Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json)
Hash identifier: tvfnnoOvnif8gwIGYXCiihdquVh/wq4YqyPWfIV11CQ=
Subject key identifier: CF:3F:71:14:D3:10:BC:4A:E5:32:E3:09:F8:50:DD:EE:78:BC:5F:09
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 0195E046ACBD20B9395CB29583DDBFDB9D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 05:01:22 +0000
Manifest this update: Sat 29 Mar 2025 05:01:22 +0000
Manifest next update: Sun 30 Mar 2025 05:01:22 +0000
Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: Qxc4kyji3jqO1Gfc6dK5TQxPcBBYQihq0B9oBaaq/ys=)
2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:ac:bd:20:b9:39:5c:b2:95:83:dd:bf:db:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Mar 29 05:01:22 2025 GMT
Not After : Mar 30 05:01:22 2025 GMT
Subject: CN=cf3f7114d310bc4ae532e309f850ddee78bc5f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:57:7a:f2:72:1a:87:dc:49:19:ba:e8:2b:
ef:a9:ce:88:d8:7a:b2:f8:37:46:83:7a:d1:da:0d:
83:cc:b9:0e:48:7e:7c:53:78:00:a1:b8:c2:9f:7a:
6d:f9:18:be:75:3f:79:53:8a:d9:f9:82:1c:3f:44:
b5:6c:ab:0b:c4:62:65:d5:51:a4:5f:bd:04:5b:b7:
90:52:c8:b5:ec:aa:36:45:9d:56:24:31:00:3f:15:
04:39:81:c2:45:89:32:fa:1b:92:8a:8d:cf:68:73:
33:92:2e:96:1f:04:74:a2:33:50:5a:b8:d1:e9:67:
ae:cd:ec:5b:0f:b3:6b:96:b4:41:f4:e3:88:09:f7:
6a:3c:fa:fe:ec:de:2b:eb:f7:de:4a:20:bf:fe:57:
2d:1a:51:b4:9e:05:37:d1:36:d7:61:96:cc:84:43:
f3:d4:00:6a:eb:59:85:2a:70:ed:e3:d4:9b:16:73:
d8:6e:81:ea:32:64:51:e4:71:6d:4f:1c:06:9d:e2:
ed:f5:7d:c4:05:83:80:26:8d:47:81:59:40:8c:94:
55:bb:34:8e:30:68:3e:38:7b:25:9e:a5:ae:09:de:
7f:ed:a3:96:d1:71:65:a0:d2:3f:f4:b9:e9:a3:f8:
35:8d:21:8e:33:cf:13:3b:0a:b7:97:d4:a9:21:7a:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:71:14:D3:10:BC:4A:E5:32:E3:09:F8:50:DD:EE:78:BC:5F:09
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:d1:fd:94:75:ab:35:58:9e:11:70:9e:62:95:d6:20:04:
57:55:69:99:e3:83:73:e1:81:d6:66:5d:0c:25:9f:60:81:b4:
a5:ba:7a:a4:dd:e4:78:84:a0:50:b3:1f:e7:2d:04:75:29:ae:
02:23:01:58:53:e1:d1:28:62:a8:1c:ca:9e:12:9f:1d:51:0d:
49:19:15:f8:c3:e7:b3:ca:88:da:95:8c:6a:1f:93:16:91:15:
22:c9:43:63:9e:98:32:a3:b7:38:b1:a5:9e:c7:57:bc:3b:bc:
5c:e9:09:d7:1b:77:06:83:1a:f1:33:90:79:ec:ae:22:78:3a:
f3:d4:92:9b:d2:fd:6a:e7:bf:75:8a:8a:2e:f7:44:d4:25:fc:
f4:80:76:ca:30:ea:7b:a3:f3:a7:79:d4:45:c4:2c:4c:ce:09:
a4:22:9f:92:61:fd:d7:8b:6c:62:b8:4b:64:17:be:a1:51:ad:
bb:5e:1a:c1:2c:15:38:e2:07:fa:e5:c8:04:21:3a:88:3a:bb:
46:9c:94:d9:84:d0:f9:0a:f8:c7:28:df:49:20:51:11:d9:4a:
2c:f4:bf:19:a5:a0:df:94:0d:79:2b:d4:0b:f6:c6:eb:57:d9:
d2:c7:96:f9:b9:d6:34:df:c0:72:7b:86:25:97:72:5c:e4:41:
70:9e:cf:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRqy9ILk5XLKVg92/252fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy
OGE1ZWIwHhcNMjUwMzI5MDUwMTIyWhcNMjUwMzMwMDUwMTIyWjAzMTEwLwYDVQQD
EyhjZjNmNzExNGQzMTBiYzRhZTUzMmUzMDlmODUwZGRlZTc4YmM1ZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9xXevJyGofcSRm66Cvvqc6I2Hqy
+DdGg3rR2g2DzLkOSH58U3gAobjCn3pt+Ri+dT95U4rZ+YIcP0S1bKsLxGJl1VGk
X70EW7eQUsi17Ko2RZ1WJDEAPxUEOYHCRYky+huSio3PaHMzki6WHwR0ojNQWrjR
6WeuzexbD7NrlrRB9OOICfdqPPr+7N4r6/feSiC//lctGlG0ngU30TbXYZbMhEPz
1ABq61mFKnDt49SbFnPYboHqMmRR5HFtTxwGneLt9X3EBYOAJo1HgVlAjJRVuzSO
MGg+OHslnqWuCd5/7aOW0XFloNI/9Lnpo/g1jSGOM88TOwq3l9SpIXpzcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8/cRTTELxK5TLjCfhQ3e54vF8JMB8GA1UdIwQY
MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt
NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm
LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVjR/ZR1
qzVYnhFwnmKV1iAEV1VpmeODc+GB1mZdDCWfYIG0pbp6pN3keISgULMf5y0EdSmu
AiMBWFPh0ShiqBzKnhKfHVENSRkV+MPns8qI2pWMah+TFpEVIslDY56YMqO3OLGl
nsdXvDu8XOkJ1xt3BoMa8TOQeeyuIng689SSm9L9aue/dYqKLvdE1CX89IB2yjDq
e6Pzp3nURcQsTM4JpCKfkmH914tsYrhLZBe+oVGtu14awSwVOOIH+uXIBCE6iDq7
RpyU2YTQ+Qr4xyjfSSBREdlKLPS/GaWg35QNeSvUC/bG61fZ0seW+bnWNN/AcnuG
JZdyXORBcJ7PUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:32 2025 by rpki-client