Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: uG247KIQwuKNcBdkKgHA0THIa4fkwJ63P6NRPKL66K8=
Subject key identifier: B3:2B:46:0C:9A:FC:94:5E:9A:F8:04:F2:6D:55:6E:61:A4:08:41:36
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 0194BC3C1780FCDBEE201E26186AA5272CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: YIfmotl2f+B/pMe3GOGMXXXTTkCnjFx9yJRTMHzRfDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:80:fc:db:ee:20:1e:26:18:6a:a5:27:2c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=b32b460c9afc945e9af804f26d556e61a4084136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:13:b6:55:8b:ed:09:60:47:46:76:13:56:
10:5e:02:44:06:91:19:6e:c5:03:4d:db:9d:d2:9c:
4f:3f:8d:a7:07:2f:b8:ee:24:de:99:3c:f0:d6:74:
39:af:33:4a:06:99:fd:ed:c3:32:87:99:9f:03:2e:
7b:04:a4:a6:fb:7d:7e:25:ef:61:ba:20:bc:7e:73:
8b:6d:4e:8b:d7:dc:6b:fc:08:20:63:e6:94:dd:c4:
9e:ee:4b:9c:2f:92:27:8d:63:05:03:74:8a:7e:e3:
d5:ec:29:b3:99:f1:bf:4b:ec:f5:50:eb:e1:1d:62:
b5:cf:84:2e:d4:f8:80:5a:f1:3b:4a:e1:ed:a2:96:
09:32:fd:12:1a:7a:ae:74:2e:36:65:ad:9a:bc:5f:
0b:7e:93:1c:f3:1b:ec:29:64:08:3e:42:00:b9:a6:
61:8d:45:75:cb:63:3a:71:f3:af:25:9f:12:13:cd:
32:7d:1c:ba:38:e8:3f:8d:d8:97:ee:7b:56:56:a0:
b3:0b:bf:b1:a2:98:1f:4d:4f:ae:2d:c6:df:89:48:
dd:6e:04:25:5c:94:97:ca:09:c2:f3:a2:d6:84:ef:
63:21:68:a9:f8:64:7d:0c:79:11:b0:e4:2a:de:c3:
46:1f:46:f9:1f:bf:a4:05:41:dd:5a:e0:2c:fd:60:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:46:0C:9A:FC:94:5E:9A:F8:04:F2:6D:55:6E:61:A4:08:41:36
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:71:63:69:51:62:87:44:62:90:aa:71:12:49:a4:4f:63:7c:
1e:f0:6e:1b:d2:16:70:23:a3:0e:39:28:c1:cc:ee:c3:e2:af:
1f:86:32:61:14:1f:19:08:d1:04:5a:61:92:2e:c2:9a:cc:49:
b7:79:69:20:e1:06:2b:7b:a3:26:f7:07:06:7e:ad:c2:40:22:
eb:37:65:b5:47:f2:c7:c6:0b:07:d3:cd:63:a2:75:8b:68:09:
12:bd:5f:dd:af:5c:43:29:c8:62:67:56:2a:af:12:1f:96:c5:
0a:bc:e4:a1:11:b7:32:ae:d0:0b:bb:3d:f4:87:cc:3f:c7:d3:
91:ba:35:85:a6:da:89:29:fc:4f:cb:de:b0:2b:ee:36:26:e8:
e1:92:84:33:dc:92:83:c0:2d:a2:0d:c5:f4:7f:21:29:e3:be:
4d:d1:38:f7:69:8f:cc:96:b7:2f:23:b8:c7:6d:bf:ea:d0:f6:
cd:c0:15:22:d0:d9:1d:0f:c9:b3:3b:ed:aa:eb:15:98:96:b5:
e4:64:1c:c5:93:76:f8:31:ca:77:f2:f2:81:83:0e:8c:f7:4a:
bd:a7:eb:7f:45:af:cd:73:1a:29:91:5e:93:23:de:9c:58:cb:
00:02:4e:4b:80:6b:c6:17:db:c5:3f:97:2d:83:f0:93:45:3a:
92:d4:4e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBeA/NvuIB4mGGqlJyzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0
NTRhMTkwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
EyhiMzJiNDYwYzlhZmM5NDVlOWFmODA0ZjI2ZDU1NmU2MWE0MDg0MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWgTtlWL7QlgR0Z2E1YQXgJEBpEZ
bsUDTdud0pxPP42nBy+47iTemTzw1nQ5rzNKBpn97cMyh5mfAy57BKSm+31+Je9h
uiC8fnOLbU6L19xr/AggY+aU3cSe7kucL5InjWMFA3SKfuPV7CmzmfG/S+z1UOvh
HWK1z4Qu1PiAWvE7SuHtopYJMv0SGnqudC42Za2avF8LfpMc8xvsKWQIPkIAuaZh
jUV1y2M6cfOvJZ8SE80yfRy6OOg/jdiX7ntWVqCzC7+xopgfTU+uLcbfiUjdbgQl
XJSXygnC86LWhO9jIWip+GR9DHkRsOQq3sNGH0b5H7+kBUHdWuAs/WDQkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMrRgya/JRemvgE8m1VbmGkCEE2MB8GA1UdIwQY
MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt
ZDI0NDFlOGY2YzdhLzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh
LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnFjaVFi
h0RikKpxEkmkT2N8HvBuG9IWcCOjDjkowczuw+KvH4YyYRQfGQjRBFphki7CmsxJ
t3lpIOEGK3ujJvcHBn6twkAi6zdltUfyx8YLB9PNY6J1i2gJEr1f3a9cQynIYmdW
Kq8SH5bFCrzkoRG3Mq7QC7s99IfMP8fTkbo1habaiSn8T8vesCvuNibo4ZKEM9yS
g8Atog3F9H8hKeO+TdE492mPzJa3LyO4x22/6tD2zcAVItDZHQ/JszvtqusVmJa1
5GQcxZN2+DHKd/LygYMOjPdKvafrf0WvzXMaKZFekyPenFjLAAJOS4BrxhfbxT+X
LYPwk0U6ktROrw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:20 2025 by rpki-client