Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft (raw, json)
Hash identifier: 0jgygE5REzGG0g4/vXZIX53UqFEGij4foxoxfy5oavM=
Subject key identifier: 2B:A9:E8:EA:E1:9A:25:69:72:F5:5D:8A:03:04:40:F2:FF:EE:94:D2
Authority key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
Certificate issuer: /CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Certificate serial: 0194BBCEE96117ECDEF5D1DDC455E7D51B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
Manifest number: 04E1
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl (hash: yuy9j2/NiIcZnJlY3nKXZdgRq5dw44/5YAGSoUaVRWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e9:61:17:ec:de:f5:d1:dd:c4:55:e7:d5:1b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=2ba9e8eae19a256972f55d8a030440f2ffee94d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:53:49:fe:aa:e3:8f:dd:ed:22:0b:12:3e:
4b:0e:d2:16:e5:54:b8:37:07:c1:99:04:99:ad:ff:
4b:07:cb:d3:1b:d5:a6:c8:79:ca:e5:9e:75:4f:7c:
42:b6:a1:a7:df:b4:ac:41:9e:3a:a9:59:57:00:12:
6f:5e:47:34:7b:45:3c:b2:61:56:e8:f5:b4:3b:a3:
2b:07:81:38:83:a3:91:c0:fd:41:d0:c4:c7:43:93:
ef:c5:d9:c6:3c:d5:fc:48:8c:83:e7:0c:45:b6:6b:
f4:7a:95:b3:81:85:e8:8e:ff:72:ca:48:cf:51:f5:
c9:b2:df:97:3b:4d:ad:38:28:5c:3a:08:ce:bf:a3:
10:c9:a4:93:48:26:71:06:94:97:f4:5e:cd:e3:71:
2e:09:ca:8e:13:6f:3f:e2:f5:c3:9d:f0:7b:84:90:
53:c2:d7:84:ca:9f:15:e7:67:46:53:f4:1a:71:e0:
57:17:c6:b8:25:3f:30:03:16:5f:47:56:58:7c:59:
9e:c6:ee:63:14:4b:b4:ad:ae:c6:54:93:2b:63:91:
86:60:fa:85:00:0e:dd:e3:96:ad:1a:58:8c:40:4c:
fc:92:19:02:72:9b:06:92:8a:af:8c:9b:81:1e:8d:
b5:3d:a8:7f:d8:05:14:a7:bd:6b:a7:48:3e:97:f9:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:E8:EA:E1:9A:25:69:72:F5:5D:8A:03:04:40:F2:FF:EE:94:D2
X509v3 Authority Key Identifier:
keyid:B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4e:16:91:83:96:99:d0:b1:2f:75:3f:a4:a4:b0:b8:e5:66:
ab:93:6e:21:fd:8a:fe:41:f6:51:60:3b:83:95:57:a2:b9:96:
0d:56:ed:d6:7b:a6:c2:93:d3:2c:49:a5:46:9f:26:d7:8a:b1:
2c:cf:e7:06:84:2d:9c:e1:86:fc:23:fc:05:a5:76:57:ee:5e:
b4:07:89:da:95:e7:f9:9a:1d:ef:a7:63:31:7e:0a:01:c3:a2:
c4:67:3e:32:7a:c9:93:93:1e:16:62:68:b2:80:85:a5:87:d1:
14:a6:5a:50:0a:fa:68:32:8d:df:3a:57:16:70:43:71:18:4a:
14:cc:6d:48:64:ee:df:8b:21:61:8c:92:83:16:f6:4b:60:9b:
61:5a:61:85:d5:a9:1d:a2:44:f8:c6:75:dd:d0:eb:d0:6f:ae:
54:ef:9b:d1:34:b2:c8:88:11:fc:4a:36:79:03:4e:6f:50:76:
02:30:ff:00:dd:32:2d:b0:e0:e5:9c:ac:08:32:82:90:e1:eb:
e5:15:3d:dc:2c:a0:cd:f3:5e:b3:b8:66:5b:16:6f:3d:4a:33:
62:2d:87:c9:59:21:d7:9f:88:c5:16:b4:e1:c5:cb:24:bf:96:
47:c5:cf:72:09:dd:9e:9b:36:d7:8a:a0:52:5c:16:93:ee:0e:
f0:eb:7a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zulhF+ze9dHdxFXn1RuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTE5ZmU4Y2JlZjlhYjMyMGFjN2UwZTM0Njg3OWQ0OWQx
ODU3ZDYwHhcNMjUwMTMxMTAwMTI2WhcNMjUwMjAxMTAwMTI2WjAzMTEwLwYDVQQD
EygyYmE5ZThlYWUxOWEyNTY5NzJmNTVkOGEwMzA0NDBmMmZmZWU5NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqdTSf6q44/d7SILEj5LDtIW5VS4
NwfBmQSZrf9LB8vTG9WmyHnK5Z51T3xCtqGn37SsQZ46qVlXABJvXkc0e0U8smFW
6PW0O6MrB4E4g6ORwP1B0MTHQ5PvxdnGPNX8SIyD5wxFtmv0epWzgYXojv9yykjP
UfXJst+XO02tOChcOgjOv6MQyaSTSCZxBpSX9F7N43EuCcqOE28/4vXDnfB7hJBT
wteEyp8V52dGU/QaceBXF8a4JT8wAxZfR1ZYfFmexu5jFEu0ra7GVJMrY5GGYPqF
AA7d45atGliMQEz8khkCcpsGkoqvjJuBHo21Pah/2AUUp71rp0g+l/m63wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCup6OrhmiVpcvVdigMEQPL/7pTSMB8GA1UdIwQY
MBaAFLaRn+jL75qzIKx+DjRoedSdGFfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBHZjZNdnZtck1nckg0T05HaDUxSjBZVjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjk5NGMtYThjMC00N2UwLWEwMDYt
YjA4NjY2NmUyYWRhLzEvdHBHZjZNdnZtck1nckg0T05HaDUxSjBZVjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jNjk5NGMtYThjMC00N2UwLWEwMDYtYjA4NjY2NmUyYWRh
LzEvdHBHZjZNdnZtck1nckg0T05HaDUxSjBZVjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW04WkYOW
mdCxL3U/pKSwuOVmq5NuIf2K/kH2UWA7g5VXormWDVbt1numwpPTLEmlRp8m14qx
LM/nBoQtnOGG/CP8BaV2V+5etAeJ2pXn+Zod76djMX4KAcOixGc+MnrJk5MeFmJo
soCFpYfRFKZaUAr6aDKN3zpXFnBDcRhKFMxtSGTu34shYYySgxb2S2CbYVphhdWp
HaJE+MZ13dDr0G+uVO+b0TSyyIgR/Eo2eQNOb1B2AjD/AN0yLbDg5ZysCDKCkOHr
5RU93CygzfNes7hmWxZvPUozYi2HyVkh15+IxRa04cXLJL+WR8XPcgndnps214qg
UlwWk+4O8Ot61A==
-----END CERTIFICATE-----
Generated at Thu May 1 09:38:15 2025 by rpki-client