Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier: At+NUG19FEvn6qp8PndPN+re7UaPsDhTQOwLwA9Srog=
Subject key identifier: D9:E5:F5:E1:F3:49:6F:B1:FD:4B:DC:F3:D9:89:47:F3:61:75:9C:A9
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 0194BCE0983FB31C65FA50825AB5B2416FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=)
2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: vOXrJ1nfzjq3c6ptlNvfp39T7Zgwr4yaeZ61inXvJ1A=)
3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:3f:b3:1c:65:fa:50:82:5a:b5:b2:41:6f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=d9e5f5e1f3496fb1fd4bdcf3d98947f361759ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:24:cd:13:a7:b4:4e:43:17:85:27:d8:d3:
6f:e2:a3:50:58:70:8f:f1:98:4a:f2:da:83:87:14:
ec:90:34:c8:df:60:58:27:fb:78:e2:cc:9a:fb:75:
0b:66:10:ae:45:59:bd:ad:1a:f6:9e:c3:a6:b5:44:
6d:20:da:7b:b2:97:3c:ca:27:2d:47:d9:3a:fc:e8:
f9:58:81:4d:b5:34:f5:bc:95:e6:2f:0c:37:71:4b:
a9:02:27:b4:9a:83:92:d6:f5:2e:5b:67:04:4d:12:
ba:a1:31:da:e7:5c:bb:aa:68:97:fa:21:9d:80:67:
16:fd:54:4a:76:b5:4c:17:cc:90:ae:c0:f9:d9:17:
9a:67:df:78:7d:5a:dc:08:ef:21:31:07:5e:9f:d5:
82:3d:23:2d:9d:54:aa:68:fd:ef:24:d6:0a:7b:bf:
51:e3:52:44:13:e2:8e:9a:e7:c2:9e:03:e1:5e:22:
c3:26:7e:3f:11:49:e1:4a:f3:52:77:e5:93:61:71:
7b:be:0e:75:cd:52:83:f7:7c:92:d0:64:73:a0:a0:
13:f4:03:3b:3a:5e:9e:ce:08:fc:8c:c0:63:4c:2b:
b5:ed:46:b5:88:2b:80:80:18:4a:18:22:b4:db:98:
a0:ea:95:c2:0e:4c:02:a0:e1:bf:c7:ed:7d:46:14:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:F5:E1:F3:49:6F:B1:FD:4B:DC:F3:D9:89:47:F3:61:75:9C:A9
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:17:0e:31:51:fe:e6:1f:6e:10:d4:c6:f2:e6:95:d3:bf:
46:dd:87:ef:c4:5d:77:f0:59:28:4d:0b:b7:bd:84:65:74:83:
33:3c:ff:f1:48:31:13:10:3e:a7:2d:4b:9c:c7:8e:0e:5a:f4:
70:f8:60:5d:9b:4b:5f:18:31:90:a6:22:e1:15:d5:e8:69:b3:
c3:0f:ce:15:c7:b8:1d:7c:2d:42:21:4a:09:cd:55:35:bc:a6:
43:ca:12:fb:ff:6e:ed:13:da:be:f8:02:f7:fc:ba:5c:c9:f2:
4d:63:cb:69:41:a0:50:f7:57:58:f8:6a:92:22:76:9f:6b:28:
96:1d:79:ad:f8:4e:59:ed:f4:96:cc:48:d2:36:48:d8:5c:e2:
4e:86:9f:42:03:38:1c:09:29:77:1a:32:5f:51:a9:1d:33:21:
3a:24:bd:74:f8:8f:0d:61:a7:d0:3f:b9:53:d1:d2:f9:cf:12:
56:2f:c5:31:e9:9e:1a:6b:6e:6e:68:c5:b8:a2:f9:66:97:60:
63:8f:f4:4a:ec:42:fc:10:85:1b:23:12:bf:4d:99:40:c2:5b:
1b:27:43:45:28:ac:58:a3:8e:66:94:83:88:b2:8a:c9:1e:63:
33:d5:16:67:4d:47:f2:e6:5e:44:6e:4e:4d:29:b4:e1:fb:2c:
77:17:98:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Jg/sxxl+lCCWrWyQW/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2
ZDYzNDkwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EyhkOWU1ZjVlMWYzNDk2ZmIxZmQ0YmRjZjNkOTg5NDdmMzYxNzU5Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr4kzROntE5DF4Un2NNv4qNQWHCP
8ZhK8tqDhxTskDTI32BYJ/t44sya+3ULZhCuRVm9rRr2nsOmtURtINp7spc8yict
R9k6/Oj5WIFNtTT1vJXmLww3cUupAie0moOS1vUuW2cETRK6oTHa51y7qmiX+iGd
gGcW/VRKdrVMF8yQrsD52ReaZ994fVrcCO8hMQden9WCPSMtnVSqaP3vJNYKe79R
41JEE+KOmufCngPhXiLDJn4/EUnhSvNSd+WTYXF7vg51zVKD93yS0GRzoKAT9AM7
Ol6ezgj8jMBjTCu17Ua1iCuAgBhKGCK025ig6pXCDkwCoOG/x+19RhTMJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnl9eHzSW+x/Uvc89mJR/NhdZypMB8GA1UdIwQY
MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct
MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz
LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJwXDjFR
/uYfbhDUxvLmldO/Rt2H78Rdd/BZKE0Lt72EZXSDMzz/8UgxExA+py1LnMeODlr0
cPhgXZtLXxgxkKYi4RXV6Gmzww/OFce4HXwtQiFKCc1VNbymQ8oS+/9u7RPavvgC
9/y6XMnyTWPLaUGgUPdXWPhqkiJ2n2solh15rfhOWe30lsxI0jZI2FziToafQgM4
HAkpdxoyX1GpHTMhOiS9dPiPDWGn0D+5U9HS+c8SVi/FMemeGmtubmjFuKL5Zpdg
Y4/0SuxC/BCFGyMSv02ZQMJbGydDRSisWKOOZpSDiLKKyR5jM9UWZ01H8uZeRG5O
TSm04fssdxeYog==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:20 2025 by rpki-client