
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: xPvBZBA2ss1bVCG2Yx1HuiA8r41F66kGaQuGUcvrAq4=
Subject key identifier: 3F:49:9D:32:A1:30:79:30:0E:A1:08:D9:DB:9B:F3:4E:4B:5A:BE:07
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 0194BBCDFA3760BF054C5EB2AE957C6DEA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=)
2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: Vcls3H1BPPubhuTAMSbcvI014khglvknBX3LXMaQTL4=)
4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:37:60:bf:05:4c:5e:b2:ae:95:7c:6d:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=3f499d32a13079300ea108d9db9bf34e4b5abe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:45:e0:8b:fd:e3:df:76:f7:ef:f6:22:c6:
06:88:7a:72:5b:01:bc:2d:f9:97:36:ba:a3:a5:72:
6e:e4:79:3d:0d:07:26:e1:15:11:ba:d1:e2:97:05:
86:8b:e3:6a:3a:46:13:83:29:aa:fa:7a:62:ea:d5:
0e:09:15:b1:e0:d2:a0:95:b7:e9:c7:68:bd:4d:d9:
a5:67:bb:61:38:c9:ce:9e:e5:b2:ad:de:4a:12:1b:
b8:34:56:15:a7:56:a8:79:e9:d5:53:8b:fb:63:ad:
fc:13:ae:5f:3b:aa:ae:3d:1a:28:1a:d4:0d:51:ae:
52:15:c4:a4:18:de:c6:d8:26:0f:54:c2:7f:88:e3:
48:7c:23:0c:82:44:e4:91:03:1b:42:a2:bc:d5:54:
ab:cf:10:37:dc:e3:bd:8e:47:5f:c8:95:1b:a5:93:
38:f9:b6:88:44:df:0f:a3:ac:b8:54:c6:c6:da:79:
78:41:5a:45:05:07:70:f9:bb:c3:dd:a9:ed:89:8f:
4b:2a:51:b2:f5:a4:60:92:7f:ef:65:91:5f:52:1b:
41:22:5e:10:bf:0b:d4:4f:1f:43:90:f9:8c:da:fd:
85:15:98:b0:e7:18:13:57:4f:d2:0a:b7:5b:02:b0:
7b:c2:dc:c6:99:c9:cb:26:20:f6:8d:6f:8d:d2:9d:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:9D:32:A1:30:79:30:0E:A1:08:D9:DB:9B:F3:4E:4B:5A:BE:07
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a2:86:80:40:27:8f:ee:8f:3f:59:4b:74:a3:35:c3:9b:f8:
e6:ba:3c:45:21:c2:e8:18:f2:8e:9f:b8:8f:bf:2a:1a:51:e6:
c8:5c:a3:f0:3a:93:50:f3:e0:25:27:6f:40:d8:50:4b:eb:7d:
57:4b:1e:0e:1c:94:cf:c8:e8:20:84:23:95:17:79:0d:9f:de:
7f:12:06:81:bc:b5:f6:1c:09:02:62:e7:f9:36:b8:68:49:d3:
67:90:26:24:f5:b5:cb:20:d2:6b:eb:7f:e8:54:77:a8:5d:4e:
4e:ba:0c:7f:06:a4:22:08:31:66:85:5f:03:ed:74:36:6f:5f:
0f:b6:5e:c9:3d:2d:ae:37:f7:e7:95:6b:e9:a9:ad:c2:82:21:
db:68:cb:e8:13:3d:d1:15:6d:c0:4c:34:a1:bb:bd:53:ca:8d:
b6:11:67:51:86:4a:29:8b:a6:be:14:70:ef:dc:26:13:fb:d7:
e3:1f:25:23:81:c9:64:2b:c2:2e:0b:a2:c9:d3:fd:92:ea:79:
43:ea:39:6e:8b:96:57:e4:04:44:a4:33:25:9c:84:a0:7a:6a:
c1:68:43:20:68:8e:e4:be:d7:d6:83:d3:4a:86:79:0b:3f:7e:
92:35:f6:72:ef:50:10:b6:20:09:30:df:c3:75:51:11:93:04:
2a:37:63:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfo3YL8FTF6yrpV8bepZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4
ZDM1ZmMwHhcNMjUwMTMxMTAwMDI1WhcNMjUwMjAxMTAwMDI1WjAzMTEwLwYDVQQD
EygzZjQ5OWQzMmExMzA3OTMwMGVhMTA4ZDlkYjliZjM0ZTRiNWFiZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoFF4Iv949929+/2IsYGiHpyWwG8
LfmXNrqjpXJu5Hk9DQcm4RURutHilwWGi+NqOkYTgymq+npi6tUOCRWx4NKglbfp
x2i9TdmlZ7thOMnOnuWyrd5KEhu4NFYVp1aoeenVU4v7Y638E65fO6quPRooGtQN
Ua5SFcSkGN7G2CYPVMJ/iONIfCMMgkTkkQMbQqK81VSrzxA33OO9jkdfyJUbpZM4
+baIRN8Po6y4VMbG2nl4QVpFBQdw+bvD3antiY9LKlGy9aRgkn/vZZFfUhtBIl4Q
vwvUTx9DkPmM2v2FFZiw5xgTV0/SCrdbArB7wtzGmcnLJiD2jW+N0p32/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9JnTKhMHkwDqEI2dub805LWr4HMB8GA1UdIwQY
MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt
YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj
LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaKGgEAn
j+6PP1lLdKM1w5v45ro8RSHC6Bjyjp+4j78qGlHmyFyj8DqTUPPgJSdvQNhQS+t9
V0seDhyUz8joIIQjlRd5DZ/efxIGgby19hwJAmLn+Ta4aEnTZ5AmJPW1yyDSa+t/
6FR3qF1OTroMfwakIggxZoVfA+10Nm9fD7ZeyT0trjf355Vr6amtwoIh22jL6BM9
0RVtwEw0obu9U8qNthFnUYZKKYumvhRw79wmE/vX4x8lI4HJZCvCLguiydP9kup5
Q+o5bouWV+QERKQzJZyEoHpqwWhDIGiO5L7X1oPTSoZ5Cz9+kjX2cu9QELYgCTDf
w3VREZMEKjdjHg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:57 2025 by rpki-client