Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
File: TYEGKSpQrK_qaBfLoczmd6J34OE.mft (raw, json)
Hash identifier: kMCPAPPbvYWyXYQMcBLTt2x5RE+kHs/5uwe6AMuyIiY=
Subject key identifier: 03:E6:06:76:18:A5:E7:31:D2:9C:27:40:DD:EC:1C:13:96:6F:75:7E
Authority key identifier: 4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
Certificate issuer: /CN=4d8106292a50acafea6817cba1cce677a277e0e1
Certificate serial: 0194BCE06E4E560D56116ADCF1426A84681B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
Manifest number: 029E
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: TYEGKSpQrK_qaBfLoczmd6J34OE.crl (hash: VogIqc7hnBeXkCEyksyWlGKkLqOPFhgKZl8CyLWJZF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6e:4e:56:0d:56:11:6a:dc:f1:42:6a:84:68:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8106292a50acafea6817cba1cce677a277e0e1
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=03e6067618a5e731d29c2740ddec1c13966f757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:d6:53:8d:0a:e9:8c:97:20:1f:da:f8:40:
6d:e8:21:9c:6c:e7:26:22:61:9a:d7:21:e9:c2:e6:
b5:8a:68:0c:35:d0:20:ee:30:df:3b:dd:e6:ed:74:
0c:b6:93:17:7c:1d:97:bb:a1:d0:b6:80:d8:21:6a:
22:9c:8d:61:ab:37:b1:0e:9e:eb:4a:0a:f2:fa:d9:
c6:ba:c1:ae:94:48:b4:f3:e0:38:09:3c:e6:f7:be:
c2:f0:60:c2:3c:67:62:de:06:9d:6d:ad:6b:75:1d:
59:5b:cb:f6:a5:6f:4b:ee:f7:c5:49:7c:bc:53:15:
cf:da:55:7a:07:1e:4d:cf:8b:35:35:e1:da:cb:4a:
7e:20:64:46:0c:92:19:64:30:d7:a5:17:92:8e:44:
38:7c:cd:0b:d5:c0:92:d6:8f:1a:b2:76:48:b4:38:
74:31:29:b2:89:39:bf:64:b8:86:57:88:c8:b0:45:
7d:b6:69:7c:90:01:cb:6c:26:9c:0e:ad:8c:98:7c:
6a:87:3f:2d:1f:2b:5b:cb:9a:3c:cd:f2:58:fe:c7:
c2:10:66:6c:c9:3a:c3:ed:05:f4:77:d5:40:74:61:
07:f7:14:29:0e:2b:bf:85:da:62:95:4e:06:d4:31:
fd:31:ed:cf:61:7f:ac:16:27:1d:64:e1:e2:3c:e9:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:06:76:18:A5:E7:31:D2:9C:27:40:DD:EC:1C:13:96:6F:75:7E
X509v3 Authority Key Identifier:
keyid:4D:81:06:29:2A:50:AC:AF:EA:68:17:CB:A1:CC:E6:77:A2:77:E0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYEGKSpQrK_qaBfLoczmd6J34OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f541d1-5cf9-4481-8a07-3a5b3696817d/1/TYEGKSpQrK_qaBfLoczmd6J34OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f8:dc:e1:74:51:9a:69:bd:5e:93:5d:b2:8f:15:98:93:6e:
ab:ca:f1:1f:3a:03:d0:83:8e:82:bf:94:01:6f:a5:9c:39:5a:
2a:ba:f5:f4:9f:0b:e1:85:9f:f7:f2:45:bc:3c:ea:33:ab:18:
85:40:58:48:c3:c0:2a:52:47:f4:10:cf:cc:81:90:0e:ba:97:
ea:ad:be:ab:9f:39:e4:90:dc:c4:dd:1d:bf:62:a1:84:dd:93:
3a:92:35:7b:2e:fe:5f:52:8e:47:c0:e4:75:ae:b1:32:38:12:
29:f9:1b:ce:5a:46:8c:ab:0e:a8:d1:52:1d:96:e6:29:83:15:
d4:cb:dc:23:e3:42:f7:86:47:fc:e2:5b:32:37:39:a1:71:03:
cf:1e:ad:30:86:59:2f:36:e8:e1:86:88:1a:46:b3:35:75:f0:
45:2f:e6:8a:98:8e:11:23:a0:02:de:45:1f:2f:4a:78:09:b4:
e9:83:69:25:1a:98:ae:50:3d:c3:4d:c3:77:29:e9:63:c1:46:
1d:58:d5:5c:05:f9:ee:0c:39:9c:b8:b7:c6:5b:04:f9:e5:5d:
c5:0a:01:a6:19:e5:99:89:f4:56:a8:a2:23:f0:d9:f9:5b:a3:
ee:64:56:a1:d8:8a:36:d0:37:0e:6e:d6:e7:fc:9e:58:5d:60:
59:f8:a7:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84G5OVg1WEWrc8UJqhGgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODEwNjI5MmE1MGFjYWZlYTY4MTdjYmExY2NlNjc3YTI3
N2UwZTEwHhcNMjUwMTMxMTUwMDEyWhcNMjUwMjAxMTUwMDEyWjAzMTEwLwYDVQQD
EygwM2U2MDY3NjE4YTVlNzMxZDI5YzI3NDBkZGVjMWMxMzk2NmY3NTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjWU40K6YyXIB/a+EBt6CGcbOcm
ImGa1yHpwua1imgMNdAg7jDfO93m7XQMtpMXfB2Xu6HQtoDYIWoinI1hqzexDp7r
Sgry+tnGusGulEi08+A4CTzm977C8GDCPGdi3gadba1rdR1ZW8v2pW9L7vfFSXy8
UxXP2lV6Bx5Nz4s1NeHay0p+IGRGDJIZZDDXpReSjkQ4fM0L1cCS1o8asnZItDh0
MSmyiTm/ZLiGV4jIsEV9tml8kAHLbCacDq2MmHxqhz8tHytby5o8zfJY/sfCEGZs
yTrD7QX0d9VAdGEH9xQpDiu/hdpilU4G1DH9Me3PYX+sFicdZOHiPOn1SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPmBnYYpecx0pwnQN3sHBOWb3V+MB8GA1UdIwQY
MBaAFE2BBikqUKyv6mgXy6HM5neid+DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mNTQxZDEtNWNmOS00NDgxLThhMDct
M2E1YjM2OTY4MTdkLzEvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mNTQxZDEtNWNmOS00NDgxLThhMDctM2E1YjM2OTY4MTdk
LzEvVFlFR0tTcFFyS19xYUJmTG9jem1kNkozNE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/jc4XRR
mmm9XpNdso8VmJNuq8rxHzoD0IOOgr+UAW+lnDlaKrr19J8L4YWf9/JFvDzqM6sY
hUBYSMPAKlJH9BDPzIGQDrqX6q2+q5855JDcxN0dv2KhhN2TOpI1ey7+X1KOR8Dk
da6xMjgSKfkbzlpGjKsOqNFSHZbmKYMV1MvcI+NC94ZH/OJbMjc5oXEDzx6tMIZZ
Lzbo4YaIGkazNXXwRS/mipiOESOgAt5FHy9KeAm06YNpJRqYrlA9w03DdynpY8FG
HVjVXAX57gw5nLi3xlsE+eVdxQoBphnlmYn0VqiiI/DZ+Vuj7mRWodiKNtA3Dm7W
5/yeWF1gWfin3w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:40 2025 by rpki-client