Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: C6DI5yY8p9KS21LQGVBB8lNWPNYnsMMdpIjhVziJNxo=
Subject key identifier: A6:5B:55:A4:AD:A9:70:EE:84:61:93:E2:E5:0E:D2:4D:08:2D:D4:34
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 0194BCA97DE104BA4E78DE6DED0495DEC111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: 4708vCweybK+YDkzXFWJ3vBoCL0n35xMWFyZCFLYgjY=)
3: vIkAtPh5Tl2_hiya1eEEhTQV1PM.roa (hash: Z8ir9Gg8yuo48v4Oy7SXMnM5WXoZ5P1PfUr/9PmcanU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:e1:04:ba:4e:78:de:6d:ed:04:95:de:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=a65b55a4ada970ee846193e2e50ed24d082dd434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4d:cf:62:d0:10:a3:0c:f9:2e:e8:1b:49:37:
e4:81:7f:d2:ff:c8:0f:ba:63:20:f0:2c:de:d4:cd:
31:b6:93:47:0d:8d:78:01:e0:91:11:91:37:fc:ca:
7d:f1:a1:dc:7d:16:0d:15:fc:14:96:5e:b8:c0:1e:
c5:a8:ad:42:87:8d:ca:42:02:9c:4a:0e:51:23:c1:
74:20:41:b0:5c:9f:7f:7c:41:fc:32:55:97:41:bc:
22:87:be:de:ba:39:6a:92:16:3c:8f:dd:5e:1e:64:
0e:ae:f4:4f:ba:d0:14:e3:c3:e4:22:a2:cd:6a:1f:
9d:64:68:5a:f1:2b:8a:4e:68:fa:e0:33:bf:3c:1c:
77:d3:c2:f9:cd:93:64:af:73:b8:e5:d2:9b:89:a8:
82:cb:bc:0f:7c:b8:bb:5b:d8:b4:8f:c5:39:ca:63:
bd:82:0f:a9:ce:a6:d3:3f:0a:94:a4:ce:9a:d8:72:
32:e6:e5:4b:25:d8:67:7f:b2:63:20:43:89:b4:d3:
51:94:bc:ee:71:ac:30:7a:42:4f:ad:4d:b8:08:37:
fd:1a:49:f4:d1:e3:db:e4:da:78:8d:3b:c2:04:7c:
35:b2:31:ca:95:de:21:35:c2:9d:eb:01:2a:9e:fe:
fe:2d:51:de:0c:ce:72:b4:d2:6a:1a:6e:78:1f:c7:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:55:A4:AD:A9:70:EE:84:61:93:E2:E5:0E:D2:4D:08:2D:D4:34
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:09:39:a2:7e:bc:de:6f:eb:bf:15:77:5a:54:ee:6d:53:43:
d9:d2:33:7d:97:8c:35:9c:7a:85:e4:2e:b2:e9:f5:2c:46:84:
41:31:8c:31:8b:14:48:0a:cb:cd:ad:b7:7b:17:27:2e:4a:2a:
c1:ab:03:9d:2a:ac:44:14:59:69:61:e5:dc:70:4c:6c:97:4a:
4c:04:ef:9e:34:8a:86:ea:c2:e5:ab:92:8a:23:9a:7a:8c:2e:
df:b8:7f:dd:6a:ca:ad:ba:ba:a9:60:4c:9c:42:74:3e:36:5f:
bf:bd:cc:2f:e4:b9:b1:23:3d:84:3a:39:76:43:40:10:87:4c:
48:d4:8f:f7:e8:10:24:fc:fb:b9:eb:03:42:9c:7c:80:3c:24:
25:a1:17:09:85:26:f1:5e:b9:f9:72:29:50:c4:64:d4:c1:1d:
be:b9:d1:38:e3:2a:aa:f8:0a:99:cf:99:2c:0c:c0:68:45:27:
47:36:9c:3c:0e:c9:d3:dc:ca:e4:e1:58:06:2d:f7:1f:8e:04:
be:96:82:bf:1e:13:1a:41:ec:9b:68:75:c2:e9:34:27:46:b0:
5f:d5:da:b2:f3:6e:95:58:8b:cb:8c:82:e7:39:12:b2:0b:7a:
6a:a2:06:05:4a:05:d9:ac:d1:46:e1:a4:e9:72:36:27:f0:fc:
a4:1a:51:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qX3hBLpOeN5t7QSV3sERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzU2YjNhNjc3OGJlOGM2MTE0YWQ4N2RhYWZjZDA3Y2E1
NWQ4MDAwHhcNMjUwMTMxMTQwMDExWhcNMjUwMjAxMTQwMDExWjAzMTEwLwYDVQQD
EyhhNjViNTVhNGFkYTk3MGVlODQ2MTkzZTJlNTBlZDI0ZDA4MmRkNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E3PYtAQowz5LugbSTfkgX/S/8gP
umMg8Cze1M0xtpNHDY14AeCREZE3/Mp98aHcfRYNFfwUll64wB7FqK1Ch43KQgKc
Sg5RI8F0IEGwXJ9/fEH8MlWXQbwih77eujlqkhY8j91eHmQOrvRPutAU48PkIqLN
ah+dZGha8SuKTmj64DO/PBx308L5zZNkr3O45dKbiaiCy7wPfLi7W9i0j8U5ymO9
gg+pzqbTPwqUpM6a2HIy5uVLJdhnf7JjIEOJtNNRlLzucawwekJPrU24CDf9Gkn0
0ePb5Np4jTvCBHw1sjHKld4hNcKd6wEqnv7+LVHeDM5ytNJqGm54H8fV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZbVaStqXDuhGGT4uUO0k0ILdQ0MB8GA1UdIwQY
MBaAFLU1azpneL6MYRSth9qvzQfKVdgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjkt
OTMyYjRhYzBhYWZkLzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjktOTMyYjRhYzBhYWZk
LzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQk5on68
3m/rvxV3WlTubVND2dIzfZeMNZx6heQusun1LEaEQTGMMYsUSArLza23excnLkoq
wasDnSqsRBRZaWHl3HBMbJdKTATvnjSKhurC5auSiiOaeowu37h/3WrKrbq6qWBM
nEJ0PjZfv73ML+S5sSM9hDo5dkNAEIdMSNSP9+gQJPz7uesDQpx8gDwkJaEXCYUm
8V65+XIpUMRk1MEdvrnROOMqqvgKmc+ZLAzAaEUnRzacPA7J09zK5OFYBi33H44E
vpaCvx4TGkHsm2h1wuk0J0awX9XasvNulViLy4yC5zkSsgt6aqIGBUoF2azRRuGk
6XI2J/D8pBpRUg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:04 2025 by rpki-client