Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
File: tgtXTwPZiBVfRLossHvH37RXzw8.mft (raw, json)
Hash identifier: Cqfj/6TVmY+8c0RBuQs6CDlnMqSn6MEzTRfYasoLHd8=
Subject key identifier: 04:E0:81:55:D1:F7:68:68:8F:02:ED:E1:B0:FB:ED:58:2A:83:DF:D6
Authority key identifier: B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
Certificate issuer: /CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Certificate serial: 0194BBCECEE3B9E0CB697E5EFC625517D100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: BeOIJLd8_MIXUGufXTnw_YPsJgs.roa (hash: UFekJjmZxy4vjH3dPZliRBeAZT4NRRq/0IMLKsXu0f8=)
2: tgtXTwPZiBVfRLossHvH37RXzw8.crl (hash: 57757Jdw97407hIdHx2hGDbYRwWuIITRQffCiv7x6h4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ce:e3:b9:e0:cb:69:7e:5e:fc:62:55:17:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60b574f03d988155f44ba2cb07bc7dfb457cf0f
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=04e08155d1f768688f02ede1b0fbed582a83dfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:73:84:95:ce:7e:66:29:12:4f:b6:db:f5:
d4:b2:d9:49:40:61:2b:47:1b:9c:8c:87:db:29:86:
23:89:5f:f9:d0:7b:84:eb:6d:ce:d6:41:14:3b:16:
e2:4c:8d:a0:1a:52:65:d4:72:8f:5b:eb:cd:19:ab:
ed:20:ec:18:ba:34:21:91:3d:ad:68:df:85:34:7e:
bc:5f:7b:ba:81:3a:0a:91:89:1b:e6:8c:ca:c8:b3:
8d:ed:8b:9a:ff:b7:b2:a2:a6:e1:8d:a8:07:21:f3:
d6:39:1e:16:83:32:4c:20:fa:77:68:0c:34:60:49:
af:9e:75:3a:03:62:08:8a:fb:17:e5:cb:fc:88:1c:
6f:53:a9:30:4d:f3:86:53:01:92:4e:1b:18:82:ae:
f7:59:e2:63:84:69:c6:ab:6c:f0:ec:48:8f:1e:0d:
d1:08:f2:0f:f1:dd:98:d4:98:ca:75:3f:2b:ae:1f:
c3:93:68:84:64:1f:1e:95:b5:29:0a:33:3c:c4:f9:
0e:1b:1f:84:34:20:56:3e:65:80:e9:ed:e9:73:88:
21:1c:31:f9:bf:fc:01:42:e8:c2:e9:46:1f:a1:d3:
a4:3d:33:d2:9d:34:ea:64:3f:2d:56:94:4f:d2:5b:
24:d4:da:cd:13:df:97:ec:5f:a7:68:6b:f2:d5:96:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:81:55:D1:F7:68:68:8F:02:ED:E1:B0:FB:ED:58:2A:83:DF:D6
X509v3 Authority Key Identifier:
keyid:B6:0B:57:4F:03:D9:88:15:5F:44:BA:2C:B0:7B:C7:DF:B4:57:CF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgtXTwPZiBVfRLossHvH37RXzw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d95b2c-1e02-4e4e-8438-bbcae0df1f2f/1/tgtXTwPZiBVfRLossHvH37RXzw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:62:fd:04:85:6a:aa:4c:a2:4c:60:6c:30:da:f8:ca:e4:eb:
d2:c3:c9:8a:2b:e9:71:54:2c:bc:8e:bc:0f:60:e5:ec:76:eb:
fe:2b:8a:27:5c:ee:e6:69:3e:af:30:aa:20:68:da:9c:a7:f4:
4c:0c:72:38:19:a8:e9:28:99:58:9b:67:96:53:14:81:10:5b:
77:62:52:2a:b5:15:5b:eb:38:43:24:74:d9:6e:91:89:f3:61:
e9:57:b4:ae:7f:73:bf:aa:bb:2e:e8:d5:ff:14:52:5e:e1:f2:
95:c7:f3:d1:87:ed:15:70:b8:d7:99:8d:3c:b5:7c:3a:5a:e0:
78:b2:7b:99:cb:22:b4:53:99:eb:72:25:00:20:a6:21:d5:20:
c1:31:91:e8:c4:16:ed:eb:ac:96:62:17:4a:71:d8:cc:e1:db:
8f:6d:2b:7b:25:5c:1f:4f:7f:3a:22:8a:be:e8:a7:35:c3:ea:
5e:7b:98:ae:0b:09:7e:85:a4:b6:40:a7:7d:47:05:04:37:68:
f4:ed:6d:ba:b3:0e:6a:23:da:12:4a:0b:47:cc:28:00:6e:f3:
d2:47:7b:9f:77:81:2b:66:04:a1:b2:62:94:9d:b0:25:4f:82:
4a:a4:01:ad:d5:34:73:13:18:70:6b:39:3b:e8:1d:49:cf:38:
20:fb:1f:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zs7jueDLaX5e/GJVF9EAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGI1NzRmMDNkOTg4MTU1ZjQ0YmEyY2IwN2JjN2RmYjQ1
N2NmMGYwHhcNMjUwMTMxMTAwMTIwWhcNMjUwMjAxMTAwMTIwWjAzMTEwLwYDVQQD
EygwNGUwODE1NWQxZjc2ODY4OGYwMmVkZTFiMGZiZWQ1ODJhODNkZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18RzhJXOfmYpEk+22/XUstlJQGEr
RxucjIfbKYYjiV/50HuE623O1kEUOxbiTI2gGlJl1HKPW+vNGavtIOwYujQhkT2t
aN+FNH68X3u6gToKkYkb5ozKyLON7Yua/7eyoqbhjagHIfPWOR4WgzJMIPp3aAw0
YEmvnnU6A2IIivsX5cv8iBxvU6kwTfOGUwGSThsYgq73WeJjhGnGq2zw7EiPHg3R
CPIP8d2Y1JjKdT8rrh/Dk2iEZB8elbUpCjM8xPkOGx+ENCBWPmWA6e3pc4ghHDH5
v/wBQujC6UYfodOkPTPSnTTqZD8tVpRP0lsk1NrNE9+X7F+naGvy1ZZA+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATggVXR92hojwLt4bD77Vgqg9/WMB8GA1UdIwQY
MBaAFLYLV08D2YgVX0S6LLB7x9+0V88PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0Mzgt
YmJjYWUwZGYxZjJmLzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTViMmMtMWUwMi00ZTRlLTg0MzgtYmJjYWUwZGYxZjJm
LzEvdGd0WFR3UFppQlZmUkxvc3NIdkgzN1JYenc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2L9BIVq
qkyiTGBsMNr4yuTr0sPJiivpcVQsvI68D2Dl7Hbr/iuKJ1zu5mk+rzCqIGjanKf0
TAxyOBmo6SiZWJtnllMUgRBbd2JSKrUVW+s4QyR02W6RifNh6Ve0rn9zv6q7LujV
/xRSXuHylcfz0YftFXC415mNPLV8OlrgeLJ7mcsitFOZ63IlACCmIdUgwTGR6MQW
7euslmIXSnHYzOHbj20reyVcH09/OiKKvuinNcPqXnuYrgsJfoWktkCnfUcFBDdo
9O1turMOaiPaEkoLR8woAG7z0kd7n3eBK2YEobJilJ2wJU+CSqQBrdU0cxMYcGs5
O+gdSc84IPsfHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:33 2025 by rpki-client