:b8:e3:
2c:9d:d8:02:34:12:c1:73:c7:d8:3a:17:23:a9:39:ef:5f:79:
37:84:7c:e0:96:f2:ef:5c:0e:dd:7e:19:4d:36:fe:31:f5:b0:
9b:d7:b3:61:b1:72:6f:f3:79:40:f0:b0:05:5a:a0:a4:2f:49:
ea:d3:e9:65:f3:91:c3:4e:ac:d5:26:bc:a1:12:f7:59:a8:dc:
c0:43:83:b8:d0:ae:b1:be:67:ae:69:cf:fe:ed:f7:58:64:5f:
7c:fb:76:2f:5d:3e:11:3e:18:bf:49:9d:07:22:6b:39:24:76:
35:41:b6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx9Y4KS+cfdIrrV9Y4MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTViMmYzNzUyNGMzZDM4ZGM4MGE3MWQ4ZjAwMWVkMmM0
NWU4OWMwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
Eyg4YzlhMDI4MGZjMTkwYjljNTA4MWUzYTUzNzc5OGIzMWMwYTMzMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnLpXNj2LNo6UDVMNIUPSx6nkLF
nQ26Wi7V0hqoIU1CvPtu52YLNGYQ2XcC1Sc/3F22PU+PCBLBIFt5tSRwewHT8Z27
QOmQ5I1bswg5ZbQt0sdUTfpmmykEWFjWbsm16wFkRF1UUjI6sDNmkFZrnVUKYQqZ
axCZFtx5ipqCOSGfMH5rNqD0iH4Hf5IukkpzUfUJLjLX0YAZVH5bjqEbXxhZJWhh
xLLG9bGces/RK4mOQBulRlvwMlLO5yBfmGA4ejqjITLq4PXcoualEpxoR09w/L4H
ZxAXztqqy54rZSFNaOLgeetzm6l1n89iVcPWhv1EKJhaNMpG6mT/UX9HHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyaAoD8GQucUIHjpTd5izHAozAHMB8GA1UdIwQY
MBaAFE6lsvN1JMPTjcgKcdjwAe0sReicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmIt
MzY2YTk3NjFlYTIwLzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS85MDQxYjctZjU0My00YzYzLThlMmItMzY2YTk3NjFlYTIw
LzEvVHFXeTgzVWt3OU9OeUFweDJQQUI3U3hGNkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSWWU/9+
dKRyxSwE0tInqSUxAVSdmCrmbB/dbzvxqTnvUjLCOXWxTMe8hhKNSRBf8VhkFLyV
cRM+5sfOrnbCYvQcXbiC+fR1KYZ8N/hgf6i2uZjFZ+PgRPiH5gatnUS9iH1PzA3O
yO4VZunGRLTAoW199cQPKJ5SxiG/h5KgmO9xltnku4Jo2CulWLf5O7jjLJ3YAjQS
wXPH2DoXI6k57195N4R84Jby71wO3X4ZTTb+MfWwm9ezYbFyb/N5QPCwBVqgpC9J
6tPpZfORw06s1Sa8oRL3WajcwEODuNCusb5nrmnP/u33WGRffPt2L10+ET4Yv0md
ByJrOSR2NUG2eA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:41 2025 by rpki-client