Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: OsR0nCcWhR2JmVOcneVHF9vSQT0JdSUq/cVvDOLxlgM=
Subject key identifier: 34:FA:71:96:40:0A:46:C8:33:46:40:CF:23:9B:DC:CB:5F:FD:98:12
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 0195E1222102692E524E6012C0FB1C77EE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0BB8
Signing time: Sat 29 Mar 2025 09:01:05 +0000
Manifest this update: Sat 29 Mar 2025 09:01:05 +0000
Manifest next update: Sun 30 Mar 2025 09:01:05 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: D+z1V06TVMW7EBzNHQ25uPo+44FLcVoeNb5q5N91cCE=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:21:02:69:2e:52:4e:60:12:c0:fb:1c:77:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Mar 29 09:01:05 2025 GMT
Not After : Mar 30 09:01:05 2025 GMT
Subject: CN=34fa7196400a46c8334640cf239bdccb5ffd9812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:8e:74:7d:c2:94:38:dc:c0:03:f5:10:5d:
fa:4a:21:6b:fd:20:cc:bf:86:12:aa:a8:fa:d0:9d:
fb:38:d0:3d:1a:d5:d9:8a:e3:e4:01:8d:85:88:cc:
99:9e:a4:ab:f9:40:ae:15:f5:10:db:21:15:60:df:
0f:74:13:50:8a:d7:84:3b:1e:9c:b0:e2:4c:75:93:
bf:9d:be:14:1a:96:d0:1f:d3:74:4e:5d:80:f5:89:
27:d5:9b:65:b1:7b:4b:ce:59:33:72:4a:15:39:f8:
9e:b2:f0:ff:67:5f:df:cf:22:89:5c:73:a8:42:64:
47:e1:22:8b:64:97:92:9e:f8:a7:60:4a:fc:4c:3a:
5c:d3:a8:55:5b:10:24:e6:a5:4b:50:70:65:b6:7c:
2d:b3:d5:91:88:4c:12:4c:82:be:c0:f3:50:8b:11:
f8:b1:e9:fb:ff:33:03:5c:11:5a:44:68:87:01:15:
3d:fc:ce:c3:15:31:a8:cb:00:c6:dc:e5:e5:b0:8b:
fb:97:f1:d8:75:00:39:fc:97:56:22:eb:1a:17:36:
d1:78:2d:ff:d7:05:51:99:95:60:38:3a:ae:cc:6b:
ea:c6:da:8d:13:e3:9d:c0:c6:b3:05:94:ae:16:63:
a7:a1:49:ac:9d:14:39:e1:ac:cb:95:96:31:0c:a1:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:71:96:40:0A:46:C8:33:46:40:CF:23:9B:DC:CB:5F:FD:98:12
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:23:85:c0:d9:59:3f:a5:e8:5a:5c:e3:29:53:2e:b8:05:40:
81:0d:4e:ce:19:2a:dd:cc:bb:79:2f:2e:73:48:87:b9:9b:bf:
3a:75:0c:e3:13:47:0b:88:24:2c:e5:8d:81:92:bc:7c:ee:d1:
74:f7:40:47:f4:28:d7:a4:ad:aa:c5:bc:dc:f4:2f:50:fe:07:
fa:bc:ba:45:90:57:e7:6b:b5:55:b6:ad:c8:18:96:15:79:55:
f8:cf:90:69:db:a2:07:af:21:4d:76:c4:13:ba:38:11:5f:83:
80:02:88:27:12:07:18:92:18:ab:7b:a2:d7:93:77:07:79:94:
2a:ec:1a:45:02:94:b2:12:a3:c0:a7:47:ae:8e:b4:68:71:a2:
1d:ef:d3:e0:5e:07:61:fb:4c:7c:d4:9f:21:8c:40:d7:f8:13:
bf:37:42:0b:72:eb:29:2e:78:2c:20:56:4f:e8:66:57:6c:8f:
c1:a6:02:ce:ba:a6:32:7a:85:79:5f:7d:6d:78:fc:79:b9:28:
34:73:b4:77:6d:24:b4:d5:db:d6:f6:76:d4:31:35:d9:8f:a1:
e7:bd:38:81:e8:13:0d:cf:0a:dc:20:13:58:3f:9c:50:52:93:
64:58:ab:b4:88:89:6e:4a:1c:ab:84:c2:c6:5a:e6:bd:ff:18:
f4:78:fb:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIiECaS5STmASwPscd+5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjNhOGE0YTBkOGM1YWUwMWE5Njk1YjA0MWVkMmM2ZDAy
OTZhOWUwHhcNMjUwMzI5MDkwMTA1WhcNMjUwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
EygzNGZhNzE5NjQwMGE0NmM4MzM0NjQwY2YyMzliZGNjYjVmZmQ5ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVOOdH3ClDjcwAP1EF36SiFr/SDM
v4YSqqj60J37ONA9GtXZiuPkAY2FiMyZnqSr+UCuFfUQ2yEVYN8PdBNQiteEOx6c
sOJMdZO/nb4UGpbQH9N0Tl2A9Ykn1ZtlsXtLzlkzckoVOfiesvD/Z1/fzyKJXHOo
QmRH4SKLZJeSnvinYEr8TDpc06hVWxAk5qVLUHBltnwts9WRiEwSTIK+wPNQixH4
sen7/zMDXBFaRGiHARU9/M7DFTGoywDG3OXlsIv7l/HYdQA5/JdWIusaFzbReC3/
1wVRmZVgODquzGvqxtqNE+OdwMazBZSuFmOnoUmsnRQ54azLlZYxDKEiNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT6cZZACkbIM0ZAzyOb3Mtf/ZgSMB8GA1UdIwQY
MBaAFE+zqKSg2MWuAalpWwQe0sbQKWqeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMt
NmJiNzA4MDQwOWI0LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82ZWYyM2UtOTliYS00YzY5LTkyZTMtNmJiNzA4MDQwOWI0
LzEvVDdPb3BLRFl4YTRCcVdsYkJCN1N4dEFwYXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyOFwNlZ
P6XoWlzjKVMuuAVAgQ1Ozhkq3cy7eS8uc0iHuZu/OnUM4xNHC4gkLOWNgZK8fO7R
dPdAR/Qo16StqsW83PQvUP4H+ry6RZBX52u1VbatyBiWFXlV+M+QaduiB68hTXbE
E7o4EV+DgAKIJxIHGJIYq3ui15N3B3mUKuwaRQKUshKjwKdHro60aHGiHe/T4F4H
YftMfNSfIYxA1/gTvzdCC3LrKS54LCBWT+hmV2yPwaYCzrqmMnqFeV99bXj8ebko
NHO0d20ktNXb1vZ21DE12Y+h5704gegTDc8K3CATWD+cUFKTZFirtIiJbkocq4TC
xlrmvf8Y9Hj7Aw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:41 2025 by rpki-client