Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
File: tkDbwv_PXWNFicBEAV1xdcuv8-0.mft (raw, json)
Hash identifier: TDszlAxkOFDQc5HetaEWlRcwDOfkJNbQgjo8kaG+noU=
Subject key identifier: 35:43:9B:D4:FF:09:ED:EF:94:D3:F0:91:A9:97:B4:30:8F:CC:70:B7
Authority key identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
Certificate issuer: /CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Certificate serial: 0194BCA9C44EFCDB45244D8FE68BE3970BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
Manifest number: 0EC9
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: tkDbwv_PXWNFicBEAV1xdcuv8-0.crl (hash: 136JuJzCaNNXWdLCGrzk5bbyj2mp5nZB6uDsxA1Y/ZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:4e:fc:db:45:24:4d:8f:e6:8b:e3:97:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=35439bd4ff09edef94d3f091a997b4308fcc70b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:57:5f:69:22:fe:ef:95:c4:85:29:57:98:
a6:b2:ed:0e:37:1f:26:21:a4:a6:85:8d:7e:a9:9b:
66:da:50:76:e4:74:60:50:54:26:84:3c:cb:b9:7f:
dd:47:94:40:21:40:f8:dc:96:08:01:05:44:9b:2c:
61:3f:00:d2:00:f4:43:d2:8f:1a:cf:b4:64:c6:6f:
ae:28:a2:76:f8:29:f1:bb:b4:55:57:d2:a7:09:e3:
1f:f6:e3:7a:e7:a3:63:ad:d7:49:a2:56:96:43:1c:
6e:fa:7c:68:99:9b:a0:7c:74:af:57:d3:f9:23:da:
a0:e8:92:91:98:76:e6:b5:18:16:85:f7:72:b3:72:
3c:26:9b:64:58:a3:9c:1b:ea:da:d9:bd:ec:8f:01:
c0:f6:2f:04:e1:8b:26:17:35:fb:10:d2:27:1a:3e:
f1:0e:f8:7e:cd:cf:a4:0e:2e:8c:97:0e:d6:aa:1e:
fa:dd:27:c7:e9:93:aa:50:17:51:61:41:d6:f5:22:
71:74:f7:29:7b:29:6a:40:e8:30:af:21:13:e2:d6:
5c:19:0c:00:6b:07:f6:0e:4a:61:89:dc:3f:0d:90:
08:c0:ae:b8:90:f5:48:92:a9:0c:e1:32:92:d1:b1:
70:ea:13:8f:90:f7:dd:13:97:1e:8a:20:a9:24:9b:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:43:9B:D4:FF:09:ED:EF:94:D3:F0:91:A9:97:B4:30:8F:CC:70:B7
X509v3 Authority Key Identifier:
keyid:B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f3:c1:8f:84:55:24:28:a3:69:36:0a:57:3e:7a:b8:ed:c0:
75:b2:d1:d6:38:ac:c2:e8:43:c7:a4:99:ac:f8:e7:79:f9:cc:
50:7c:c7:5a:45:b7:0d:35:f7:08:6b:8d:9f:5e:34:ee:5a:7a:
6a:a4:b7:0d:79:63:79:22:ac:af:53:5c:98:d2:59:2a:0d:bd:
b3:ac:c4:32:62:cd:0c:38:2f:72:e1:7d:cf:ba:52:65:51:d0:
3d:01:5d:ff:13:26:2a:59:3c:51:ef:2b:03:af:e5:65:9f:4d:
a3:df:12:d7:18:c7:4f:9b:37:c6:67:2f:5d:f0:8f:00:e2:a4:
9b:63:18:7d:32:b2:b9:78:4e:01:4d:86:33:48:1f:95:a2:d8:
94:31:e8:6e:39:bd:fc:79:45:66:8f:a3:6a:93:54:94:22:87:
8f:2d:4f:e4:ea:bc:d3:0f:4a:7c:b2:8a:06:a3:0a:7e:92:32:
64:c9:66:58:f2:b0:63:65:77:47:6b:65:26:3d:d6:cb:ed:50:
0f:04:ca:d4:74:01:c8:39:74:6d:1c:ec:96:68:2d:6e:d4:5e:
0e:53:79:e7:21:68:a4:81:85:d8:e4:12:db:45:b2:c2:c2:3e:
b8:87:1f:2b:a0:1d:06:00:e8:eb:54:e0:a2:fe:cb:34:36:a5:
77:04:e0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcRO/NtFJE2P5ovjlwu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDBkYmMyZmZjZjVkNjM0NTg5YzA0NDAxNWQ3MTc1Y2Jh
ZmYzZWQwHhcNMjUwMTMxMTQwMDI5WhcNMjUwMjAxMTQwMDI5WjAzMTEwLwYDVQQD
EygzNTQzOWJkNGZmMDllZGVmOTRkM2YwOTFhOTk3YjQzMDhmY2M3MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JpXX2ki/u+VxIUpV5imsu0ONx8m
IaSmhY1+qZtm2lB25HRgUFQmhDzLuX/dR5RAIUD43JYIAQVEmyxhPwDSAPRD0o8a
z7Rkxm+uKKJ2+Cnxu7RVV9KnCeMf9uN656NjrddJolaWQxxu+nxomZugfHSvV9P5
I9qg6JKRmHbmtRgWhfdys3I8JptkWKOcG+ra2b3sjwHA9i8E4YsmFzX7ENInGj7x
Dvh+zc+kDi6Mlw7Wqh763SfH6ZOqUBdRYUHW9SJxdPcpeylqQOgwryET4tZcGQwA
awf2Dkphidw/DZAIwK64kPVIkqkM4TKS0bFw6hOPkPfdE5ceiiCpJJtU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVDm9T/Ce3vlNPwkamXtDCPzHC3MB8GA1UdIwQY
MBaAFLZA28L/z11jRYnARAFdcXXLr/PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83Njc2OGMtY2Q3NS00NmE5LThkNjUt
NmNiYjc3YmFhMDJkLzEvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi83Njc2OGMtY2Q3NS00NmE5LThkNjUtNmNiYjc3YmFhMDJk
LzEvdGtEYnd2X1BYV05GaWNCRUFWMXhkY3V2OC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfPBj4RV
JCijaTYKVz56uO3AdbLR1jiswuhDx6SZrPjnefnMUHzHWkW3DTX3CGuNn1407lp6
aqS3DXljeSKsr1NcmNJZKg29s6zEMmLNDDgvcuF9z7pSZVHQPQFd/xMmKlk8Ue8r
A6/lZZ9No98S1xjHT5s3xmcvXfCPAOKkm2MYfTKyuXhOAU2GM0gflaLYlDHobjm9
/HlFZo+japNUlCKHjy1P5Oq80w9KfLKKBqMKfpIyZMlmWPKwY2V3R2tlJj3Wy+1Q
DwTK1HQByDl0bRzslmgtbtReDlN55yFopIGF2OQS20WywsI+uIcfK6AdBgDo61Tg
ov7LNDaldwTg/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:57 2025 by rpki-client