Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
File: 1TOS85C0La1wA2dOvC0B3z3tgbw.mft (raw, json)
Hash identifier: /JLYPINtEm+8EYlQFwfDfThSBdtnBo68aIqUfJWj6/A=
Subject key identifier: 6B:EE:CB:5F:EF:4B:26:05:4D:4D:DD:A1:AE:64:D6:60:33:DF:1F:F6
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Certificate issuer: /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial: 01951CCB962D960C885161D74BDCDE84EC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
Manifest number: 0832
Signing time: Wed 19 Feb 2025 06:00:58 +0000
Manifest this update: Wed 19 Feb 2025 06:00:58 +0000
Manifest next update: Thu 20 Feb 2025 06:00:58 +0000
Files and hashes: 1: 1TOS85C0La1wA2dOvC0B3z3tgbw.crl (hash: XXoAb0Y4iTX61X+GMMg4ux/f9OPRsrPj8UdEEsk7ExM=)
2: BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa (hash: hQve+rtDZ0jg1uu0Y35IBtJorVyNaKyG6WOdEkpYqKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:cb:96:2d:96:0c:88:51:61:d7:4b:dc:de:84:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Validity
Not Before: Feb 19 06:00:58 2025 GMT
Not After : Feb 20 06:00:58 2025 GMT
Subject: CN=6beecb5fef4b26054d4ddda1ae64d66033df1ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:f7:d8:4d:31:a6:2d:dc:62:f4:8c:01:e2:
93:fe:e7:61:cb:51:88:d0:a7:65:4e:f9:9d:89:f2:
61:e5:38:7b:87:89:16:fb:68:ab:eb:19:ea:23:fd:
96:e4:fc:22:83:a8:9d:25:3f:b7:dd:23:fa:65:f7:
d1:8d:e0:fd:80:f6:d0:1f:6d:42:19:74:ce:3c:cd:
6b:48:92:eb:72:d3:68:82:af:9b:83:cc:c5:59:78:
ee:c8:53:19:1a:a0:e2:b7:0b:6b:b7:ec:24:cf:c3:
43:65:cb:03:27:dc:2a:34:d6:aa:64:e3:49:a2:04:
58:d4:4d:86:9e:a1:08:84:ad:67:d6:4b:3c:76:37:
e8:02:af:d5:a9:9a:31:79:53:c0:df:a5:3f:55:0e:
de:5e:01:0f:26:a1:88:bb:62:e2:29:4c:be:41:08:
1a:15:8e:ee:be:5d:8b:9e:70:22:e8:34:75:2a:34:
df:d6:60:5e:b8:fb:4e:9c:02:38:8a:6f:4b:5a:e2:
55:10:19:4a:3a:00:44:99:49:26:b6:f2:f7:76:ad:
3d:4e:ed:84:e7:00:b8:85:64:c3:c0:15:12:bb:0e:
79:cd:6b:1c:4b:a1:ea:f1:ff:bd:3d:6d:48:24:df:
90:c3:23:7b:24:c3:27:77:6b:59:b5:de:4d:32:b8:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EE:CB:5F:EF:4B:26:05:4D:4D:DD:A1:AE:64:D6:60:33:DF:1F:F6
X509v3 Authority Key Identifier:
keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c6:67:11:ac:80:4a:3a:5f:9c:01:b7:ed:5b:12:ae:30:60:
a2:08:50:8d:1c:ec:38:e3:ad:da:06:af:ff:8b:c5:63:c8:79:
60:b0:11:fc:f6:57:81:8f:8c:44:46:8d:61:45:ff:b5:c9:e7:
9a:7b:7b:dd:70:5b:e7:4d:6b:3a:b0:a7:61:51:b9:8c:25:a2:
44:d7:76:05:14:3a:68:81:4e:5c:75:19:a3:81:4d:54:46:f8:
b3:25:b7:a6:8c:4e:1a:45:f7:02:dc:27:d0:2c:60:f2:cd:e6:
5a:99:b2:85:44:d8:dc:4a:d2:ad:67:c9:35:38:95:26:4c:4d:
80:c1:86:f4:3c:e5:e6:78:e2:de:9e:f7:5e:0b:40:ef:a3:a7:
c3:6b:3a:1c:c1:e7:9a:3b:af:a2:79:68:41:1a:1f:09:ee:6b:
4e:b3:fc:b9:ff:b6:9e:f8:8b:24:e3:8c:06:41:c2:d4:07:d0:
af:21:a6:f0:93:a6:99:57:e8:bf:8f:56:f3:5e:74:95:2f:54:
d0:a8:ec:47:55:7d:ce:02:05:07:0f:a4:81:ae:b3:d3:4b:7c:
27:4f:ae:47:bf:76:f0:83:0d:e2:42:a5:4d:25:7d:8b:57:8d:
43:3f:db:f1:cd:99:73:94:31:be:0e:e4:c9:c5:34:81:39:3d:
49:93:7a:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUcy5YtlgyIUWHXS9zehOwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzM5MmYzOTBiNDJkYWQ3MDAzNjc0ZWJjMmQwMWRmM2Rl
ZDgxYmMwHhcNMjUwMjE5MDYwMDU4WhcNMjUwMjIwMDYwMDU4WjAzMTEwLwYDVQQD
Eyg2YmVlY2I1ZmVmNGIyNjA1NGQ0ZGRkYTFhZTY0ZDY2MDMzZGYxZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4332E0xpi3cYvSMAeKT/udhy1GI
0KdlTvmdifJh5Th7h4kW+2ir6xnqI/2W5Pwig6idJT+33SP6ZffRjeD9gPbQH21C
GXTOPM1rSJLrctNogq+bg8zFWXjuyFMZGqDitwtrt+wkz8NDZcsDJ9wqNNaqZONJ
ogRY1E2GnqEIhK1n1ks8djfoAq/VqZoxeVPA36U/VQ7eXgEPJqGIu2LiKUy+QQga
FY7uvl2LnnAi6DR1KjTf1mBeuPtOnAI4im9LWuJVEBlKOgBEmUkmtvL3dq09Tu2E
5wC4hWTDwBUSuw55zWscS6Hq8f+9PW1IJN+QwyN7JMMnd2tZtd5NMrjw1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvuy1/vSyYFTU3doa5k1mAz3x/2MB8GA1UdIwQY
MBaAFNUzkvOQtC2tcANnTrwtAd897YG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRPUzg1QzBMYTF3QTJkT3ZDMEIzejN0Z2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iYjNlNzEtZDMwOC00YjFjLWI2OGEt
MzRiZDJhMWRkODBhLzEvMVRPUzg1QzBMYTF3QTJkT3ZDMEIzejN0Z2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iYjNlNzEtZDMwOC00YjFjLWI2OGEtMzRiZDJhMWRkODBh
LzEvMVRPUzg1QzBMYTF3QTJkT3ZDMEIzejN0Z2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMZnEayA
SjpfnAG37VsSrjBgoghQjRzsOOOt2gav/4vFY8h5YLAR/PZXgY+MREaNYUX/tcnn
mnt73XBb501rOrCnYVG5jCWiRNd2BRQ6aIFOXHUZo4FNVEb4syW3poxOGkX3Atwn
0Cxg8s3mWpmyhUTY3ErSrWfJNTiVJkxNgMGG9Dzl5nji3p73XgtA76Onw2s6HMHn
mjuvonloQRofCe5rTrP8uf+2nviLJOOMBkHC1AfQryGm8JOmmVfov49W8150lS9U
0KjsR1V9zgIFBw+kga6z00t8J0+uR7928IMN4kKlTSV9i1eNQz/b8c2Zc5Qxvg7k
ycU0gTk9SZN6lg==
-----END CERTIFICATE-----
Generated at Sun May 11 21:32:05 2025 by rpki-client