Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File: TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier: /A3NFHDqUSDQ0uWOnxlWVMcIx5hDO5x9NtlSreCPbGU=
Subject key identifier: 9E:D6:21:6A:BD:82:D4:BC:F3:7B:C4:E8:C7:15:79:A2:17:5C:11:95
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer: /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial: 019661E0E34D4E0ECCC18FC1A0E8CD98EABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number: 04B1
Signing time: Wed 23 Apr 2025 09:00:50 +0000
Manifest this update: Wed 23 Apr 2025 09:00:50 +0000
Manifest next update: Thu 24 Apr 2025 09:00:50 +0000
Files and hashes: 1: InvlOQlXHysCNzw0ls55YDrBMiI.roa (hash: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=)
2: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: dBpT3YehiDPSSdvUdNq7lt3/qAJ/Gp79J31JS2FKAno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:e0:e3:4d:4e:0e:cc:c1:8f:c1:a0:e8:cd:98:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Validity
Not Before: Apr 23 09:00:50 2025 GMT
Not After : Apr 24 09:00:50 2025 GMT
Subject: CN=9ed6216abd82d4bcf37bc4e8c71579a2175c1195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2b:7b:79:2c:ac:cc:cf:b5:4a:1b:c3:0a:39:
f1:d0:63:08:c8:80:e3:d6:42:2d:25:ad:19:f6:17:
04:0c:ce:a7:08:e1:68:d8:96:00:77:48:4c:a4:22:
fd:e8:97:1b:81:38:2e:fb:2f:07:b5:4e:7f:1a:49:
9e:6f:a7:57:44:38:13:6d:c2:43:c3:1d:44:ed:81:
04:9c:22:7c:d3:6e:5d:cb:10:dc:8b:f2:4c:b7:b4:
c6:f9:65:3a:bf:bb:03:c0:7f:fd:c0:0a:1c:e1:aa:
5a:2c:26:d6:ae:bf:ea:c1:5f:88:14:d2:f5:eb:58:
cd:c9:7b:f1:eb:57:a5:97:c9:89:b5:86:38:b2:97:
8d:e9:be:3b:fe:86:b1:c8:8c:92:ed:66:e6:d2:ec:
f3:32:7c:0f:62:1c:d1:05:90:40:26:7d:c1:9f:00:
25:cb:32:20:8f:e7:cc:94:1d:87:06:b8:9d:5f:b8:
e0:9d:c3:e3:9f:6f:8b:de:40:c6:8d:ce:fd:fb:6f:
6f:12:a5:1c:7f:a7:e6:87:01:ae:02:22:da:f4:3b:
b6:f1:d3:bd:4f:eb:4e:fa:51:ff:e0:7d:69:74:8a:
10:18:a4:5c:33:40:f4:3b:ad:31:a2:1d:2b:6e:27:
29:ee:7c:d1:0e:df:2b:85:ae:fe:9b:e3:22:6b:f7:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:21:6A:BD:82:D4:BC:F3:7B:C4:E8:C7:15:79:A2:17:5C:11:95
X509v3 Authority Key Identifier:
keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2f:d8:83:70:19:3b:00:ca:a4:46:d1:35:a4:96:88:d0:ff:
a2:f3:a9:ef:ba:d9:7c:78:52:0e:91:19:1f:2f:2b:b2:7b:d1:
55:fd:e7:f1:a8:12:b6:e1:84:b5:d5:87:08:24:b9:a4:f9:86:
99:ce:4a:87:09:b2:00:c5:47:ec:52:dd:3e:8e:ec:b3:0a:6b:
da:b6:2f:a3:9c:b5:54:4f:1a:88:d2:85:d0:4c:bc:76:b0:9e:
63:72:db:b5:3f:ca:0e:d4:3c:3a:cc:73:b6:da:dd:43:15:0a:
ef:d1:f8:42:f6:5b:f0:56:19:db:93:ad:7a:f8:4f:a0:06:bb:
02:27:01:fd:3c:fd:fb:6c:03:2b:47:b1:b9:09:d3:30:c0:dd:
b7:95:c6:e4:4b:94:30:e2:73:9b:31:cb:a8:c6:52:f5:4f:3c:
9d:69:b3:09:8d:6c:24:55:7c:8d:7e:91:a5:19:fa:fd:79:77:
3c:11:86:ec:7b:4b:af:bb:10:22:4d:a8:19:b0:d3:bb:29:5d:
da:6b:05:5b:d9:ac:dc:b6:af:11:b8:9b:c8:9a:b5:aa:15:7f:
c5:2b:ea:52:32:cb:40:ee:c6:7e:85:d7:5f:13:4d:ac:74:65:
34:09:31:c9:1e:37:6e:ba:36:48:7a:05:6e:67:8b:3a:c3:74:
24:9e:48:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZh4ONNTg7MwY/BoOjNmOq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjBmZDA5NDFmM2QyZjdhMjljMzU2MWU1NjMxODZlZjc3
NWExZTUwHhcNMjUwNDIzMDkwMDUwWhcNMjUwNDI0MDkwMDUwWjAzMTEwLwYDVQQD
Eyg5ZWQ2MjE2YWJkODJkNGJjZjM3YmM0ZThjNzE1NzlhMjE3NWMxMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6it7eSyszM+1ShvDCjnx0GMIyIDj
1kItJa0Z9hcEDM6nCOFo2JYAd0hMpCL96JcbgTgu+y8HtU5/Gkmeb6dXRDgTbcJD
wx1E7YEEnCJ8025dyxDci/JMt7TG+WU6v7sDwH/9wAoc4apaLCbWrr/qwV+IFNL1
61jNyXvx61ell8mJtYY4speN6b47/oaxyIyS7Wbm0uzzMnwPYhzRBZBAJn3BnwAl
yzIgj+fMlB2HBridX7jgncPjn2+L3kDGjc79+29vEqUcf6fmhwGuAiLa9Du28dO9
T+tO+lH/4H1pdIoQGKRcM0D0O60xoh0rbicp7nzRDt8rha7+m+Mia/eZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7WIWq9gtS883vE6McVeaIXXBGVMB8GA1UdIwQY
MBaAFExg/QlB89L3opw1YeVjGG73daHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNTVjOGItMDRhNC00MTJiLThiZGEt
MWY1ZDZmNTZjZjcyLzEvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNTVjOGItMDRhNC00MTJiLThiZGEtMWY1ZDZmNTZjZjcy
LzEvVEdEOUNVSHowdmVpbkRWaDVXTVlidmQxb2VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC/Yg3AZ
OwDKpEbRNaSWiND/ovOp77rZfHhSDpEZHy8rsnvRVf3n8agStuGEtdWHCCS5pPmG
mc5KhwmyAMVH7FLdPo7sswpr2rYvo5y1VE8aiNKF0Ey8drCeY3LbtT/KDtQ8Osxz
ttrdQxUK79H4QvZb8FYZ25OtevhPoAa7AicB/Tz9+2wDK0exuQnTMMDdt5XG5EuU
MOJzmzHLqMZS9U88nWmzCY1sJFV8jX6RpRn6/Xl3PBGG7HtLr7sQIk2oGbDTuyld
2msFW9ms3LavEbibyJq1qhV/xSvqUjLLQO7GfoXXXxNNrHRlNAkxyR43bro2SHoF
bmeLOsN0JJ5IDg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:52 2025 by rpki-client