Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: s9Z/W2Q/jmcig9xB7eusrXCwDZs8USY3wIt/xBXCo2k=
Subject key identifier: E0:0F:E0:90:21:9F:6C:E6:30:1C:EE:5E:20:73:DF:D6:BC:E5:38:A2
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 0194BD17B65979216743FA3A8A257FE37537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 08FA
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: 0AI62TnOqHFywLQ/prG76pbf7Nyp2/mnCJQSpWgNHxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b6:59:79:21:67:43:fa:3a:8a:25:7f:e3:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=e00fe090219f6ce6301cee5e2073dfd6bce538a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:d4:a3:14:43:1d:31:4f:a3:73:7b:02:ba:
a0:e1:b1:c1:4b:99:8e:f6:96:7b:70:d3:53:d2:0d:
93:3f:9c:f8:20:00:62:5f:04:2d:89:d4:d9:b2:e3:
ae:05:96:e9:a7:37:50:77:34:a6:e0:83:45:b2:bc:
e0:11:37:40:30:6a:a3:1e:33:e0:a7:bd:29:0a:5f:
66:5b:d4:20:6d:6a:53:2f:d7:4f:98:8a:d4:fa:48:
79:69:42:37:05:16:08:86:bb:1f:0c:69:c6:61:a0:
e7:da:a1:2a:aa:3d:9b:10:5c:fe:c0:f5:a8:96:86:
f9:43:6c:e0:ae:6d:a3:f4:51:48:d7:31:4d:8c:7c:
ab:b9:a1:6b:96:84:24:ca:9b:7b:2f:2d:7a:a9:00:
94:de:77:11:47:63:e0:28:ca:6c:11:32:1b:76:93:
e5:88:fa:fb:b2:77:ac:3c:87:3d:f4:70:84:52:39:
1d:94:ab:a2:a0:91:14:79:fd:a7:ba:01:2d:3f:34:
84:ef:77:30:d0:87:cb:cb:b0:da:ed:d1:3b:57:50:
85:54:a3:b4:da:89:47:23:e2:a3:b6:6e:60:60:ac:
b9:9e:68:f8:4e:3b:d4:b6:97:9b:a6:7b:62:c5:1b:
79:23:f5:7c:61:eb:cd:a8:e9:51:10:22:9e:1e:61:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:E0:90:21:9F:6C:E6:30:1C:EE:5E:20:73:DF:D6:BC:E5:38:A2
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7e:f3:f9:1a:8c:fe:a6:43:e8:e5:02:bb:40:8b:8c:12:2a:
51:94:ab:dc:68:73:9a:76:45:e7:68:08:8f:f4:c1:ec:f1:4e:
af:d1:85:6a:ef:29:8e:14:44:e8:4b:59:81:d0:aa:33:4f:45:
3a:ad:fa:5b:0e:73:a8:17:ae:ae:b2:71:52:31:f5:38:18:b6:
59:1e:e8:dc:47:0b:78:42:a4:1b:e9:54:b3:76:72:e5:81:ec:
ed:fe:bd:0a:7c:28:48:76:34:22:4b:a6:12:89:af:c1:34:63:
65:36:98:12:ea:ec:87:b7:8b:37:ac:5b:20:0f:55:69:a0:cf:
53:c4:21:c7:aa:92:7a:52:1e:c0:94:b4:04:e0:01:92:ea:0f:
76:16:99:44:57:82:d0:c5:bc:b9:72:2d:08:21:31:8f:cf:df:
2a:4b:13:d7:eb:e1:99:64:98:c5:4f:91:2e:56:49:d3:2a:f0:
76:64:7b:b3:76:4f:c8:6c:c8:bb:c6:c7:5d:a9:3f:e4:20:db:
32:a8:c9:5a:4d:63:e2:3a:80:22:08:cf:2c:66:07:80:63:f6:
d8:b6:f4:6b:15:b2:b9:ac:5a:82:ea:1d:c9:3b:f7:48:c3:d1:
fb:31:32:28:da:55:2d:1c:0c:c1:9f:a1:b2:17:5e:f1:a9:04:
9f:57:bb:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7ZZeSFnQ/o6iiV/43U3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzQ2MjA0YjRmODg1OTIzYWE0YTk3ODZlZDVhY2FmYjFj
MDA5ZGUwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
EyhlMDBmZTA5MDIxOWY2Y2U2MzAxY2VlNWUyMDczZGZkNmJjZTUzOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41vUoxRDHTFPo3N7Arqg4bHBS5mO
9pZ7cNNT0g2TP5z4IABiXwQtidTZsuOuBZbppzdQdzSm4INFsrzgETdAMGqjHjPg
p70pCl9mW9QgbWpTL9dPmIrU+kh5aUI3BRYIhrsfDGnGYaDn2qEqqj2bEFz+wPWo
lob5Q2zgrm2j9FFI1zFNjHyruaFrloQkypt7Ly16qQCU3ncRR2PgKMpsETIbdpPl
iPr7snesPIc99HCEUjkdlKuioJEUef2nugEtPzSE73cw0IfLy7Da7dE7V1CFVKO0
2olHI+Kjtm5gYKy5nmj4TjvUtpebpntixRt5I/V8YevNqOlRECKeHmE4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAP4JAhn2zmMBzuXiBz39a85TiiMB8GA1UdIwQY
MBaAFE7EYgS0+IWSOqSpeG7VrK+xwAneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lOTRjZTEtMGQ3Yi00MzFiLTkxNDMt
ZmMzZjVlYzE0YTViLzEvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lOTRjZTEtMGQ3Yi00MzFiLTkxNDMtZmMzZjVlYzE0YTVi
LzEvVHNSaUJMVDRoWkk2cEtsNGJ0V3NyN0hBQ2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANH7z+RqM
/qZD6OUCu0CLjBIqUZSr3GhzmnZF52gIj/TB7PFOr9GFau8pjhRE6EtZgdCqM09F
Oq36Ww5zqBeurrJxUjH1OBi2WR7o3EcLeEKkG+lUs3Zy5YHs7f69CnwoSHY0Ikum
EomvwTRjZTaYEursh7eLN6xbIA9VaaDPU8Qhx6qSelIewJS0BOABkuoPdhaZRFeC
0MW8uXItCCExj8/fKksT1+vhmWSYxU+RLlZJ0yrwdmR7s3ZPyGzIu8bHXak/5CDb
MqjJWk1j4jqAIgjPLGYHgGP22Lb0axWyuaxaguodyTv3SMPR+zEyKNpVLRwMwZ+h
shde8akEn1e7Cw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:03:05 2025 by rpki-client