Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File: tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier: 0Ua+agcv1jwAEzNs8Iap8qIgkmWlz+d99ofd4rvFQiM=
Subject key identifier: A4:83:FC:B9:47:1D:8C:AD:64:BD:32:7F:A2:D2:E2:AB:FF:16:CD:14
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial: 0195E1226A6A2664481D8877B5073D574704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number: 1376
Signing time: Sat 29 Mar 2025 09:01:23 +0000
Manifest this update: Sat 29 Mar 2025 09:01:23 +0000
Manifest next update: Sun 30 Mar 2025 09:01:23 +0000
Files and hashes: 1: EMcvovEYE0weVYExSrcia69GSOA.roa (hash: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=)
2: TUnXBzr-7-tBP6GdN78mI5ahxe8.roa (hash: xFiJ6sW6C+HN63QoP5r6OyDOw7tPBAVqmIPMSnDnKbc=)
3: qS4NQoySScwU3zHXzq6HsEt5IDs.roa (hash: jlv4YTMjTvaq8qodzyyZpHbeudK0kBUwOoEXewAmNyo=)
4: t_X4QuW3--N3561kP8RWk8vRzAw.roa (hash: 2ahNsLwCOZ1nVC1o0aItVno4KD1+MsUZ68JOkj0O5Wo=)
5: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: alOdEZWTlmAEZghhwotqYsrpxpvExgPJgErkMCXWZ2I=)
6: xtJ3lZ04sv_4bqAlJ24ZbtoJeiU.roa (hash: ZKVGTwwxi9fVOYidTSfA/TmCkWo94r19B530igg9je4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:6a:6a:26:64:48:1d:88:77:b5:07:3d:57:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Validity
Not Before: Mar 29 09:01:23 2025 GMT
Not After : Mar 30 09:01:23 2025 GMT
Subject: CN=a483fcb9471d8cad64bd327fa2d2e2abff16cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:46:cf:08:2a:76:db:da:6a:75:4e:ee:ec:
de:55:ac:8f:07:5e:e7:49:14:08:f8:1f:3c:3d:c3:
74:a8:d4:19:8f:a9:43:5f:72:95:08:3e:12:95:b7:
de:fa:43:fb:78:58:f4:56:67:82:f4:d0:10:61:b0:
14:e3:5f:ca:29:67:0d:46:7a:21:6c:55:14:0f:b6:
11:af:bd:47:7d:22:7b:7c:6d:f5:06:29:fe:06:32:
d8:a1:28:73:a0:e6:e1:cd:58:da:19:48:31:32:c3:
09:72:01:8e:1d:13:27:8a:18:1a:88:58:2b:33:96:
70:af:a8:ed:8a:b6:53:39:29:f2:93:18:11:44:68:
10:a9:ae:ae:01:5a:10:8a:dc:e4:a3:2b:18:ba:1c:
ca:ef:c9:bd:d5:a2:92:31:61:fe:f3:22:12:5d:2a:
28:b5:fd:76:c8:d0:aa:65:1d:d1:37:8b:ba:53:55:
c9:2b:09:45:7d:c6:84:aa:19:d7:73:72:12:86:75:
ff:25:60:bd:91:0f:0e:4e:af:47:56:be:d0:36:e0:
ce:e7:70:02:f2:2c:04:80:78:c6:4f:af:06:52:80:
83:28:1d:be:99:b6:6a:8a:61:cd:2c:9b:41:65:5e:
67:e7:b0:ad:4c:70:50:bb:ce:b3:4c:58:dd:43:d9:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:83:FC:B9:47:1D:8C:AD:64:BD:32:7F:A2:D2:E2:AB:FF:16:CD:14
X509v3 Authority Key Identifier:
keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:f2:f3:76:14:eb:7a:80:ad:5f:ad:8d:b2:1d:95:cb:c7:
45:91:84:1c:a7:95:b0:0d:2b:7e:83:46:8c:2e:b5:52:ca:56:
58:e2:6c:57:5f:c7:49:ca:d1:7c:4d:b4:2e:da:0a:50:78:d7:
c8:69:00:26:59:56:f3:e3:0b:bd:ef:77:e9:df:d0:ed:58:65:
65:5e:3f:ae:9b:26:82:45:f3:0d:48:f8:28:42:8a:81:fb:77:
21:ba:59:1b:98:f6:35:d5:74:65:75:79:fe:e2:37:7f:ab:16:
88:ae:f8:61:9f:97:c6:6d:23:65:0c:1c:b4:80:a0:48:93:94:
fc:d0:4c:68:13:7f:b2:84:26:ed:52:e4:97:a6:45:7c:1a:36:
aa:1e:83:79:e4:91:62:27:ad:06:5b:30:92:26:3f:ff:b9:0a:
01:3d:91:45:63:6b:0d:94:3c:c4:c1:7c:fe:93:70:36:50:ec:
95:97:64:8c:c0:5a:17:b8:42:0b:23:82:27:27:ac:11:71:b6:
40:bc:b2:2d:cd:66:a5:06:1d:38:cc:16:82:89:44:f3:cf:c2:
c3:79:a1:91:1b:73:3c:33:cf:e5:87:05:39:ab:95:f3:a5:00:
32:59:ad:06:db:fd:b1:cd:a7:41:03:e9:f8:bb:b6:8c:2b:a5:
c1:4a:07:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhImpqJmRIHYh3tQc9V0cEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh
MGUwYTkwHhcNMjUwMzI5MDkwMTIzWhcNMjUwMzMwMDkwMTIzWjAzMTEwLwYDVQQD
EyhhNDgzZmNiOTQ3MWQ4Y2FkNjRiZDMyN2ZhMmQyZTJhYmZmMTZjZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCpGzwgqdtvaanVO7uzeVayPB17n
SRQI+B88PcN0qNQZj6lDX3KVCD4Slbfe+kP7eFj0VmeC9NAQYbAU41/KKWcNRnoh
bFUUD7YRr71HfSJ7fG31Bin+BjLYoShzoObhzVjaGUgxMsMJcgGOHRMnihgaiFgr
M5Zwr6jtirZTOSnykxgRRGgQqa6uAVoQitzkoysYuhzK78m91aKSMWH+8yISXSoo
tf12yNCqZR3RN4u6U1XJKwlFfcaEqhnXc3IShnX/JWC9kQ8OTq9HVr7QNuDO53AC
8iwEgHjGT68GUoCDKB2+mbZqimHNLJtBZV5n57CtTHBQu86zTFjdQ9mGwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSD/LlHHYytZL0yf6LS4qv/Fs0UMB8GA1UdIwQY
MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt
N2ZiZjVlZTI5MGFjLzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj
LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXzy83YU
63qArV+tjbIdlcvHRZGEHKeVsA0rfoNGjC61UspWWOJsV1/HScrRfE20LtoKUHjX
yGkAJllW8+MLve936d/Q7VhlZV4/rpsmgkXzDUj4KEKKgft3IbpZG5j2NdV0ZXV5
/uI3f6sWiK74YZ+Xxm0jZQwctICgSJOU/NBMaBN/soQm7VLkl6ZFfBo2qh6DeeSR
YietBlswkiY//7kKAT2RRWNrDZQ8xMF8/pNwNlDslZdkjMBaF7hCCyOCJyesEXG2
QLyyLc1mpQYdOMwWgolE88/Cw3mhkRtzPDPP5YcFOauV86UAMlmtBtv9sc2nQQPp
+Lu2jCulwUoH+w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:40:20 2025 by rpki-client