Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File: TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier: y0V+V9wEcWuGFNl+7VGrsjUjRvhPqcW9tYlSv77Fc6I=
Subject key identifier: 09:DA:40:CC:9B:32:CC:57:08:DE:8E:24:B4:51:2C:17:C3:F7:AA:EF
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer: /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial: 0194BC73180883BD3F1A7F841456FD0440D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number: 0B26
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: mWHCgK8vR1/dMUVER2x6w6iB/RSXWGNqQSE0dCh5QOQ=)
2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:08:83:bd:3f:1a:7f:84:14:56:fd:04:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=09da40cc9b32cc5708de8e24b4512c17c3f7aaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:46:b9:f9:99:42:86:e9:2e:da:f5:8a:35:
09:20:cb:63:5e:28:48:37:4d:96:d9:8a:8c:32:b8:
4c:a2:d1:08:f0:e1:6f:a1:1e:3d:0c:90:b8:1f:1c:
7e:31:e0:02:57:0f:64:30:6f:3d:0b:67:e2:9d:d5:
bb:ec:0d:aa:9c:95:d8:0a:05:b1:3d:35:df:db:ca:
a8:ec:d4:68:29:a2:dc:53:c0:0d:2f:57:70:5c:80:
03:3c:ec:eb:6a:31:74:13:a2:c7:08:b9:71:c1:4e:
48:c8:aa:2d:d3:a9:97:98:c0:50:e2:1c:3d:9a:65:
10:28:84:0d:9d:0c:3f:5c:d3:ad:5c:d0:22:aa:81:
f6:39:45:25:59:98:58:c6:33:df:54:52:28:de:19:
47:68:1b:ce:09:fd:48:54:f2:4b:0e:e4:cc:1b:43:
9c:63:34:20:a4:5f:f5:de:2b:fb:5e:68:24:16:a1:
29:8f:96:2d:30:9e:10:e4:fe:4a:11:4d:51:e4:6e:
6e:1f:57:7c:58:3d:f4:45:7e:25:57:10:05:65:ec:
42:7a:7c:ac:d9:fd:62:1e:bc:b5:01:53:7b:95:81:
30:1d:e0:05:cd:c4:22:16:00:28:f7:00:a0:d0:48:
3b:d2:b4:56:6c:f4:f8:db:c6:29:e1:11:6e:ce:f2:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:40:CC:9B:32:CC:57:08:DE:8E:24:B4:51:2C:17:C3:F7:AA:EF
X509v3 Authority Key Identifier:
keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c5:4d:b2:85:33:02:92:af:d0:c4:90:65:9b:a4:fe:12:8e:
43:64:2d:9c:7c:96:0a:20:6d:a0:8a:78:c2:a4:aa:b2:22:32:
89:14:31:a5:5a:75:f1:ce:9d:6c:9f:63:19:d3:d0:2e:c1:2a:
4c:1c:e4:2f:f0:c7:fa:57:e9:e0:25:97:63:cd:b6:a1:6e:34:
6e:7c:8e:77:c3:1e:04:3e:7a:9d:c5:6c:78:80:6b:28:f6:13:
89:0f:e6:58:34:ab:16:24:69:fc:4b:e7:0e:47:b4:22:be:32:
c6:8b:6a:c3:97:cb:a4:8f:cc:84:9e:a4:86:a3:27:00:8e:50:
12:d5:d8:ab:67:8a:99:60:41:47:f5:9e:15:5f:fe:26:23:9c:
e5:06:89:9a:4f:8f:eb:57:0a:ae:dd:5a:5f:97:8f:b2:82:b6:
e7:c0:ca:a0:e4:d3:13:49:b1:35:4f:eb:12:88:8c:5a:10:17:
67:fb:e3:b1:a7:0e:d4:37:67:08:5e:78:e4:cb:d1:37:b8:fb:
6f:f1:2a:e1:39:1b:37:6d:73:b0:85:3c:92:8c:ff:14:54:36:
37:66:a3:7c:41:96:0e:06:11:d5:38:2a:ab:75:26:5b:ad:fd:
1e:9a:13:35:92:86:db:d5:ea:19:03:46:76:84:57:3b:94:40:
93:be:e2:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxgIg70/Gn+EFFb9BEDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3
YjhiNGYwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
EygwOWRhNDBjYzliMzJjYzU3MDhkZThlMjRiNDUxMmMxN2MzZjdhYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdRGufmZQobpLtr1ijUJIMtjXihI
N02W2YqMMrhMotEI8OFvoR49DJC4Hxx+MeACVw9kMG89C2findW77A2qnJXYCgWx
PTXf28qo7NRoKaLcU8ANL1dwXIADPOzrajF0E6LHCLlxwU5IyKot06mXmMBQ4hw9
mmUQKIQNnQw/XNOtXNAiqoH2OUUlWZhYxjPfVFIo3hlHaBvOCf1IVPJLDuTMG0Oc
YzQgpF/13iv7XmgkFqEpj5YtMJ4Q5P5KEU1R5G5uH1d8WD30RX4lVxAFZexCenys
2f1iHry1AVN7lYEwHeAFzcQiFgAo9wCg0Eg70rRWbPT428Yp4RFuzvJtLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnaQMybMsxXCN6OJLRRLBfD96rvMB8GA1UdIwQY
MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt
MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy
LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasVNsoUz
ApKv0MSQZZuk/hKOQ2QtnHyWCiBtoIp4wqSqsiIyiRQxpVp18c6dbJ9jGdPQLsEq
TBzkL/DH+lfp4CWXY822oW40bnyOd8MeBD56ncVseIBrKPYTiQ/mWDSrFiRp/Evn
Dke0Ir4yxotqw5fLpI/MhJ6khqMnAI5QEtXYq2eKmWBBR/WeFV/+JiOc5QaJmk+P
61cKrt1aX5ePsoK258DKoOTTE0mxNU/rEoiMWhAXZ/vjsacO1DdnCF545MvRN7j7
b/Eq4TkbN21zsIU8koz/FFQ2N2ajfEGWDgYR1Tgqq3UmW639HpoTNZKG29XqGQNG
doRXO5RAk77iaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:01 2025 by rpki-client