Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
File: _tvrNJcjK29ayaJodTchEBWihxA.mft (raw, json)
Hash identifier: 1jXzbhONz9AJg8DXf6MImBqt7GIUHqtwCgSJ4qIdPFI=
Subject key identifier: 59:CC:67:AD:B3:33:8C:E3:C4:E7:69:F6:BD:A8:46:72:0B:E8:7E:29
Authority key identifier: FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
Certificate issuer: /CN=fedbeb3497232b6f5ac9a2687537211015a28710
Certificate serial: 0194BBCED88C4D3565CA7D42E2FE2BA85701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: _tvrNJcjK29ayaJodTchEBWihxA.crl (hash: i1gzo7v8aqmUjmF0vomGY61aylQqCPl4PnFx8oS0Pgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d8:8c:4d:35:65:ca:7d:42:e2:fe:2b:a8:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedbeb3497232b6f5ac9a2687537211015a28710
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=59cc67adb3338ce3c4e769f6bda846720be87e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bf:af:04:db:fe:6e:be:bd:e9:00:dc:31:63:
83:75:ae:3f:40:61:91:fc:32:24:c1:5d:42:95:4e:
9a:15:07:aa:df:34:89:9a:cf:51:ba:e7:0e:7c:3d:
f2:ba:89:0a:15:ca:78:0b:a7:1b:33:3c:b9:b6:c1:
d1:87:25:c0:38:31:0d:97:75:d9:f9:ca:af:06:90:
ed:69:1f:38:b7:ca:f6:a9:56:18:c2:00:32:91:db:
f5:5c:c1:d6:4b:f5:f8:f7:14:6d:b6:f1:dd:38:02:
1f:f4:73:57:b3:69:41:a4:5d:13:f0:ce:dd:46:23:
0b:ea:69:d5:a9:ea:05:f6:a9:69:8f:7f:d4:b6:f6:
bd:6c:b0:6d:a9:e9:52:75:4e:b0:9d:9b:77:43:60:
f5:fb:a2:d3:3e:c8:29:2b:34:3b:11:01:ee:3a:cf:
2c:6a:fa:f1:64:6e:78:fa:df:c5:26:da:14:0e:8c:
6e:48:27:d2:30:87:1a:e6:af:cf:b9:6b:64:84:24:
9c:f1:18:44:7a:e8:55:81:58:15:8f:4e:a8:a1:49:
a7:d9:b7:f5:53:fc:56:8d:65:e6:36:28:8d:bb:b3:
53:b4:97:e9:8b:d7:ed:62:73:06:d2:1a:35:44:1e:
02:ca:b2:69:f6:70:d0:4a:16:25:80:32:1a:2c:f9:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:67:AD:B3:33:8C:E3:C4:E7:69:F6:BD:A8:46:72:0B:E8:7E:29
X509v3 Authority Key Identifier:
keyid:FE:DB:EB:34:97:23:2B:6F:5A:C9:A2:68:75:37:21:10:15:A2:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tvrNJcjK29ayaJodTchEBWihxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e2451c-e31c-4c30-86f2-0e516f9c4d45/1/_tvrNJcjK29ayaJodTchEBWihxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:2b:31:8a:e3:27:1a:88:6f:f5:36:61:a8:55:16:df:d8:
d4:d7:fc:29:3c:47:5d:91:09:aa:1d:8c:eb:4b:0a:fe:9f:04:
b4:75:33:ea:8e:7f:e0:8e:5f:ca:d7:9b:fe:99:2f:06:0b:92:
c2:03:3b:57:99:d4:d5:5e:9a:31:e3:c4:53:49:2d:cc:81:8a:
e2:db:5b:1c:dd:ca:c9:53:c7:4c:73:17:86:b3:76:ec:48:08:
d7:bb:ce:1d:54:b3:b5:74:c8:a7:fb:34:85:b6:0a:39:1d:bb:
4e:85:86:e1:28:08:3b:0d:f3:1b:85:fc:b6:5e:5d:2f:34:f0:
13:0d:51:d6:5b:a6:ba:83:4b:60:61:63:ac:ef:fb:3a:2d:4a:
f5:83:17:cf:14:91:c9:8d:5f:be:17:a7:d9:15:d8:a5:d7:db:
3d:57:d1:f4:46:17:00:a9:8d:90:ba:be:d8:4f:bd:90:3c:f2:
b1:92:c9:98:d4:34:b0:d7:85:97:1d:9b:cc:f4:67:71:54:dc:
df:bc:68:59:67:6c:82:5e:fe:18:65:d3:99:84:b7:20:e8:ba:
01:11:29:f7:45:36:1e:bc:1a:8c:17:8e:78:99:ce:05:ba:14:
f7:1f:34:dd:e9:63:db:a5:83:81:37:05:73:b9:92:19:6c:fa:
f7:15:0c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztiMTTVlyn1C4v4rqFcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGJlYjM0OTcyMzJiNmY1YWM5YTI2ODc1MzcyMTEwMTVh
Mjg3MTAwHhcNMjUwMTMxMTAwMTIyWhcNMjUwMjAxMTAwMTIyWjAzMTEwLwYDVQQD
Eyg1OWNjNjdhZGIzMzM4Y2UzYzRlNzY5ZjZiZGE4NDY3MjBiZTg3ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r+vBNv+br696QDcMWODda4/QGGR
/DIkwV1ClU6aFQeq3zSJms9RuucOfD3yuokKFcp4C6cbMzy5tsHRhyXAODENl3XZ
+cqvBpDtaR84t8r2qVYYwgAykdv1XMHWS/X49xRttvHdOAIf9HNXs2lBpF0T8M7d
RiML6mnVqeoF9qlpj3/Utva9bLBtqelSdU6wnZt3Q2D1+6LTPsgpKzQ7EQHuOs8s
avrxZG54+t/FJtoUDoxuSCfSMIca5q/PuWtkhCSc8RhEeuhVgVgVj06ooUmn2bf1
U/xWjWXmNiiNu7NTtJfpi9ftYnMG0ho1RB4CyrJp9nDQShYlgDIaLPkXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnMZ62zM4zjxOdp9r2oRnIL6H4pMB8GA1UdIwQY
MBaAFP7b6zSXIytvWsmiaHU3IRAVoocQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjIt
MGU1MTZmOWM0ZDQ1LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMjQ1MWMtZTMxYy00YzMwLTg2ZjItMGU1MTZmOWM0ZDQ1
LzEvX3R2ck5KY2pLMjlheWFKb2RUY2hFQldpaHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvArMYrj
JxqIb/U2YahVFt/Y1Nf8KTxHXZEJqh2M60sK/p8EtHUz6o5/4I5fyteb/pkvBguS
wgM7V5nU1V6aMePEU0ktzIGK4ttbHN3KyVPHTHMXhrN27EgI17vOHVSztXTIp/s0
hbYKOR27ToWG4SgIOw3zG4X8tl5dLzTwEw1R1lumuoNLYGFjrO/7Oi1K9YMXzxSR
yY1fvhen2RXYpdfbPVfR9EYXAKmNkLq+2E+9kDzysZLJmNQ0sNeFlx2bzPRncVTc
37xoWWdsgl7+GGXTmYS3IOi6AREp90U2HrwajBeOeJnOBboU9x803elj26WDgTcF
c7mSGWz69xUMig==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:58 2025 by rpki-client