Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: CrL3tbnSqPB4n68C2gVaYKPg6e8Lry5pHJeyJWnyNrI=
Subject key identifier: 73:2B:12:9B:A8:89:3F:DD:13:CB:2D:57:97:0D:26:70:69:E5:C4:73
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 0194BBCDCAD1DC3BA3AA533688982DFE77E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: hxyWkKijw9dAh9fLA8HAna7Xkzt9LLPUqPlN/5vRpXI=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:d1:dc:3b:a3:aa:53:36:88:98:2d:fe:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=732b129ba8893fdd13cb2d57970d267069e5c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:d1:85:d1:c0:2d:d3:09:36:1d:88:0d:66:
d6:43:3a:30:45:f3:82:cd:f6:e8:9f:59:23:9d:e6:
15:0e:f3:b5:7e:e5:e4:5d:bc:0c:75:61:81:5b:7d:
f6:16:0c:ac:48:36:39:ac:12:f7:6b:8e:66:72:14:
2b:21:a7:1b:71:33:3d:f9:c4:4e:0a:82:a4:22:d2:
da:c5:35:91:53:bc:76:1f:b0:89:c5:6c:a2:63:71:
a4:6b:88:df:6b:86:98:1b:49:5a:2c:13:1e:3b:f9:
72:8b:ad:69:75:e5:8e:ca:13:3b:0d:27:b4:0d:a9:
d9:5d:5f:eb:83:7e:53:1e:dd:75:8b:a8:97:f9:89:
57:75:b3:65:51:64:1f:83:10:9d:ee:05:62:18:0f:
9d:45:dd:23:30:52:0b:a0:7c:4a:4f:f3:c3:d0:c4:
2c:2b:d1:12:86:23:c2:91:a8:94:5f:31:27:9c:2b:
d9:a9:fb:b7:0a:c6:4d:6b:2d:84:c3:78:24:db:cd:
4a:03:eb:b0:4a:b0:69:11:b7:c9:4a:1e:aa:6a:c9:
05:32:19:14:97:5f:e9:44:1d:da:1c:0a:d4:8a:b9:
78:28:8e:3d:2c:8d:4a:e5:89:db:68:ad:59:44:b6:
ab:10:9d:ba:98:a9:41:ab:d7:e5:6e:d0:3b:94:01:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:12:9B:A8:89:3F:DD:13:CB:2D:57:97:0D:26:70:69:E5:C4:73
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6a:98:c7:1a:f1:2a:13:f2:ce:74:da:cd:e2:bf:27:9e:2e:
7f:99:29:be:e5:3f:13:b6:1e:fd:fc:8a:b9:ee:94:8c:66:00:
b3:df:82:f4:e5:cd:9d:a8:c7:f7:34:52:d0:83:c2:62:03:2c:
c4:99:95:7b:42:2c:52:c1:6d:4c:0a:f4:bc:ae:a1:7a:84:59:
fa:3b:2a:36:44:ac:fd:0f:8b:36:67:ee:3e:d9:61:ef:eb:25:
9a:d7:4a:2b:b1:09:c9:b5:39:35:dd:b0:a9:a4:89:02:9c:0e:
11:9a:13:f0:60:09:af:fd:3d:55:86:08:40:2f:a9:6e:98:af:
55:2f:b8:d2:a4:b4:ae:76:fb:b7:a7:8e:64:6b:09:a7:e2:af:
bc:c8:92:30:2f:ee:43:a1:a0:8c:49:34:6f:6c:6d:f4:01:0b:
a0:d0:66:88:7b:9c:a4:1c:91:ca:6c:d7:03:74:41:18:a4:62:
8d:85:c7:60:70:8c:70:b7:a6:4b:4f:1e:4d:a7:70:d1:f4:a5:
7a:15:92:15:9c:8d:ff:56:59:d4:26:2b:66:ee:32:68:be:6a:
31:0d:dc:97:8b:e9:b3:64:98:53:e3:b7:36:13:9d:e6:f5:62:
46:a7:62:8e:ad:8f:af:2f:34:68:d9:cd:87:1f:54:c0:b4:ba:
67:6a:61:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcrR3DujqlM2iJgt/nflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMzZjY2UyMTQyY2ExOGI1MDU4OTcxNThkMjZlNTgzOWQy
YjQxN2YwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
Eyg3MzJiMTI5YmE4ODkzZmRkMTNjYjJkNTc5NzBkMjY3MDY5ZTVjNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh3RhdHALdMJNh2IDWbWQzowRfOC
zfbon1kjneYVDvO1fuXkXbwMdWGBW332FgysSDY5rBL3a45mchQrIacbcTM9+cRO
CoKkItLaxTWRU7x2H7CJxWyiY3Gka4jfa4aYG0laLBMeO/lyi61pdeWOyhM7DSe0
DanZXV/rg35THt11i6iX+YlXdbNlUWQfgxCd7gViGA+dRd0jMFILoHxKT/PD0MQs
K9EShiPCkaiUXzEnnCvZqfu3CsZNay2Ew3gk281KA+uwSrBpEbfJSh6qaskFMhkU
l1/pRB3aHArUirl4KI49LI1K5YnbaK1ZRLarEJ26mKlBq9flbtA7lAGEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMrEpuoiT/dE8stV5cNJnBp5cRzMB8GA1UdIwQY
MBaAFE42zOIULKGLUFiXFY0m5YOdK0F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYt
OWY4NDVjNTQ2NDcwLzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYtOWY4NDVjNTQ2NDcw
LzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmqYxxrx
KhPyznTazeK/J54uf5kpvuU/E7Ye/fyKue6UjGYAs9+C9OXNnajH9zRS0IPCYgMs
xJmVe0IsUsFtTAr0vK6heoRZ+jsqNkSs/Q+LNmfuPtlh7+slmtdKK7EJybU5Nd2w
qaSJApwOEZoT8GAJr/09VYYIQC+pbpivVS+40qS0rnb7t6eOZGsJp+KvvMiSMC/u
Q6GgjEk0b2xt9AELoNBmiHucpByRymzXA3RBGKRijYXHYHCMcLemS08eTadw0fSl
ehWSFZyN/1ZZ1CYrZu4yaL5qMQ3cl4vps2SYU+O3NhOd5vViRqdijq2Pry80aNnN
hx9UwLS6Z2phSQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:39 2025 by rpki-client