
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
File: TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft (raw, json)
Hash identifier: +TU3mSsx6PmEx7ptpyYO9C67cmXjFPPUb94F3xq6+n8=
Subject key identifier: 20:83:36:54:ED:37:E9:CD:EE:71:69:B4:57:D6:BB:37:E6:67:D9:27
Authority key identifier: 4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
Certificate issuer: /CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Certificate serial: 0194BBCEE3B6AC60A67FA687080F5DC84BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
Manifest number: 0794
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: TgWhR5BmUWnAnlyUPv9dgl5sj_M.crl (hash: iHlzk0NjoI7SJxPN8dCw1OOrDukCyU4mpaogpWgLiaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:b6:ac:60:a6:7f:a6:87:08:0f:5d:c8:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=20833654ed37e9cdee7169b457d6bb37e667d927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:dc:d1:11:ff:d4:a6:73:d5:a7:99:17:06:
ac:bb:ff:63:2f:dc:f3:96:76:29:63:42:6e:50:13:
a2:17:d8:87:19:79:42:fc:f4:16:ba:75:c7:d1:f8:
8e:16:ed:12:3f:3d:4a:43:4e:fe:3b:dd:3f:8c:5f:
32:32:f4:d9:88:65:9a:aa:06:a4:75:3a:9d:ec:12:
ac:b5:d5:cb:2a:d4:52:d5:eb:8e:33:3e:2a:71:4b:
68:fa:f8:d4:c9:6e:49:01:8d:9c:db:81:8a:a6:8f:
80:4e:19:8a:c4:56:80:a5:57:c9:85:f0:a5:52:6d:
41:4b:e1:1f:49:0e:4f:ee:a4:b4:95:78:c6:00:a2:
80:9d:ed:07:89:45:de:29:e1:f1:81:1a:66:47:1c:
18:1d:3d:13:bd:a9:31:4d:dd:35:ae:5f:2b:27:d7:
54:1a:5c:4f:24:a1:77:41:87:c0:aa:fd:66:6c:58:
d6:51:b4:e3:8b:41:f5:d8:0f:7a:1f:33:60:be:8e:
ec:3e:4c:a9:65:9c:35:e1:92:b7:a0:bf:1d:e4:f2:
a7:df:85:5f:3b:48:be:3b:a0:7d:e4:28:4f:15:36:
d9:66:1a:ce:bb:c2:d7:97:b9:e7:9d:2a:30:62:65:
66:87:56:f1:20:da:8b:e6:95:6f:6b:74:39:b1:11:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:36:54:ED:37:E9:CD:EE:71:69:B4:57:D6:BB:37:E6:67:D9:27
X509v3 Authority Key Identifier:
keyid:4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:4c:1b:de:d7:0b:16:e0:c9:25:d5:a8:fe:a7:bf:3e:6c:
2f:1c:b4:ef:f1:23:4c:e8:35:64:df:ff:fb:50:9c:d3:cb:fb:
ed:ea:89:6c:58:bd:2f:21:a3:f7:23:44:c6:93:e5:db:4b:76:
de:5c:8e:ef:97:ea:f8:71:bc:ec:c1:73:89:31:39:55:c3:ce:
5f:30:0b:6f:c7:d9:06:ba:ad:27:7e:fd:ee:60:b6:7e:09:8f:
63:b6:10:d5:1a:d5:7d:2b:97:85:13:8e:1e:5d:64:ca:40:d1:
e3:0d:09:6a:8a:80:ad:12:52:50:3f:1e:cd:3d:f0:21:50:48:
00:4b:cd:45:33:ef:c1:2c:2e:03:e0:8b:2b:b3:9f:61:08:3e:
f0:1a:37:43:2b:c7:52:97:3c:ec:ce:bd:ff:5f:a0:de:7f:e8:
64:7f:12:86:c2:2f:96:f9:9e:6c:13:d4:34:b8:2c:a2:f7:82:
52:02:43:a1:89:3f:a7:36:8c:c6:e9:7b:cd:46:31:c3:a2:2c:
d2:d6:24:0c:bf:2c:20:de:c7:0a:27:98:56:22:a2:e6:03:c8:
e6:b9:d2:ce:f0:56:87:5d:b2:7d:5a:08:fd:c0:34:d7:ba:33:
d4:1a:86:64:1f:2c:05:f8:a3:9e:d2:83:c0:51:f1:a7:2f:f5:
14:3d:59:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zuO2rGCmf6aHCA9dyEurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDVhMTQ3OTA2NjUxNjljMDllNWM5NDNlZmY1ZDgyNWU2
YzhmZjMwHhcNMjUwMTMxMTAwMTI1WhcNMjUwMjAxMTAwMTI1WjAzMTEwLwYDVQQD
EygyMDgzMzY1NGVkMzdlOWNkZWU3MTY5YjQ1N2Q2YmIzN2U2NjdkOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApijc0RH/1KZz1aeZFwasu/9jL9zz
lnYpY0JuUBOiF9iHGXlC/PQWunXH0fiOFu0SPz1KQ07+O90/jF8yMvTZiGWaqgak
dTqd7BKstdXLKtRS1euOMz4qcUto+vjUyW5JAY2c24GKpo+AThmKxFaApVfJhfCl
Um1BS+EfSQ5P7qS0lXjGAKKAne0HiUXeKeHxgRpmRxwYHT0TvakxTd01rl8rJ9dU
GlxPJKF3QYfAqv1mbFjWUbTji0H12A96HzNgvo7sPkypZZw14ZK3oL8d5PKn34Vf
O0i+O6B95ChPFTbZZhrOu8LXl7nnnSowYmVmh1bxINqL5pVva3Q5sRFC9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCDNlTtN+nN7nFptFfWuzfmZ9knMB8GA1UdIwQY
MBaAFE4FoUeQZlFpwJ5clD7/XYJebI/zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdXaFI1Qm1VV25Bbmx5VVB2OWRnbDVzal9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYTU0ZTgtMWM3MS00ZWJjLWI5OWUt
NjBlYzc4YmUwMmQ1LzEvVGdXaFI1Qm1VV25Bbmx5VVB2OWRnbDVzal9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wYTU0ZTgtMWM3MS00ZWJjLWI5OWUtNjBlYzc4YmUwMmQ1
LzEvVGdXaFI1Qm1VV25Bbmx5VVB2OWRnbDVzal9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwhMG97X
CxbgySXVqP6nvz5sLxy07/EjTOg1ZN//+1Cc08v77eqJbFi9LyGj9yNExpPl20t2
3lyO75fq+HG87MFziTE5VcPOXzALb8fZBrqtJ3797mC2fgmPY7YQ1RrVfSuXhROO
Hl1kykDR4w0JaoqArRJSUD8ezT3wIVBIAEvNRTPvwSwuA+CLK7OfYQg+8Bo3QyvH
Upc87M69/1+g3n/oZH8ShsIvlvmebBPUNLgsoveCUgJDoYk/pzaMxul7zUYxw6Is
0tYkDL8sIN7HCieYViKi5gPI5rnSzvBWh12yfVoI/cA017oz1BqGZB8sBfijntKD
wFHxpy/1FD1Z3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:04 2025 by rpki-client