Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.mft
File: TDHPYmi9JMzl8pMczXa5FwXmyWE.mft (raw, json)
Hash identifier: fE62BJDtdhSsbZmLrJZVPTDfFkXYT6lyGSyzMQ3m5ZY=
Subject key identifier: D5:D1:C4:1C:AE:29:39:6A:5C:B1:92:88:4A:37:6D:BD:DF:16:CC:7F
Authority key identifier: 4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
Certificate issuer: /CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Certificate serial: 018BFF463CD7E30881BFE0C15458B42ED092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.mft
Manifest number: 0FA3
Signing time: Fri 24 Nov 2023 03:01:14 +0000
Manifest this update: Fri 24 Nov 2023 03:01:14 +0000
Manifest next update: Sat 25 Nov 2023 03:01:14 +0000
Files and hashes: 1: MPjdl6Pku9phcL-CrpheiDTvDi4.roa (hash: L7etze7GT6VyHZmvIklT9OHaYq/9Jx2j+lw2K9bTBpE=)
2: TDHPYmi9JMzl8pMczXa5FwXmyWE.crl (hash: yX+ensnV+tq8VK6KHDOcXezkmXMcE82+DDepkFNejFQ=)
3: ycaJVpoVOC21dnZbHinvKzCp3z4.roa (hash: jPnkKRoLMPVMXrbCpFz/vUD+x41kkdouD/f4K8bw9X0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:46:3c:d7:e3:08:81:bf:e0:c1:54:58:b4:2e:d0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Validity
Not Before: Nov 24 03:01:14 2023 GMT
Not After : Nov 25 03:01:14 2023 GMT
Subject: CN=d5d1c41cae29396a5cb192884a376dbddf16cc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:a8:da:27:dc:ae:12:69:19:54:60:53:e5:
13:94:25:12:9f:3f:82:65:a9:07:58:29:fa:f8:2d:
b8:2d:a4:b1:7f:8c:b4:aa:4f:1b:18:1b:fb:19:d4:
48:e8:a9:29:a8:73:1f:77:7a:8d:3c:89:14:7d:63:
dc:8a:8e:15:95:4c:eb:08:61:c6:e9:dd:30:8b:58:
52:9a:c7:5f:08:b2:95:01:cd:98:ab:64:ae:77:7e:
a1:55:2b:6a:eb:f3:d6:90:64:e4:95:4c:5d:5f:23:
9d:92:f5:da:6a:6b:0f:87:4a:a4:b2:f1:ae:65:6d:
80:d8:0f:2c:d7:6d:24:2e:fd:7b:62:c0:b2:f8:03:
f9:6c:1c:ba:c3:af:67:9d:12:28:7a:cc:ec:bb:ac:
7e:03:bd:a5:38:92:0f:fe:7c:80:44:24:73:f8:09:
86:e0:cb:9a:b7:01:93:51:44:d8:50:06:5e:98:36:
f0:1a:b8:15:a9:43:46:73:b7:4f:66:1f:17:4a:cd:
b5:c3:7c:7e:e1:a6:a0:df:80:ab:38:ca:2c:f9:13:
fa:4d:93:66:49:6e:c5:7e:8f:8c:8e:61:f3:46:93:
b5:11:0f:e7:fa:12:5b:f8:c7:1c:38:2b:26:02:4e:
7f:29:52:cc:3a:fa:f1:2b:14:27:92:fd:7d:6c:f2:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:C4:1C:AE:29:39:6A:5C:B1:92:88:4A:37:6D:BD:DF:16:CC:7F
X509v3 Authority Key Identifier:
keyid:4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4a:95:24:98:33:af:5a:8b:46:44:d4:86:66:78:67:eb:4f:
65:7d:cb:3a:d4:ee:83:20:04:d8:05:50:05:65:be:77:02:ae:
29:c8:0d:4b:a7:71:f6:92:d1:07:dd:05:06:9d:80:3c:25:df:
9b:b7:7f:39:bf:b1:46:44:93:ff:68:df:7f:5e:e7:16:73:9a:
39:6d:71:23:27:24:4e:5e:da:cb:f8:89:78:3a:81:80:22:02:
d4:ba:9d:f6:97:3d:3f:09:23:4f:7a:70:30:1f:b2:e7:20:88:
02:00:6e:2d:06:28:51:b5:92:e9:4a:b7:1a:06:a2:96:b8:38:
15:99:80:ca:59:c8:f4:3b:17:72:d2:bd:be:1b:29:ad:8f:ed:
71:2e:ef:1a:38:b3:00:21:30:e3:1d:65:bb:82:27:91:ed:f7:
d2:88:29:b6:0f:66:c8:b5:3a:22:b3:62:78:f3:e4:5a:10:a8:
ef:cb:76:1a:23:aa:98:13:8c:38:6f:13:f3:c2:ae:80:76:54:
b2:91:63:0b:38:dc:e6:1d:d4:57:a4:fe:48:85:0a:5d:b8:d2:
f0:f3:4a:cb:c1:b1:c5:12:99:90:1d:b3:0a:5a:c8:c3:9d:09:
7b:ee:9c:7a:7b:03:ec:af:8e:16:65:07:d6:79:76:69:09:49:
7e:8d:0e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYv/RjzX4wiBv+DBVFi0LtCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzFjZjYyNjhiZDI0Y2NlNWYyOTMxY2NkNzZiOTE3MDVl
NmM5NjEwHhcNMjMxMTI0MDMwMTE0WhcNMjMxMTI1MDMwMTE0WjAzMTEwLwYDVQQD
EyhkNWQxYzQxY2FlMjkzOTZhNWNiMTkyODg0YTM3NmRiZGRmMTZjYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlmo2ifcrhJpGVRgU+UTlCUSnz+C
ZakHWCn6+C24LaSxf4y0qk8bGBv7GdRI6KkpqHMfd3qNPIkUfWPcio4VlUzrCGHG
6d0wi1hSmsdfCLKVAc2Yq2Sud36hVStq6/PWkGTklUxdXyOdkvXaamsPh0qksvGu
ZW2A2A8s120kLv17YsCy+AP5bBy6w69nnRIoeszsu6x+A72lOJIP/nyARCRz+AmG
4MuatwGTUUTYUAZemDbwGrgVqUNGc7dPZh8XSs21w3x+4aag34CrOMos+RP6TZNm
SW7Ffo+MjmHzRpO1EQ/n+hJb+MccOCsmAk5/KVLMOvrxKxQnkv19bPJr4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXRxByuKTlqXLGSiEo3bb3fFsx/MB8GA1UdIwQY
MBaAFEwxz2JovSTM5fKTHM12uRcF5slhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERIUFltaTlKTXpsOHBNY3pYYTVGd1hteVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDk5NDEtNWRjMS00YmY1LWFlOGQt
NGY3NjZkOGQ0NmQ3LzEvVERIUFltaTlKTXpsOHBNY3pYYTVGd1hteVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81NDk5NDEtNWRjMS00YmY1LWFlOGQtNGY3NjZkOGQ0NmQ3
LzEvVERIUFltaTlKTXpsOHBNY3pYYTVGd1hteVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0qVJJgz
r1qLRkTUhmZ4Z+tPZX3LOtTugyAE2AVQBWW+dwKuKcgNS6dx9pLRB90FBp2APCXf
m7d/Ob+xRkST/2jff17nFnOaOW1xIyckTl7ay/iJeDqBgCIC1Lqd9pc9PwkjT3pw
MB+y5yCIAgBuLQYoUbWS6Uq3Ggailrg4FZmAylnI9DsXctK9vhsprY/tcS7vGjiz
ACEw4x1lu4Inke330ogptg9myLU6IrNiePPkWhCo78t2GiOqmBOMOG8T88KugHZU
spFjCzjc5h3UV6T+SIUKXbjS8PNKy8GxxRKZkB2zClrIw50Je+6censD7K+OFmUH
1nl2aQlJfo0OoQ==
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:31:01 2025 by rpki-client