Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: jb1ZwOWorgn9eeE1iD6X7FFLAoSDW1IZLisguzUyG+E=
Subject key identifier: 3A:9D:9A:98:1D:46:D8:AE:42:37:12:F1:C4:B2:E1:83:7F:B8:8B:BA
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 0194BCA98C767E07242CD3F5968B9334760E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: yiW8RmvXubKpOJ+5clS5yo3Mmz+htkoTgGbQvuZhbsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:76:7e:07:24:2c:d3:f5:96:8b:93:34:76:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=3a9d9a981d46d8ae423712f1c4b2e1837fb88bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:bb:6f:4b:32:8c:22:15:89:8f:3a:10:74:
97:53:15:39:00:37:ce:a7:6d:62:31:c4:7c:e1:b9:
d2:14:97:cb:de:23:ed:33:11:ee:5a:92:76:27:6a:
7f:61:be:6b:98:09:59:d8:e0:57:7c:c4:6c:d6:bc:
57:4c:8e:1c:a7:a2:e6:b7:da:79:96:10:5e:3c:4a:
bc:7f:a5:d5:64:07:93:a4:0d:61:42:45:5e:b0:f4:
82:5d:ad:89:d8:c7:63:71:ba:3d:5e:68:b0:cf:bf:
16:c2:9a:e2:5f:65:28:bc:8c:04:da:84:b4:ec:84:
7f:5c:ff:6d:cd:22:8b:3f:7e:1f:a7:a6:59:09:45:
37:cd:30:4f:23:e0:9d:64:c7:9b:2d:58:a8:62:17:
50:67:e5:3f:df:f5:19:3d:64:e5:20:fa:4f:1c:92:
51:03:80:83:7b:d3:73:4f:7f:eb:d4:ec:55:41:06:
27:29:d1:85:22:db:50:4f:c1:53:2f:f6:c4:08:a8:
65:02:ce:ec:f6:03:02:26:ce:53:20:70:08:3e:6a:
50:88:bc:73:37:71:51:f3:4d:2b:a0:e5:5b:bf:07:
92:51:00:e4:20:c6:bb:8e:55:3f:14:37:2d:5d:71:
b1:5f:56:b6:3d:9d:37:68:44:86:ae:69:fa:d6:26:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:9A:98:1D:46:D8:AE:42:37:12:F1:C4:B2:E1:83:7F:B8:8B:BA
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:3e:05:88:7f:18:7a:40:6d:a2:25:79:f5:4c:64:9f:22:
31:91:e0:f6:7c:76:1c:7d:c1:2a:c4:a4:09:08:9f:85:16:9b:
f6:7a:13:51:bd:f6:1d:ad:b3:85:68:1c:4f:d9:2c:d2:2f:83:
b0:18:a7:c9:c0:c0:16:ac:cb:ab:a2:7a:19:b9:ca:08:4d:36:
84:cf:bc:eb:93:4b:5e:30:24:42:49:1b:cd:da:69:b7:e5:dd:
5d:15:8f:e5:bd:f7:39:92:91:78:b0:78:08:d9:87:24:47:46:
e7:46:74:94:44:90:8f:af:83:d7:80:05:57:ad:88:ac:d2:03:
ca:44:bd:12:fe:80:e8:aa:27:7d:2c:fb:53:d7:ae:4a:af:2a:
53:b1:64:75:2f:6f:46:15:72:41:79:8d:82:90:5e:f5:e9:d4:
0f:ac:28:53:6f:cc:c9:7e:7d:0d:6e:3d:df:64:af:bd:e0:95:
3c:ad:c0:f2:2c:31:64:5a:fe:2e:79:78:28:b5:0a:f3:87:97:
8d:ef:07:16:63:37:ba:2e:13:d0:a4:cf:68:6d:b5:e1:ea:89:
5b:11:51:d7:24:90:00:bf:41:db:56:e8:a6:fe:08:f0:93:7c:
25:a1:66:85:5d:93:19:60:9d:b5:ce:68:a1:8b:6a:3a:d5:53:
58:16:23:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYx2fgckLNP1louTNHYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZmU2M2VlOGEyM2Y0OTE2ZTQwNTM1MzFlNjk1MGRiNmMz
MWU4MDUwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EygzYTlkOWE5ODFkNDZkOGFlNDIzNzEyZjFjNGIyZTE4MzdmYjg4YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzi7b0syjCIViY86EHSXUxU5ADfO
p21iMcR84bnSFJfL3iPtMxHuWpJ2J2p/Yb5rmAlZ2OBXfMRs1rxXTI4cp6Lmt9p5
lhBePEq8f6XVZAeTpA1hQkVesPSCXa2J2Mdjcbo9Xmiwz78WwpriX2UovIwE2oS0
7IR/XP9tzSKLP34fp6ZZCUU3zTBPI+CdZMebLVioYhdQZ+U/3/UZPWTlIPpPHJJR
A4CDe9NzT3/r1OxVQQYnKdGFIttQT8FTL/bECKhlAs7s9gMCJs5TIHAIPmpQiLxz
N3FR800roOVbvweSUQDkIMa7jlU/FDctXXGxX1a2PZ03aESGrmn61iYq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqdmpgdRtiuQjcS8cSy4YN/uIu6MB8GA1UdIwQY
MBaAFLb+Y+6KI/SRbkBTUx5pUNtsMegFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODkt
YTNkMzc3YzZmZWVmLzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83ZWRiY2YtYjkwZi00NzA3LWIyODktYTNkMzc3YzZmZWVm
LzEvdHY1ajdvb2o5SkZ1UUZOVEhtbFEyMnd4NkFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUE+BYh/
GHpAbaIlefVMZJ8iMZHg9nx2HH3BKsSkCQifhRab9noTUb32Ha2zhWgcT9ks0i+D
sBinycDAFqzLq6J6GbnKCE02hM+865NLXjAkQkkbzdppt+XdXRWP5b33OZKReLB4
CNmHJEdG50Z0lESQj6+D14AFV62IrNIDykS9Ev6A6KonfSz7U9euSq8qU7FkdS9v
RhVyQXmNgpBe9enUD6woU2/MyX59DW4932SvveCVPK3A8iwxZFr+Lnl4KLUK84eX
je8HFmM3ui4T0KTPaG214eqJWxFR1ySQAL9B21bopv4I8JN8JaFmhV2TGWCdtc5o
oYtqOtVTWBYjkQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:23 2025 by rpki-client