Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: ahJw7HoJ5eQdNzAMQZNx2ivdKwUWwY8UoF86rnRpodU=
Subject key identifier: 8F:56:AA:21:67:79:8C:2D:9F:F5:1E:EB:82:58:3A:52:00:8A:A9:5B
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 0194BCA99D935BA26B890D0D70A7C2BA7B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0C0C
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: HPNF2r1sShyvkWsymaRERNk5vtIM8x5urfS513VndoU=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:93:5b:a2:6b:89:0d:0d:70:a7:c2:ba:7b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=8f56aa2167798c2d9ff51eeb82583a52008aa95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:c8:51:b2:49:27:85:51:83:d1:e4:78:0f:
ab:7f:dc:be:86:52:27:a6:7e:bb:8f:2d:4d:1f:86:
f6:57:24:b5:99:8f:0d:1b:1f:5e:17:8d:d4:1c:72:
b6:4d:86:f9:82:31:9e:49:69:bc:6b:13:33:3e:cc:
21:8e:65:f2:b4:dd:f9:0f:ef:ec:86:06:f6:97:8b:
12:29:0a:3a:9d:19:0e:c7:fa:ec:f5:d6:fe:99:ba:
42:16:6f:f1:50:39:3f:ad:7d:e6:3b:60:15:23:34:
5f:67:df:33:0e:ce:dc:84:d6:ec:4b:f6:df:6d:0b:
d3:47:2b:a8:e2:09:2d:79:8b:7d:bf:98:6e:d5:eb:
bf:c3:2b:e5:bf:1b:58:73:76:c6:c1:3b:66:c2:a3:
00:40:a0:2e:4e:3e:d5:73:55:62:7f:b6:44:9e:61:
ab:4a:7a:ed:f8:b6:aa:dd:4b:1d:61:70:40:d9:29:
94:ff:a1:71:12:02:bd:52:70:d7:e7:32:13:ca:9e:
f6:67:a5:81:27:d1:3f:9e:eb:c1:ff:6a:7c:9b:7b:
00:67:7f:5e:f5:68:b9:6c:11:67:4a:30:98:a4:7d:
26:48:c9:90:6c:86:fd:d2:fe:eb:cb:af:47:3b:9a:
1c:32:d8:28:a0:56:b8:ef:f5:b9:77:9b:14:b5:42:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:AA:21:67:79:8C:2D:9F:F5:1E:EB:82:58:3A:52:00:8A:A9:5B
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:39:fa:e2:12:1e:b6:19:dd:fb:45:d0:44:13:9a:54:d1:e9:
67:fe:87:d1:24:be:86:aa:02:47:0b:65:c8:62:42:8e:38:f5:
5e:79:28:97:58:a8:38:5b:b6:cf:9f:7e:7d:f9:96:86:7f:e9:
c7:23:d4:1a:fa:8e:a0:70:80:fa:14:de:fa:80:4e:11:20:93:
87:f3:b4:c2:f7:b1:80:2d:57:26:27:11:10:4e:b1:ad:31:cc:
56:04:1e:a7:88:e4:4d:d3:e4:b1:e6:59:9f:90:0f:e1:29:89:
69:17:20:fd:0a:8b:b5:81:69:b0:9a:a5:3e:e1:66:da:c2:07:
d1:ea:1a:b1:11:03:59:60:77:71:09:69:f2:30:60:ba:2e:e7:
50:5f:bb:de:46:c8:b3:17:0d:5d:c7:92:99:33:1d:e2:af:f2:
34:fd:b2:16:a1:c0:aa:75:68:13:10:b2:f8:32:30:da:97:85:
37:11:68:7f:19:77:5d:f7:4a:12:1f:16:41:0b:56:97:77:49:
56:b0:15:61:de:cb:91:40:28:19:f9:2e:00:28:1f:ed:2e:b2:
32:55:a3:8e:a7:4a:13:6d:ec:76:48:16:73:df:45:21:3b:ea:
c0:9a:15:6c:a5:ad:15:96:3e:cd:dc:d2:af:e6:1b:2a:47:13:
34:f7:7f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZ2TW6JriQ0NcKfCuntPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzhkNzcyNmE1ZjFmMzNkYTE1ZDg3ZTVjOGIwZTQ4ZjUw
MjgxYmYwHhcNMjUwMTMxMTQwMDE5WhcNMjUwMjAxMTQwMDE5WjAzMTEwLwYDVQQD
Eyg4ZjU2YWEyMTY3Nzk4YzJkOWZmNTFlZWI4MjU4M2E1MjAwOGFhOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoezIUbJJJ4VRg9HkeA+rf9y+hlIn
pn67jy1NH4b2VyS1mY8NGx9eF43UHHK2TYb5gjGeSWm8axMzPswhjmXytN35D+/s
hgb2l4sSKQo6nRkOx/rs9db+mbpCFm/xUDk/rX3mO2AVIzRfZ98zDs7chNbsS/bf
bQvTRyuo4gkteYt9v5hu1eu/wyvlvxtYc3bGwTtmwqMAQKAuTj7Vc1Vif7ZEnmGr
Snrt+Laq3UsdYXBA2SmU/6FxEgK9UnDX5zITyp72Z6WBJ9E/nuvB/2p8m3sAZ39e
9Wi5bBFnSjCYpH0mSMmQbIb90v7ry69HO5ocMtgooFa47/W5d5sUtUKuLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9WqiFneYwtn/Ue64JYOlIAiqlbMB8GA1UdIwQY
MBaAFNU413JqXx8z2hXYflyLDkj1AoG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUt
MmQ5ZGY0ZWY1ZjUwLzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80M2M0NTEtZTRlOS00ODU5LWI5ODUtMmQ5ZGY0ZWY1ZjUw
LzEvMVRqWGNtcGZIelBhRmRoLVhJc09TUFVDZ2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzn64hIe
thnd+0XQRBOaVNHpZ/6H0SS+hqoCRwtlyGJCjjj1Xnkol1ioOFu2z59+ffmWhn/p
xyPUGvqOoHCA+hTe+oBOESCTh/O0wvexgC1XJicREE6xrTHMVgQep4jkTdPkseZZ
n5AP4SmJaRcg/QqLtYFpsJqlPuFm2sIH0eoasREDWWB3cQlp8jBgui7nUF+73kbI
sxcNXceSmTMd4q/yNP2yFqHAqnVoExCy+DIw2peFNxFofxl3XfdKEh8WQQtWl3dJ
VrAVYd7LkUAoGfkuACgf7S6yMlWjjqdKE23sdkgWc99FITvqwJoVbKWtFZY+zdzS
r+YbKkcTNPd/1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:39 2025 by rpki-client