Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier: JeixAe2mMHa9SDtl+fVriHcVQz8AHVTiOuKGhYcyrVM=
Subject key identifier: E2:EA:EA:5F:F7:3E:72:FD:04:5E:CF:50:DC:68:D1:D2:9B:31:39:13
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 0194BC3C62DFFEAA1B210E2AF73480AFB4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=)
2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 4OYfFhSocx33u8TmRtn3OARm0IMcKeQAscsrgw72o5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:df:fe:aa:1b:21:0e:2a:f7:34:80:af:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=e2eaea5ff73e72fd045ecf50dc68d1d29b313913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:f3:0d:b8:ec:dd:0a:4a:34:71:aa:fd:9b:
41:6d:e0:98:45:f5:71:7b:42:b6:59:e6:5d:c7:68:
f3:39:8f:9d:16:f0:4f:76:91:61:fb:90:17:1e:8e:
f2:8f:38:3d:a3:ae:15:b6:b6:a9:bd:19:43:b3:f3:
cc:1d:10:4d:a7:37:5a:8c:51:09:de:e2:b1:97:cb:
2b:59:f6:01:11:ed:fd:2d:e5:b2:81:86:e1:cb:a4:
c8:79:aa:83:b6:9e:e6:4c:03:55:e9:12:64:99:94:
3e:a8:51:2d:bc:4f:0e:8d:a1:37:6c:36:18:b9:d4:
b1:ee:d1:74:92:8f:2f:20:8e:9f:12:5a:1e:93:61:
4d:fe:b7:03:56:dc:a3:96:57:a3:13:e6:42:0f:c5:
86:d0:5c:9e:9f:c6:89:01:30:d9:25:ce:7c:16:ae:
fa:c5:4b:80:55:6c:fa:50:b5:3c:6c:cf:be:d2:31:
50:6c:e6:09:5e:6f:57:f7:f7:27:5b:cf:68:0a:0b:
19:90:4d:f1:3c:24:13:60:95:b4:da:6f:f1:2d:97:
89:df:6d:13:aa:5f:c9:98:c4:fe:8c:9c:58:be:7c:
cd:bd:83:ae:d6:9e:27:35:85:10:13:e5:07:33:d6:
3d:20:25:5c:78:a5:b1:f0:78:0b:b7:71:ca:32:02:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EA:EA:5F:F7:3E:72:FD:04:5E:CF:50:DC:68:D1:D2:9B:31:39:13
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:14:d9:64:3e:5c:c2:bb:21:f0:e2:94:4f:69:e1:c1:94:f3:
92:f8:18:0d:09:e7:15:aa:19:05:38:65:61:c0:f1:93:59:ae:
56:0f:5f:95:79:58:a0:a7:00:5e:bc:d5:1d:5d:64:09:7a:49:
b5:43:b2:10:2b:b1:09:10:f3:fa:e5:a3:57:a1:76:89:8a:58:
aa:d5:7f:31:a1:38:3b:a9:9a:01:6a:92:12:e1:0b:17:fa:c4:
5a:7e:52:c0:cd:f1:56:cf:3c:e7:df:92:fa:78:62:92:ee:64:
0c:b1:db:23:62:32:61:5b:d7:2a:b5:fe:19:33:2d:29:f2:1e:
d6:51:eb:8e:7c:69:c4:11:a5:6e:28:b7:0a:fa:e5:e2:20:74:
f1:07:10:4d:25:88:8b:17:e8:4c:7c:a7:64:10:f7:22:41:44:
28:72:90:84:ae:00:8f:93:53:4f:e1:34:1b:0b:86:a0:43:e4:
ba:10:46:01:bc:9a:f0:6b:da:d3:71:ac:d1:6a:26:46:41:e8:
5c:d9:3b:f5:4b:31:5e:91:6f:53:ba:18:81:d4:7a:11:25:e3:
b5:65:2c:74:41:01:24:10:ee:0f:54:67:0f:38:e3:19:d9:e0:
69:7a:13:4e:7f:5d:95:54:08:8d:b1:76:80:82:b4:95:23:e8:
eb:15:ff:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGLf/qobIQ4q9zSAr7TNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDcxYmFkOTI5ZTM2MmIwNjJiODljODdmYTQxYjVkZWRh
NGZmYzAwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
EyhlMmVhZWE1ZmY3M2U3MmZkMDQ1ZWNmNTBkYzY4ZDFkMjliMzEzOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMHzDbjs3QpKNHGq/ZtBbeCYRfVx
e0K2WeZdx2jzOY+dFvBPdpFh+5AXHo7yjzg9o64VtrapvRlDs/PMHRBNpzdajFEJ
3uKxl8srWfYBEe39LeWygYbhy6TIeaqDtp7mTANV6RJkmZQ+qFEtvE8OjaE3bDYY
udSx7tF0ko8vII6fEloek2FN/rcDVtyjllejE+ZCD8WG0Fyen8aJATDZJc58Fq76
xUuAVWz6ULU8bM++0jFQbOYJXm9X9/cnW89oCgsZkE3xPCQTYJW02m/xLZeJ320T
ql/JmMT+jJxYvnzNvYOu1p4nNYUQE+UHM9Y9ICVceKWx8HgLt3HKMgI0iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLq6l/3PnL9BF7PUNxo0dKbMTkTMB8GA1UdIwQY
MBaAFEwHG62SnjYrBiuJyH+kG13tpP/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYt
YmMxZDlhMDM0NTkzLzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYtYmMxZDlhMDM0NTkz
LzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRTZZD5c
wrsh8OKUT2nhwZTzkvgYDQnnFaoZBThlYcDxk1muVg9flXlYoKcAXrzVHV1kCXpJ
tUOyECuxCRDz+uWjV6F2iYpYqtV/MaE4O6maAWqSEuELF/rEWn5SwM3xVs8859+S
+nhiku5kDLHbI2IyYVvXKrX+GTMtKfIe1lHrjnxpxBGlbii3Cvrl4iB08QcQTSWI
ixfoTHynZBD3IkFEKHKQhK4Aj5NTT+E0GwuGoEPkuhBGAbya8Gva03Gs0WomRkHo
XNk79UsxXpFvU7oYgdR6ESXjtWUsdEEBJBDuD1RnDzjjGdngaXoTTn9dlVQIjbF2
gIK0lSPo6xX/1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:59 2025 by rpki-client