Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json)
Hash identifier: bfIUvZrDdCnsRptmZp+8aZnuH8zqFAz8bPZ81fwyyKc=
Subject key identifier: C9:0D:AC:DF:29:B2:BB:59:35:CB:8E:C3:17:3A:A2:EA:E3:81:E7:F0
Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Certificate serial: 0194BBCEC20A41354E7AA6243CF4F51BE256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=)
2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=)
3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: hq7CDuYOn7FZSrAAmOpoBUrDZfsblgJT1KV2hCTAh8s=)
4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c2:0a:41:35:4e:7a:a6:24:3c:f4:f5:1b:e2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=c90dacdf29b2bb5935cb8ec3173aa2eae381e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:68:cf:ba:f8:04:e1:cc:3a:6f:31:1c:d6:
de:fd:d7:ed:ab:a2:ac:00:54:43:77:9a:9a:7d:57:
96:56:55:85:cf:8d:f6:ab:9c:aa:d9:e3:50:08:0b:
54:77:fe:af:cd:74:cd:14:aa:95:2e:55:1b:44:1e:
6b:41:65:cb:56:ed:54:68:53:d5:4e:de:96:6e:43:
89:70:e2:e8:ea:dc:e7:76:8c:3c:45:17:cb:a0:cb:
20:ee:76:02:0b:cd:8b:df:51:4e:2a:2c:ce:1d:b2:
be:a0:9c:8b:d8:86:34:3c:45:79:52:16:9d:00:87:
c3:64:b0:20:74:e6:a7:d8:ba:e3:04:38:9d:af:d9:
a1:3c:46:2e:08:8a:9b:85:aa:00:b8:5c:52:cf:b4:
ef:a3:2d:f2:dd:4d:b7:ef:a1:ff:2a:2e:d8:bb:5f:
8a:6b:7e:c4:88:7e:3b:a2:a3:d5:b3:58:ae:a6:5b:
3a:40:ea:b9:0d:62:66:22:c8:3c:30:83:2d:64:ab:
55:88:ec:ca:97:44:17:25:31:17:e1:f2:8f:92:27:
f1:84:31:27:63:8c:7e:57:b4:68:a3:20:e2:9a:76:
25:90:e8:bb:b2:72:dc:fb:13:61:35:5d:a0:f4:39:
85:7f:be:c0:83:8f:22:0f:df:7a:d3:85:97:96:7c:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:AC:DF:29:B2:BB:59:35:CB:8E:C3:17:3A:A2:EA:E3:81:E7:F0
X509v3 Authority Key Identifier:
keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:10:06:b3:e7:d0:9c:20:1e:a1:2a:bf:48:3e:a4:5d:f3:c6:
b3:ca:8e:ca:94:e3:3e:a3:ae:f5:8d:cc:3b:87:7a:9c:15:64:
e5:87:d9:03:bc:0e:08:88:ab:ee:a9:20:bb:4a:bb:70:7e:bb:
ee:e4:c7:f4:32:51:cd:d2:5b:69:70:6f:bb:9a:26:91:3c:b2:
2c:f2:22:5c:4a:81:4c:bd:01:59:7c:f0:35:16:a3:5a:80:4d:
04:9e:89:cc:1c:f6:dd:5f:a4:dd:c1:7a:9c:c9:d1:62:7d:e0:
e0:93:39:de:12:ee:c1:4b:04:91:23:c2:77:00:1f:6f:24:f3:
4a:05:38:3b:b4:38:30:69:06:76:d4:2b:4e:ac:d4:61:cd:c5:
56:d5:81:68:46:3e:84:4a:7c:48:01:fa:74:91:5c:67:2a:31:
0f:90:56:84:9d:cb:fb:d1:9c:9d:52:47:c6:29:bc:46:8b:73:
e3:87:f1:1f:7d:5f:bb:b2:8a:b3:b5:2f:79:07:12:22:28:34:
63:81:0f:6d:4f:cf:2b:3b:4a:6c:0f:95:ea:b8:23:4d:15:41:
d4:16:55:d8:1c:d5:47:31:87:de:3e:23:31:02:c9:58:83:a5:
07:fa:7f:4f:fe:3a:2f:ab:c9:40:19:a7:3f:19:8a:cb:36:d5:
e6:69:92:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsIKQTVOeqYkPPT1G+JWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTM2Mjk1ZjdmMzJlNjRiZTc4ZmIzOTllYjZkMTVhZTNl
OTI2MzIwHhcNMjUwMTMxMTAwMTE2WhcNMjUwMjAxMTAwMTE2WjAzMTEwLwYDVQQD
EyhjOTBkYWNkZjI5YjJiYjU5MzVjYjhlYzMxNzNhYTJlYWUzODFlN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0phoz7r4BOHMOm8xHNbe/dftq6Ks
AFRDd5qafVeWVlWFz432q5yq2eNQCAtUd/6vzXTNFKqVLlUbRB5rQWXLVu1UaFPV
Tt6WbkOJcOLo6tzndow8RRfLoMsg7nYCC82L31FOKizOHbK+oJyL2IY0PEV5Uhad
AIfDZLAgdOan2LrjBDidr9mhPEYuCIqbhaoAuFxSz7Tvoy3y3U2376H/Ki7Yu1+K
a37EiH47oqPVs1iupls6QOq5DWJmIsg8MIMtZKtViOzKl0QXJTEX4fKPkifxhDEn
Y4x+V7RooyDimnYlkOi7snLc+xNhNV2g9DmFf77Ag48iD99604WXlnznXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkNrN8psrtZNcuOwxc6ourjgefwMB8GA1UdIwQY
MBaAFE0TYpX38y5kvnj7OZ620Vrj6SYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAt
MmJiN2ZkZDVmNzI4LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAtMmJiN2ZkZDVmNzI4
LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0BAGs+fQ
nCAeoSq/SD6kXfPGs8qOypTjPqOu9Y3MO4d6nBVk5YfZA7wOCIir7qkgu0q7cH67
7uTH9DJRzdJbaXBvu5omkTyyLPIiXEqBTL0BWXzwNRajWoBNBJ6JzBz23V+k3cF6
nMnRYn3g4JM53hLuwUsEkSPCdwAfbyTzSgU4O7Q4MGkGdtQrTqzUYc3FVtWBaEY+
hEp8SAH6dJFcZyoxD5BWhJ3L+9GcnVJHxim8Rotz44fxH31fu7KKs7UveQcSIig0
Y4EPbU/PKztKbA+V6rgjTRVB1BZV2BzVRzGH3j4jMQLJWIOlB/p/T/46L6vJQBmn
PxmKyzbV5mmSdA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:04 2025 by rpki-client