Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: M+YJ18jY7SUBYxzxlGbgd71/vtizVhGpHh2RKRnCFUM=
Subject key identifier: 06:95:A2:3C:3C:BB:B8:8E:5A:B0:1B:27:62:BA:61:77:11:52:12:6B
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 0194BC3C8881654F3C21A81E91783C4F52DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: s5GMxGzxx9caT4Lct7kvecviUySVkAFokK9fJzW6LeY=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:88:81:65:4f:3c:21:a8:1e:91:78:3c:4f:52:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=0695a23c3cbbb88e5ab01b2762ba61771152126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:3a:ef:ae:ee:ae:e6:dc:f6:99:de:b7:c7:
98:58:52:e9:7f:67:fc:34:fd:6d:b9:20:5c:0d:61:
20:f6:49:70:78:96:e9:73:53:8d:16:cf:cc:fc:5d:
ed:72:b8:c6:2a:34:82:89:4b:21:56:1f:bc:37:f0:
10:a9:77:c5:1d:63:41:a0:85:88:f3:46:84:97:63:
cc:47:ee:cd:56:5e:d0:40:25:5e:76:8d:8b:6b:d9:
1a:b3:6c:8f:01:a3:3e:bf:36:9d:de:14:aa:24:7d:
d8:30:9f:2c:53:2f:e9:cd:72:62:c1:70:0c:02:0e:
d8:d4:78:1a:0f:64:1a:04:8b:29:e2:d7:67:40:94:
4f:5e:94:72:44:df:17:9c:80:78:29:85:02:04:ee:
95:57:db:f9:11:c3:f5:9d:ee:95:28:30:d8:99:64:
aa:38:2e:00:54:dc:83:52:7b:d6:dd:27:20:12:d8:
62:c3:2d:42:8a:e8:b1:bc:a5:fa:d0:35:7a:3b:fc:
96:a1:75:8c:0d:9a:f0:3f:62:48:e8:f4:7e:f5:25:
57:0c:6c:66:5d:61:b4:c3:ee:c0:08:a4:db:2b:24:
ca:e1:44:40:e3:0f:1c:a1:e2:32:f7:d2:e9:15:9f:
e1:0e:d3:44:31:2d:1c:73:c4:6e:4d:9d:4f:bf:9a:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:A2:3C:3C:BB:B8:8E:5A:B0:1B:27:62:BA:61:77:11:52:12:6B
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:03:0e:05:d1:03:e4:dc:48:51:3e:4d:d5:e9:8f:05:16:8b:
a8:55:15:6a:98:a0:c0:f8:b3:20:df:eb:93:bb:83:04:b8:67:
42:0c:67:11:92:a7:02:4a:88:74:0f:be:98:42:bc:13:71:36:
9e:ea:24:ae:4b:9c:b6:45:23:dd:80:91:b4:ac:c7:f1:e5:dc:
4d:f2:32:c0:b9:9a:bc:66:87:55:42:48:41:67:86:18:ef:aa:
bb:08:c9:14:df:05:f2:55:4f:f2:0d:e1:12:76:34:53:d3:60:
35:6b:39:2e:a7:85:7d:89:3e:80:49:b7:16:d4:7a:b3:dc:bc:
22:be:87:8e:bc:7b:8d:d3:0b:29:04:69:d7:47:17:48:8d:9b:
b2:43:8c:2b:ad:99:a2:1e:04:13:c6:6b:65:37:bc:00:b9:75:
f1:81:ac:f6:55:4e:02:f4:1f:c5:99:09:da:6a:41:a6:6c:c8:
fd:35:6d:be:5f:22:80:2c:53:83:4b:33:3c:16:55:af:60:f1:
d5:9f:58:b2:5b:f4:f7:af:95:da:ab:52:b3:b5:92:1a:93:6c:
74:eb:22:8a:9c:a8:a9:c4:1c:ed:0b:58:74:0d:a1:ce:cc:7c:
50:f7:d6:c8:16:f7:a8:de:bf:31:79:64:e7:8d:c8:b1:e0:a2:
42:82:eb:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIiBZU88IagekXg8T1LaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk
OGNiNmMwHhcNMjUwMTMxMTIwMTExWhcNMjUwMjAxMTIwMTExWjAzMTEwLwYDVQQD
EygwNjk1YTIzYzNjYmJiODhlNWFiMDFiMjc2MmJhNjE3NzExNTIxMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lo6767urubc9pnet8eYWFLpf2f8
NP1tuSBcDWEg9klweJbpc1ONFs/M/F3tcrjGKjSCiUshVh+8N/AQqXfFHWNBoIWI
80aEl2PMR+7NVl7QQCVedo2La9kas2yPAaM+vzad3hSqJH3YMJ8sUy/pzXJiwXAM
Ag7Y1HgaD2QaBIsp4tdnQJRPXpRyRN8XnIB4KYUCBO6VV9v5EcP1ne6VKDDYmWSq
OC4AVNyDUnvW3ScgEthiwy1CiuixvKX60DV6O/yWoXWMDZrwP2JI6PR+9SVXDGxm
XWG0w+7ACKTbKyTK4URA4w8coeIy99LpFZ/hDtNEMS0cc8RuTZ1Pv5oOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaVojw8u7iOWrAbJ2K6YXcRUhJrMB8GA1UdIwQY
MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt
MGVjN2VjYjI1MDMwLzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw
LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAMOBdED
5NxIUT5N1emPBRaLqFUVapigwPizIN/rk7uDBLhnQgxnEZKnAkqIdA++mEK8E3E2
nuokrkuctkUj3YCRtKzH8eXcTfIywLmavGaHVUJIQWeGGO+quwjJFN8F8lVP8g3h
EnY0U9NgNWs5LqeFfYk+gEm3FtR6s9y8Ir6Hjrx7jdMLKQRp10cXSI2bskOMK62Z
oh4EE8ZrZTe8ALl18YGs9lVOAvQfxZkJ2mpBpmzI/TVtvl8igCxTg0szPBZVr2Dx
1Z9Yslv096+V2qtSs7WSGpNsdOsiipyoqcQc7QtYdA2hzsx8UPfWyBb3qN6/MXlk
543IseCiQoLrlA==
-----END CERTIFICATE-----
Generated at Tue May 13 09:52:32 2025 by rpki-client