Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: SZmTK40naUp7ckTf4BDKvkUpxQv//eKpmFJ16gGVJ2E=
Subject key identifier: F0:84:CC:A9:3B:E0:B3:65:0E:3F:01:A6:79:7C:09:92:B7:C7:4D:87
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 0195E1595D9163E0BB39669FF940A6E40DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1126
Signing time: Sat 29 Mar 2025 10:01:25 +0000
Manifest this update: Sat 29 Mar 2025 10:01:25 +0000
Manifest next update: Sun 30 Mar 2025 10:01:25 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: n3NDoTaKerni+Vsb8SP9el6AXIqza4zDJL8aelcTAzw=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:5d:91:63:e0:bb:39:66:9f:f9:40:a6:e4:0d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Mar 29 10:01:25 2025 GMT
Not After : Mar 30 10:01:25 2025 GMT
Subject: CN=f084cca93be0b3650e3f01a6797c0992b7c74d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:62:f2:28:3f:12:80:24:11:98:0d:07:9b:
99:48:3c:10:37:88:33:a3:3a:9d:d0:b1:9d:95:8b:
4a:d6:fe:f6:2d:28:a8:da:dc:d4:9e:e0:12:7c:0f:
90:82:3c:9d:cb:56:34:be:af:bb:5b:36:9f:0b:d3:
55:8f:fd:c0:50:18:98:ac:56:20:c5:5e:18:f7:a9:
31:23:f6:6f:f8:94:91:16:da:aa:f8:2c:39:c9:bb:
82:27:e2:b6:ef:76:9a:d2:4c:dd:a9:6e:83:23:c4:
88:72:02:87:e2:f4:50:20:51:f4:fe:94:20:aa:0f:
cb:4c:6f:93:a6:03:28:80:2c:87:78:0b:06:55:2d:
a5:05:f1:70:7c:af:86:04:1a:6a:22:02:4b:8c:93:
a1:dd:53:a3:b7:45:17:ed:ac:99:43:d7:f6:ce:c0:
fa:e1:7f:0e:92:e4:9c:4e:22:a2:ac:88:21:f9:50:
a9:8b:d0:f5:43:84:ff:49:fd:84:4c:ef:d8:54:64:
8f:19:df:4a:82:95:58:74:5a:55:79:ea:3a:18:be:
34:d1:e7:37:df:66:da:4b:cc:79:de:1d:f4:08:04:
42:9a:02:45:16:62:ad:e2:9e:a1:55:c5:eb:cd:b0:
60:96:09:bf:2d:c1:9c:72:42:88:12:ab:7c:bb:a3:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:84:CC:A9:3B:E0:B3:65:0E:3F:01:A6:79:7C:09:92:B7:C7:4D:87
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:bc:12:a5:b6:9e:13:07:5f:e0:72:d4:b9:d1:14:b9:92:
5a:47:b1:b1:53:c3:d0:c0:80:83:47:8b:2f:2d:64:72:8c:38:
c0:6b:36:98:f1:e0:a6:8b:8e:e6:aa:a4:2f:c7:c4:b1:d0:82:
ae:c0:0e:f7:64:07:a7:61:89:ea:1e:07:83:2e:26:a6:b6:54:
9f:ae:28:33:23:a9:19:87:f4:83:2c:f8:dc:6e:53:e9:52:67:
74:e0:f8:9f:4f:66:52:8a:88:e2:e3:c7:12:a7:63:30:f3:d3:
c3:d9:2a:f3:3d:7d:fa:3a:52:00:e2:37:0c:01:ce:eb:b9:0f:
61:54:78:2f:6d:47:65:37:b7:5f:09:cc:90:30:dd:5f:f7:7c:
a3:34:d7:9b:1e:94:24:02:af:76:2a:a8:40:7d:72:f5:e5:d1:
52:e8:5a:57:e5:82:27:50:9e:6a:df:60:54:e0:9d:b2:25:d8:
49:3c:d4:2e:64:01:a3:48:7a:42:52:33:db:5d:63:e6:f3:89:
cc:c8:74:4c:77:26:e4:a7:44:e7:1c:88:10:58:af:e6:78:92:
f9:cc:ec:3a:5a:d6:7f:e4:72:38:41:1e:d3:a2:40:d8:05:dd:
94:92:5b:7d:bb:91:5e:24:ad:bd:c2:2f:a5:45:6a:d7:c3:da:
ad:9f:67:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWV2RY+C7OWaf+UCm5A2lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw
MzliYjcwHhcNMjUwMzI5MTAwMTI1WhcNMjUwMzMwMTAwMTI1WjAzMTEwLwYDVQQD
EyhmMDg0Y2NhOTNiZTBiMzY1MGUzZjAxYTY3OTdjMDk5MmI3Yzc0ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ9i8ig/EoAkEZgNB5uZSDwQN4gz
ozqd0LGdlYtK1v72LSio2tzUnuASfA+Qgjydy1Y0vq+7WzafC9NVj/3AUBiYrFYg
xV4Y96kxI/Zv+JSRFtqq+Cw5ybuCJ+K273aa0kzdqW6DI8SIcgKH4vRQIFH0/pQg
qg/LTG+TpgMogCyHeAsGVS2lBfFwfK+GBBpqIgJLjJOh3VOjt0UX7ayZQ9f2zsD6
4X8OkuScTiKirIgh+VCpi9D1Q4T/Sf2ETO/YVGSPGd9KgpVYdFpVeeo6GL400ec3
32baS8x53h30CARCmgJFFmKt4p6hVcXrzbBglgm/LcGcckKIEqt8u6Nv/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCEzKk74LNlDj8Bpnl8CZK3x02HMB8GA1UdIwQY
MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt
YWQxNDdkOTE1NzkxLzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx
LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgW8EqW2
nhMHX+By1LnRFLmSWkexsVPD0MCAg0eLLy1kcow4wGs2mPHgpouO5qqkL8fEsdCC
rsAO92QHp2GJ6h4Hgy4mprZUn64oMyOpGYf0gyz43G5T6VJndOD4n09mUoqI4uPH
EqdjMPPTw9kq8z19+jpSAOI3DAHO67kPYVR4L21HZTe3XwnMkDDdX/d8ozTXmx6U
JAKvdiqoQH1y9eXRUuhaV+WCJ1Ceat9gVOCdsiXYSTzULmQBo0h6QlIz211j5vOJ
zMh0THcm5KdE5xyIEFiv5niS+czsOlrWf+RyOEEe06JA2AXdlJJbfbuRXiStvcIv
pUVq18ParZ9nkg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:06 2025 by rpki-client