Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: fqKpytEtYOpRfrgrEZgTlIXPKlW2IrIkHR5zG3SWWDg=
Subject key identifier: 68:52:AF:F4:39:A2:09:B9:72:7C:00:B9:66:D5:57:B7:68:8D:0D:DE
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 0195DFD9856319E95D685050A220DD4FE363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 01AA
Signing time: Sat 29 Mar 2025 03:02:09 +0000
Manifest this update: Sat 29 Mar 2025 03:02:09 +0000
Manifest next update: Sun 30 Mar 2025 03:02:09 +0000
Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: ivCZ1M0puhOzV5RUgLZlQ5f+zBtSoV4WMl/6vrXN9cQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:85:63:19:e9:5d:68:50:50:a2:20:dd:4f:e3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Mar 29 03:02:09 2025 GMT
Not After : Mar 30 03:02:09 2025 GMT
Subject: CN=6852aff439a209b9727c00b966d557b7688d0dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:06:ad:ba:c0:1f:d8:da:80:b7:a2:1f:f5:
b9:5d:a3:78:f4:20:5f:c9:92:68:ff:70:97:f2:d5:
ce:cd:c0:8f:82:c0:cd:a7:26:ec:84:dd:66:c8:2c:
fc:87:31:90:e2:6d:f4:eb:84:bc:10:6a:cf:06:01:
f7:79:ef:3c:e1:1c:aa:df:c8:f9:f7:f7:a4:e6:9f:
af:f4:fb:6e:cd:e0:de:43:df:e9:8d:5e:1b:3b:e8:
73:81:66:c4:6b:70:92:00:4d:78:ff:de:ff:47:52:
62:9b:79:09:af:ba:39:5e:53:3d:64:3f:87:ee:4d:
be:b3:11:b0:d3:65:48:1c:fd:94:a0:e3:f9:0b:ff:
38:d8:1f:32:af:b8:81:ce:2b:b3:81:3c:99:17:53:
87:c7:89:e0:86:5b:47:98:b3:cc:c6:63:da:95:01:
82:da:d7:1f:bb:95:49:96:68:5e:e2:d9:6d:25:d5:
f6:4d:61:37:07:cf:29:cb:19:72:12:31:84:e6:70:
d8:79:ec:6d:28:56:ef:4e:83:d8:df:7b:71:a2:e5:
a6:65:97:b7:ac:0a:79:63:e1:d2:37:b1:ed:fb:46:
13:c6:5e:8f:54:c7:1b:ca:0c:b3:2f:09:b9:1a:68:
ce:d2:6b:50:9d:b9:39:b2:42:88:fe:96:74:12:eb:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:AF:F4:39:A2:09:B9:72:7C:00:B9:66:D5:57:B7:68:8D:0D:DE
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b8:95:95:ed:1b:2c:65:df:79:85:60:78:d2:4a:2c:bb:df:
30:8c:b7:2c:c3:56:98:22:f6:5d:34:00:8c:9a:5c:46:c4:de:
3b:7c:1e:85:d6:17:cd:16:c6:26:1d:58:b0:f7:8b:c6:0d:4f:
dc:e9:9f:4c:ad:b4:7a:a4:ca:5c:d2:47:4d:4a:d7:c3:9e:eb:
fc:9a:ef:6c:08:70:1b:d0:9b:98:64:a6:5f:a5:02:50:55:1d:
33:2b:02:fd:2f:3e:87:7d:41:ee:b7:28:21:a1:6d:c7:38:a9:
f7:f4:e0:fe:a9:26:83:bf:a2:59:70:1f:5f:fb:07:a9:76:4b:
6b:77:9f:ab:8e:dc:7f:6f:4b:e1:e2:cd:27:18:fc:af:86:90:
82:f7:a3:19:8e:d7:1a:52:53:fe:1f:3d:6e:28:6d:33:b0:bd:
0c:6a:c9:65:97:d5:b3:b2:21:0c:b5:b7:df:d6:50:b2:9b:b6:
f9:bb:fd:f8:e4:0f:8a:a1:c7:75:1e:30:5b:d1:25:7d:b0:01:
33:45:81:d4:f8:2a:cc:70:6a:ee:2e:97:9b:8d:85:95:de:79:
9b:d8:80:36:8e:9e:87:22:66:8e:b2:70:49:14:6b:bc:98:5e:
ce:58:d4:05:c7:77:d6:59:86:bc:f6:e8:02:e1:90:d5:46:d8:
f8:37:2f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2YVjGeldaFBQoiDdT+NjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1
NDcyZWMwHhcNMjUwMzI5MDMwMjA5WhcNMjUwMzMwMDMwMjA5WjAzMTEwLwYDVQQD
Eyg2ODUyYWZmNDM5YTIwOWI5NzI3YzAwYjk2NmQ1NTdiNzY4OGQwZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8EGrbrAH9jagLeiH/W5XaN49CBf
yZJo/3CX8tXOzcCPgsDNpybshN1myCz8hzGQ4m3064S8EGrPBgH3ee884Ryq38j5
9/ek5p+v9PtuzeDeQ9/pjV4bO+hzgWbEa3CSAE14/97/R1Jim3kJr7o5XlM9ZD+H
7k2+sxGw02VIHP2UoOP5C/842B8yr7iBziuzgTyZF1OHx4nghltHmLPMxmPalQGC
2tcfu5VJlmhe4tltJdX2TWE3B88pyxlyEjGE5nDYeextKFbvToPY33txouWmZZe3
rAp5Y+HSN7Ht+0YTxl6PVMcbygyzLwm5GmjO0mtQnbk5skKI/pZ0EuuNWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhSr/Q5ogm5cnwAuWbVV7dojQ3eMB8GA1UdIwQY
MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt
N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw
LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIriVle0b
LGXfeYVgeNJKLLvfMIy3LMNWmCL2XTQAjJpcRsTeO3wehdYXzRbGJh1YsPeLxg1P
3OmfTK20eqTKXNJHTUrXw57r/JrvbAhwG9CbmGSmX6UCUFUdMysC/S8+h31B7rco
IaFtxzip9/Tg/qkmg7+iWXAfX/sHqXZLa3efq47cf29L4eLNJxj8r4aQgvejGY7X
GlJT/h89bihtM7C9DGrJZZfVs7IhDLW339ZQspu2+bv9+OQPiqHHdR4wW9ElfbAB
M0WB1PgqzHBq7i6Xm42Fld55m9iANo6ehyJmjrJwSRRrvJhezljUBcd31lmGvPbo
AuGQ1UbY+Dcv8A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:09:13 2025 by rpki-client