Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.mft
File: TmTyoLJt9D3nIwmaY6cjtb65f1o.mft (raw, json)
Hash identifier: AYdIpRYXLdtmK7+zwnnRgwxus07Ur1LFOUj8V/G1HZU=
Subject key identifier: EE:F1:37:04:85:0E:8C:C9:79:1E:09:ED:50:3A:A8:4F:17:52:09:11
Authority key identifier: 4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
Certificate issuer: /CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Certificate serial: 018AF8A175FAF3AE52C40612A56D27844868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.mft
Manifest number: 08A8
Signing time: Wed 04 Oct 2023 03:00:45 +0000
Manifest this update: Wed 04 Oct 2023 03:00:45 +0000
Manifest next update: Thu 05 Oct 2023 03:00:45 +0000
Files and hashes: 1: TmTyoLJt9D3nIwmaY6cjtb65f1o.crl (hash: TSoLZR8DWLE0RbkWs3850/Fi7+9nJjzrPth5vO0yMDw=)
2: TptRjlzyain1TeVGlfy9UuhC5Rg.roa (hash: 4OFUq9JFXkEHHVNnS5yASlpWNxJ8MAvfk+wTzR+GhT4=)
3: Zl04m7qjspazkdjUDh_u61v3_IA.roa (hash: HYZlPcTeGn8g2zrmZ9yrV9Y6EDgjYNjfL0seRNItq9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:a1:75:fa:f3:ae:52:c4:06:12:a5:6d:27:84:48:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Validity
Not Before: Oct 4 03:00:45 2023 GMT
Not After : Oct 5 03:00:45 2023 GMT
Subject: CN=eef13704850e8cc9791e09ed503aa84f17520911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4c:0e:bd:1a:5c:bc:c2:b6:c6:88:5e:62:24:
b7:2a:a3:31:fd:2f:95:0e:2f:c9:a3:75:3c:4e:34:
53:ad:14:91:a5:8e:d1:b5:e7:45:96:14:ef:8c:8d:
34:46:07:85:86:80:c5:7e:f0:ff:3c:00:66:05:ae:
a5:f3:c4:b3:a3:b9:fb:d5:cd:f5:83:c1:81:c2:dd:
ff:90:67:64:09:81:43:d4:a3:45:c5:e1:a9:44:b4:
21:d3:57:3f:e7:97:9b:45:ae:cc:3e:a4:23:4a:32:
c0:31:a3:e0:51:8f:90:31:95:55:a7:63:fa:34:b6:
dc:83:f2:7c:97:51:44:c3:7e:1c:ad:f4:cd:70:48:
33:1c:a6:fa:08:79:aa:b3:15:e3:9e:17:c2:1b:14:
fd:51:02:b0:f5:c9:90:01:21:65:67:ed:fe:b7:61:
80:f2:5a:25:c4:89:5f:ad:c4:a4:4a:f5:cb:ed:b3:
bc:d9:72:6b:6a:3b:de:19:82:b2:24:be:64:06:31:
8e:97:98:1d:0f:c8:88:7e:65:98:36:6a:bf:e6:ad:
12:20:c5:7d:34:7a:8a:b7:d0:56:b6:0d:4a:f3:a5:
cd:28:2a:82:cf:11:33:a1:ae:b5:3d:29:57:1f:3d:
bd:a1:cd:ae:2f:b9:5a:00:cd:87:15:09:1b:ac:8a:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F1:37:04:85:0E:8C:C9:79:1E:09:ED:50:3A:A8:4F:17:52:09:11
X509v3 Authority Key Identifier:
keyid:4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a9:50:e3:38:e7:d5:97:7f:e6:d4:37:fc:69:7f:28:3b:1d:
e1:e5:9d:60:96:5c:38:91:96:97:07:76:96:07:9b:97:bc:92:
b0:3a:3e:62:9f:8f:0b:26:9d:8b:83:9c:c5:1d:66:33:b2:d7:
69:11:17:27:8e:c4:2d:71:b1:d5:84:ca:d0:0b:3d:d6:77:2d:
39:ad:e1:02:74:f4:b3:2b:a2:1a:c0:c9:2e:09:f4:f4:a6:f0:
2b:f5:18:f6:ff:6a:0d:38:06:ec:2b:c0:40:40:74:1a:d0:c0:
86:b3:f9:79:49:7e:22:52:0e:e9:12:c4:fb:8c:b7:4a:06:41:
92:72:d6:17:aa:ac:ed:ed:84:5c:d2:a5:6b:63:6e:3b:86:bd:
72:ba:40:14:d8:4a:58:71:66:08:7e:33:19:20:b5:30:7d:f1:
a4:47:47:ab:32:80:25:84:58:c7:6b:c2:08:15:44:e9:f0:27:
af:09:c4:f7:7f:88:b5:d9:cc:67:90:55:f8:ec:0a:da:34:35:
f7:1c:6e:3d:f3:0f:6a:0c:a9:c4:dd:fd:1c:40:7f:15:31:c9:
77:17:ef:92:b1:9c:52:32:d6:0e:8a:e9:7f:ed:4c:8a:4c:81:
05:2c:df:da:e4:51:4d:2c:ad:bb:c6:16:49:d1:de:e3:f2:ab:
9d:d2:e4:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYr4oXX6865SxAYSpW0nhEhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjRmMmEwYjI2ZGY0M2RlNzIzMDk5YTYzYTcyM2I1YmVi
OTdmNWEwHhcNMjMxMDA0MDMwMDQ1WhcNMjMxMDA1MDMwMDQ1WjAzMTEwLwYDVQQD
EyhlZWYxMzcwNDg1MGU4Y2M5NzkxZTA5ZWQ1MDNhYTg0ZjE3NTIwOTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEwOvRpcvMK2xoheYiS3KqMx/S+V
Di/Jo3U8TjRTrRSRpY7RtedFlhTvjI00RgeFhoDFfvD/PABmBa6l88Szo7n71c31
g8GBwt3/kGdkCYFD1KNFxeGpRLQh01c/55ebRa7MPqQjSjLAMaPgUY+QMZVVp2P6
NLbcg/J8l1FEw34crfTNcEgzHKb6CHmqsxXjnhfCGxT9UQKw9cmQASFlZ+3+t2GA
8lolxIlfrcSkSvXL7bO82XJrajveGYKyJL5kBjGOl5gdD8iIfmWYNmq/5q0SIMV9
NHqKt9BWtg1K86XNKCqCzxEzoa61PSlXHz29oc2uL7laAM2HFQkbrIrcyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7xNwSFDozJeR4J7VA6qE8XUgkRMB8GA1UdIwQY
MBaAFE5k8qCybfQ95yMJmmOnI7W+uX9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1UeW9MSnQ5RDNuSXdtYVk2Y2p0YjY1ZjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NDFlNDMtNGY5MC00NzE2LThhMTgt
OTYwMmU5NjNmNjEwLzEvVG1UeW9MSnQ5RDNuSXdtYVk2Y2p0YjY1ZjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NDFlNDMtNGY5MC00NzE2LThhMTgtOTYwMmU5NjNmNjEw
LzEvVG1UeW9MSnQ5RDNuSXdtYVk2Y2p0YjY1ZjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6lQ4zjn
1Zd/5tQ3/Gl/KDsd4eWdYJZcOJGWlwd2lgebl7ySsDo+Yp+PCyadi4OcxR1mM7LX
aREXJ47ELXGx1YTK0As91nctOa3hAnT0syuiGsDJLgn09KbwK/UY9v9qDTgG7CvA
QEB0GtDAhrP5eUl+IlIO6RLE+4y3SgZBknLWF6qs7e2EXNKla2NuO4a9crpAFNhK
WHFmCH4zGSC1MH3xpEdHqzKAJYRYx2vCCBVE6fAnrwnE93+ItdnMZ5BV+OwK2jQ1
9xxuPfMPagypxN39HEB/FTHJdxfvkrGcUjLWDorpf+1MikyBBSzf2uRRTSytu8YW
SdHe4/KrndLkdw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:44 2025 by rpki-client