Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json)
Hash identifier: 4rqKtYA/imrUxn2Jh2S/xo8eZy68xJaeffoFcTn5oi0=
Subject key identifier: A0:04:12:9B:75:40:F6:A5:46:9A:E3:AC:29:28:A7:39:9F:6A:C3:C9
Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Certificate serial: 0194BC3CBC5E0D71D59BD33657687627E137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
Manifest number: 0DB5
Signing time: Fri 31 Jan 2025 12:01:24 +0000
Manifest this update: Fri 31 Jan 2025 12:01:24 +0000
Manifest next update: Sat 01 Feb 2025 12:01:24 +0000
Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=)
2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: GPE9TPEv6/terK1OlSCs9O8dU+paVx3u2+nYOlo6yyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:bc:5e:0d:71:d5:9b:d3:36:57:68:76:27:e1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a
Validity
Not Before: Jan 31 12:01:24 2025 GMT
Not After : Feb 1 12:01:24 2025 GMT
Subject: CN=a004129b7540f6a5469ae3ac2928a7399f6ac3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:12:99:2c:37:07:6f:ff:e2:d1:89:1e:80:
e1:2e:c9:03:88:36:25:84:57:34:69:da:2f:fe:d6:
d6:c6:a1:0b:bd:c8:77:af:2a:17:79:a8:b5:13:d8:
78:51:5c:50:a9:73:38:52:d8:dd:1e:3f:b1:1c:84:
6a:2f:9a:e5:ca:3f:20:e2:45:76:0b:bc:f2:5a:38:
ce:06:2d:90:52:c2:c9:5d:df:d9:12:70:f2:84:cb:
08:b5:81:d3:1c:99:78:74:5b:d7:28:66:85:d9:27:
e1:c8:18:e4:f9:8e:7c:99:77:0f:d5:36:a8:fb:5b:
7d:3c:b6:62:a2:26:aa:2a:3c:5f:fa:4f:10:dd:c6:
ce:cd:6f:80:76:42:0f:6a:5d:3a:37:9c:00:47:86:
3a:ce:72:0f:63:ab:bd:7a:59:1e:db:20:88:7f:e8:
04:1e:6a:b6:48:8e:09:f9:39:53:8f:42:a4:df:02:
56:17:e9:b4:c5:06:68:30:9f:8c:8c:4e:08:a1:26:
16:70:ac:5a:b8:73:20:69:98:86:aa:ec:ce:09:0b:
b0:e2:8d:a1:08:7a:d5:5b:80:dc:6a:a5:15:85:be:
c4:09:d9:39:f4:77:6b:22:6a:fa:f4:44:70:8c:23:
79:c0:67:33:37:0a:55:85:c5:2c:f9:b6:0a:fb:3a:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:12:9B:75:40:F6:A5:46:9A:E3:AC:29:28:A7:39:9F:6A:C3:C9
X509v3 Authority Key Identifier:
keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:02:90:a5:48:55:c5:eb:bd:3d:d3:f4:55:4a:1c:42:57:ff:
78:06:a6:01:d4:8b:4b:4e:ed:a2:72:6d:06:23:b5:31:e7:42:
c4:67:cb:0b:90:b8:44:a6:ff:5c:f0:7e:a4:9d:d6:cc:7d:db:
66:2a:79:f1:9b:c7:7d:24:b6:5a:29:93:21:79:e7:41:39:20:
73:f3:0f:e8:3b:f8:9e:48:83:c4:28:e3:61:f6:70:89:96:fd:
78:b5:1a:6d:7d:bb:c8:00:3c:3a:4d:00:1e:ed:a5:3c:58:9d:
19:6a:66:0c:a1:ac:69:c8:bd:9c:f0:b5:af:69:1c:06:67:3c:
c5:19:ef:45:83:ca:fd:11:dc:6c:60:b3:3b:ef:e2:ed:16:32:
3c:b6:8b:ba:82:98:47:f3:36:3f:96:09:56:39:86:35:5d:d2:
87:6f:f4:6e:64:5c:fc:90:e5:25:f5:86:df:6a:f6:f9:8a:22:
9e:f6:23:b8:c1:11:ba:02:ff:cf:9a:95:9a:e5:29:47:19:5e:
f2:f6:75:60:39:0e:3b:fd:72:f7:5e:9f:a8:53:07:f4:50:9b:
54:8b:15:f8:52:be:90:c0:48:70:83:bf:ee:07:5a:01:ff:cc:
fb:73:a8:2b:1f:3b:9f:45:84:7b:b8:86:7e:94:6c:61:6c:ea:
95:67:60:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PLxeDXHVm9M2V2h2J+E3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDFkN2RmMjVhNGE5ZDVlNzI3YzQyZjU1ZTllMzE4M2Qz
NmE5M2EwHhcNMjUwMTMxMTIwMTI0WhcNMjUwMjAxMTIwMTI0WjAzMTEwLwYDVQQD
EyhhMDA0MTI5Yjc1NDBmNmE1NDY5YWUzYWMyOTI4YTczOTlmNmFjM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN4SmSw3B2//4tGJHoDhLskDiDYl
hFc0adov/tbWxqELvch3ryoXeai1E9h4UVxQqXM4UtjdHj+xHIRqL5rlyj8g4kV2
C7zyWjjOBi2QUsLJXd/ZEnDyhMsItYHTHJl4dFvXKGaF2SfhyBjk+Y58mXcP1Tao
+1t9PLZioiaqKjxf+k8Q3cbOzW+AdkIPal06N5wAR4Y6znIPY6u9elke2yCIf+gE
Hmq2SI4J+TlTj0Kk3wJWF+m0xQZoMJ+MjE4IoSYWcKxauHMgaZiGquzOCQuw4o2h
CHrVW4DcaqUVhb7ECdk59HdrImr69ERwjCN5wGczNwpVhcUs+bYK+zqntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAEEpt1QPalRprjrCkopzmfasPJMB8GA1UdIwQY
MBaAFE7R198lpKnV5yfEL1Xp4xg9Nqk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQt
YWE4MWI5NjAzODU3LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQtYWE4MWI5NjAzODU3
LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgKQpUhV
xeu9PdP0VUocQlf/eAamAdSLS07tonJtBiO1MedCxGfLC5C4RKb/XPB+pJ3WzH3b
Zip58ZvHfSS2WimTIXnnQTkgc/MP6Dv4nkiDxCjjYfZwiZb9eLUabX27yAA8Ok0A
Hu2lPFidGWpmDKGsaci9nPC1r2kcBmc8xRnvRYPK/RHcbGCzO+/i7RYyPLaLuoKY
R/M2P5YJVjmGNV3Sh2/0bmRc/JDlJfWG32r2+YoinvYjuMERugL/z5qVmuUpRxle
8vZ1YDkOO/1y916fqFMH9FCbVIsV+FK+kMBIcIO/7gdaAf/M+3OoKx87n0WEe7iG
fpRsYWzqlWdg2w==
-----END CERTIFICATE-----
Generated at Thu May 1 14:03:19 2025 by rpki-client