Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: 6mqKiHzw9SIgsE8Wmg7u2LxNXLYrAnU1z4/w77F2BnU=
Subject key identifier: 8D:99:C8:02:A2:F8:D2:16:F3:EB:C0:F8:A7:73:FD:AE:99:EF:12:D7
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 0194BBCE2FBED7CAAAB4FC18C304E8693183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 11F1
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: apjo9KDGHWJP5Yy7R8NbW1+z6g5liet+WsoXOyc2oqA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2f:be:d7:ca:aa:b4:fc:18:c3:04:e8:69:31:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=8d99c802a2f8d216f3ebc0f8a773fdae99ef12d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:bb:6b:a5:9e:50:0c:a8:19:2c:bd:83:01:
dd:78:b7:fb:4a:bc:0b:41:31:0d:7d:28:f7:8f:fe:
0f:74:91:b8:b3:7a:04:59:d6:38:63:0c:34:35:1c:
fa:c1:e0:88:aa:83:8a:89:20:f3:b6:67:e7:b9:9b:
29:45:a0:43:a3:90:8f:7e:7c:91:a8:eb:ec:b6:02:
fe:2f:ce:24:d0:b7:7a:76:d2:8f:6c:59:46:e3:cb:
93:74:98:fd:59:de:64:19:69:2b:61:d5:83:f4:5e:
1c:b7:e1:4e:82:fc:b7:6e:4b:cf:76:a5:12:e2:b0:
da:49:9a:bb:84:b1:0c:d0:73:4e:aa:a2:35:0d:3d:
ee:0d:14:ce:81:bd:35:88:69:d6:19:08:55:67:e5:
29:3f:e7:77:2f:0a:9b:67:c2:8f:e2:9d:84:44:6d:
37:a2:a1:71:32:c4:14:42:40:97:2b:d0:c7:08:27:
46:df:f1:7c:a7:ca:f1:9c:cd:29:19:22:c4:26:16:
26:38:0f:0d:ec:44:ec:dc:11:c7:49:63:cd:f3:40:
96:aa:06:77:88:30:c1:b3:ea:72:7c:8f:07:ad:75:
ec:97:f0:fd:12:d0:38:d3:b9:95:5d:56:f2:b2:01:
f3:09:dd:97:f5:8c:8d:44:ab:69:8b:d5:58:1f:67:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:99:C8:02:A2:F8:D2:16:F3:EB:C0:F8:A7:73:FD:AE:99:EF:12:D7
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:59:63:96:9b:4b:ca:bc:3a:00:05:f8:55:0d:a9:de:66:
3e:2b:25:53:12:6e:4b:bf:1d:19:3f:22:1b:a5:f5:b7:24:a5:
33:b9:49:51:7a:c7:d4:fa:88:c1:79:23:0d:b8:b3:44:13:d1:
b4:4a:1a:16:73:14:4b:1e:bf:e2:ef:74:28:76:f0:a1:d8:e3:
0a:70:a2:1b:fe:c6:3f:14:76:da:51:b1:df:0f:3e:64:3f:32:
db:eb:a7:22:2a:57:80:a8:40:c3:41:60:ed:9a:eb:df:cc:8a:
b1:7b:a9:9c:1c:d1:30:4f:bb:e4:23:53:b5:f2:b6:6f:46:80:
d8:43:19:cb:a3:45:e9:b4:d3:0c:2a:f5:ce:ab:fd:dc:40:c5:
29:07:d3:2f:0d:c9:f0:90:e3:0b:b3:f2:87:86:13:8a:07:ba:
c7:e7:e8:0a:ed:7f:6a:96:40:58:51:bf:2c:e2:b3:ac:f3:10:
e1:71:94:71:36:d1:9e:82:64:ec:93:6d:24:96:2b:e9:e1:b7:
61:6d:79:59:56:19:62:78:20:21:13:3f:6c:ae:66:6f:fb:d0:
1d:83:7c:d6:de:28:d8:7f:7b:b6:9e:97:09:cb:f5:9d:02:45:
bd:c9:0a:ef:05:4c:4e:f3:b8:e8:71:7d:de:1e:81:a6:07:e3:
bf:02:98:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi++18qqtPwYwwToaTGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMDdjNzNkYmExYTk5ZjViYmMxNWY3OGM2MzkwYWE5OWMy
Njk4MjQwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
Eyg4ZDk5YzgwMmEyZjhkMjE2ZjNlYmMwZjhhNzczZmRhZTk5ZWYxMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q+7a6WeUAyoGSy9gwHdeLf7SrwL
QTENfSj3j/4PdJG4s3oEWdY4Yww0NRz6weCIqoOKiSDztmfnuZspRaBDo5CPfnyR
qOvstgL+L84k0Ld6dtKPbFlG48uTdJj9Wd5kGWkrYdWD9F4ct+FOgvy3bkvPdqUS
4rDaSZq7hLEM0HNOqqI1DT3uDRTOgb01iGnWGQhVZ+UpP+d3LwqbZ8KP4p2ERG03
oqFxMsQUQkCXK9DHCCdG3/F8p8rxnM0pGSLEJhYmOA8N7ETs3BHHSWPN80CWqgZ3
iDDBs+pyfI8HrXXsl/D9EtA407mVXVbysgHzCd2X9YyNRKtpi9VYH2dEAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2ZyAKi+NIW8+vA+Kdz/a6Z7xLXMB8GA1UdIwQY
MBaAFE4Hxz26Gpn1u8FfeMY5CqmcJpgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjFlN2ItNTkwNy00OGMxLTkwZmQt
NTYwMjcxMmJhYTViLzEvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xZjFlN2ItNTkwNy00OGMxLTkwZmQtNTYwMjcxMmJhYTVi
LzEvVGdmSFBib2FtZlc3d1Y5NHhqa0txWndtbUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVlZY5ab
S8q8OgAF+FUNqd5mPislUxJuS78dGT8iG6X1tySlM7lJUXrH1PqIwXkjDbizRBPR
tEoaFnMUSx6/4u90KHbwodjjCnCiG/7GPxR22lGx3w8+ZD8y2+unIipXgKhAw0Fg
7Zrr38yKsXupnBzRME+75CNTtfK2b0aA2EMZy6NF6bTTDCr1zqv93EDFKQfTLw3J
8JDjC7Pyh4YTige6x+foCu1/apZAWFG/LOKzrPMQ4XGUcTbRnoJk7JNtJJYr6eG3
YW15WVYZYnggIRM/bK5mb/vQHYN81t4o2H97tp6XCcv1nQJFvckK7wVMTvO46HF9
3h6BpgfjvwKYZg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:53:25 2025 by rpki-client