Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: zXExKZW9skcPHv7lY1npkITw8xI7uxHKXP7lr8FtEqU=
Subject key identifier: FA:A3:5F:D3:22:7B:11:4D:2E:1C:D2:B7:4C:56:C9:F8:0A:0B:C3:69
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 0194BC04F3835AC887709E8B003797A70A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 089B
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: YgzJmTRlg5UJPztzZIOQrpL33cwaj/9O+7bMgCs2TN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f3:83:5a:c8:87:70:9e:8b:00:37:97:a7:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=faa35fd3227b114d2e1cd2b74c56c9f80a0bc369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:48:62:db:d1:25:03:93:39:31:24:78:a9:
5d:5c:44:e1:c7:f3:8a:52:23:61:ed:79:62:99:26:
34:d7:21:c9:e6:e1:56:f2:2d:a0:b0:c2:e0:ff:8f:
14:d8:26:e0:be:c8:91:b4:6f:1a:44:9f:4c:3d:97:
25:2c:38:7a:01:01:ab:7c:f9:38:0e:e3:58:6c:03:
f0:7e:b1:75:d6:b3:8d:9e:7e:29:f6:ae:6e:c2:7f:
ea:5b:d5:17:ba:a2:f9:41:14:61:f9:97:e7:d7:2f:
f9:34:33:0b:54:a1:19:f9:5b:83:4e:59:9b:99:ff:
84:fb:67:c0:61:f2:ac:fb:d0:8a:53:3c:4f:1b:15:
9a:ba:f5:00:c5:d1:8b:76:6e:a9:44:5d:cc:52:4d:
b3:29:9b:84:94:55:1c:2e:80:e9:2e:59:dc:a5:51:
25:b2:0d:70:68:b4:3c:28:ec:2e:7e:8e:28:f9:6c:
ba:cc:64:ef:7f:de:ea:99:6f:87:62:b1:0e:11:fc:
b4:e6:cd:65:f8:84:1b:dd:a1:ae:61:be:9f:4a:11:
97:1a:3b:37:55:e7:ed:38:09:c9:d6:b8:b8:70:4c:
f3:74:aa:38:85:f6:6a:ce:27:61:83:22:f3:58:d2:
f6:10:c7:55:ba:5d:c5:9f:27:d4:24:e2:fd:20:38:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:5F:D3:22:7B:11:4D:2E:1C:D2:B7:4C:56:C9:F8:0A:0B:C3:69
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:5f:4d:23:36:4f:83:e8:e7:87:4e:3a:30:df:b8:e1:b8:
6a:12:02:82:ba:c8:2d:47:cc:2e:bc:99:93:d4:b8:32:e0:b7:
73:df:87:fd:2d:aa:5b:5a:47:10:0c:16:12:9d:fd:27:39:a3:
18:36:56:13:9f:4b:7e:65:b7:2c:ce:fd:8c:31:4a:a9:cf:52:
7f:aa:ce:0c:43:92:d8:2f:35:db:cf:38:5e:e3:38:38:81:9c:
28:b8:5d:ac:dc:38:0a:f2:37:41:80:29:8d:49:88:b9:6b:38:
b4:10:31:07:d9:e8:75:bf:59:a0:e2:67:5d:61:ba:7a:64:c4:
9c:67:81:85:2f:c5:b9:ec:af:ce:60:f5:d9:37:c1:dc:70:1d:
e1:43:71:83:c4:f3:e3:d0:21:0b:e8:dd:66:b0:16:51:1a:6c:
30:d2:68:a1:90:9e:55:70:4f:ed:83:fb:fd:3f:3d:16:73:22:
2f:00:e4:1a:7a:2d:87:3d:a4:5f:48:53:dc:0c:20:bb:8b:86:
69:35:08:dc:8d:45:ce:e4:d3:60:62:74:99:e5:e2:b5:b1:b2:
cf:1f:94:5b:65:ef:94:9f:83:04:fc:97:6c:03:30:08:d8:33:
73:bb:80:0b:7b:fe:3e:c2:df:9a:33:47:4e:e5:7f:f5:0f:e6:
5b:4c:25:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPODWsiHcJ6LADeXpwpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2Q4MjEzNWU0NTkzMTU1ZmE2YWQ2ZmI3ZmVjYjAxZjEz
ODE4YjIwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EyhmYWEzNWZkMzIyN2IxMTRkMmUxY2QyYjc0YzU2YzlmODBhMGJjMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsptIYtvRJQOTOTEkeKldXEThx/OK
UiNh7XlimSY01yHJ5uFW8i2gsMLg/48U2CbgvsiRtG8aRJ9MPZclLDh6AQGrfPk4
DuNYbAPwfrF11rONnn4p9q5uwn/qW9UXuqL5QRRh+Zfn1y/5NDMLVKEZ+VuDTlmb
mf+E+2fAYfKs+9CKUzxPGxWauvUAxdGLdm6pRF3MUk2zKZuElFUcLoDpLlncpVEl
sg1waLQ8KOwufo4o+Wy6zGTvf97qmW+HYrEOEfy05s1l+IQb3aGuYb6fShGXGjs3
VeftOAnJ1ri4cEzzdKo4hfZqzidhgyLzWNL2EMdVul3FnyfUJOL9IDhS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqjX9MiexFNLhzSt0xWyfgKC8NpMB8GA1UdIwQY
MBaAFE09ghNeRZMVX6atb7f+ywHxOBiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgt
MDVkODc1NmYwOTJlLzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81OGJiOTMtZjZhMi00ODk4LWJmZDgtMDVkODc1NmYwOTJl
LzEvVFQyQ0UxNUZreFZmcHExdnRfN0xBZkU0R0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV1fTSM2
T4Po54dOOjDfuOG4ahICgrrILUfMLryZk9S4MuC3c9+H/S2qW1pHEAwWEp39Jzmj
GDZWE59LfmW3LM79jDFKqc9Sf6rODEOS2C812884XuM4OIGcKLhdrNw4CvI3QYAp
jUmIuWs4tBAxB9nodb9ZoOJnXWG6emTEnGeBhS/FueyvzmD12TfB3HAd4UNxg8Tz
49AhC+jdZrAWURpsMNJooZCeVXBP7YP7/T89FnMiLwDkGnothz2kX0hT3Awgu4uG
aTUI3I1FzuTTYGJ0meXitbGyzx+UW2XvlJ+DBPyXbAMwCNgzc7uAC3v+PsLfmjNH
TuV/9Q/mW0wl6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:37 2025 by rpki-client