Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
File: tNkMTfZ2phH1alrtWAmwV-msV5E.mft (raw, json)
Hash identifier: J+NouHEV4lNTGrGq5+jRQuLG9sMokBQuc3jwCMlio2w=
Subject key identifier: 65:80:81:B5:68:68:70:F0:0C:E3:B7:D8:B7:1A:BB:4F:3A:43:28:AA
Authority key identifier: B4:D9:0C:4D:F6:76:A6:11:F5:6A:5A:ED:58:09:B0:57:E9:AC:57:91
Certificate issuer: /CN=b4d90c4df676a611f56a5aed5809b057e9ac5791
Certificate serial: 0194BC3C5F5DA75906F8DAE9FC7C8707516C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNkMTfZ2phH1alrtWAmwV-msV5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
Manifest number: 06B1
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: tNkMTfZ2phH1alrtWAmwV-msV5E.crl (hash: Hyobw1I7KWQSIST8T66FuURmmNlprkqUJJizL7P8ipE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:5d:a7:59:06:f8:da:e9:fc:7c:87:07:51:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d90c4df676a611f56a5aed5809b057e9ac5791
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=658081b5686870f00ce3b7d8b71abb4f3a4328aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:35:85:f1:9e:25:98:eb:c8:70:26:19:15:
53:53:d9:83:d8:0f:69:8c:bf:11:5d:56:08:b0:8d:
aa:d2:7e:10:fb:2d:f9:da:93:1e:15:e2:b3:f9:16:
6f:d7:64:26:23:7b:c5:64:c0:24:3e:9c:b8:64:99:
64:25:37:1d:74:fa:4a:4b:11:b3:f8:27:40:8d:17:
ee:1e:08:85:33:d5:40:d3:65:1b:fa:a6:5c:89:fc:
c5:47:00:ae:bf:dc:43:df:cf:fb:20:56:9b:34:58:
2f:63:5f:d6:03:32:5d:96:c5:07:57:0a:3e:50:53:
a3:83:2e:cc:5d:dd:7e:18:19:7f:a1:8b:fd:c1:5e:
da:2c:78:9e:40:47:a1:dc:95:4c:5d:fd:c9:04:c6:
5f:6f:e3:d5:33:51:65:7f:45:f3:fd:7c:1e:b6:c4:
64:47:d7:be:33:eb:bf:80:cb:df:45:b4:2b:be:72:
29:8a:ba:c2:c6:13:bd:54:0a:1d:71:0a:d8:2b:1b:
7b:48:a8:8a:13:d1:42:c8:99:23:11:f5:fb:9b:5e:
c2:06:90:62:a8:4d:16:28:d4:ac:2c:72:6e:3b:b1:
38:bf:67:86:2e:89:8c:e6:f8:b0:5e:f8:2f:b8:58:
3b:a4:4f:ad:dc:b3:76:51:83:c2:6e:f1:1c:61:0a:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:80:81:B5:68:68:70:F0:0C:E3:B7:D8:B7:1A:BB:4F:3A:43:28:AA
X509v3 Authority Key Identifier:
keyid:B4:D9:0C:4D:F6:76:A6:11:F5:6A:5A:ED:58:09:B0:57:E9:AC:57:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNkMTfZ2phH1alrtWAmwV-msV5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2aaf4a-e03f-4d61-b652-435e57fccdc9/1/tNkMTfZ2phH1alrtWAmwV-msV5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:18:34:c2:2a:3d:54:fa:16:6b:99:fa:5d:f2:0f:9d:eb:
ce:69:1d:49:1e:a9:93:a0:d2:3a:8a:4b:f0:37:f6:8e:af:73:
05:dc:de:de:1e:4a:41:16:45:a2:c3:7b:56:52:b6:d0:69:a2:
74:89:75:59:3b:0c:6a:40:64:88:69:8a:25:5b:91:df:5b:6f:
b4:86:ed:ac:8a:38:9b:af:30:8e:11:21:75:8a:3c:55:99:3a:
86:ca:c6:9c:5a:6e:bf:64:05:fa:4e:20:18:2c:2f:ef:61:c8:
26:b2:0a:eb:28:1b:4a:e3:8d:36:15:5f:0d:ba:48:73:92:3a:
4c:23:05:36:e1:e1:98:49:15:a9:e5:f2:51:5d:7b:b1:b8:e6:
31:19:e2:66:e3:f6:c3:db:77:bf:1c:b8:b8:02:12:af:d6:28:
27:84:38:0a:0c:9d:5d:00:58:11:f6:db:50:82:4b:7b:bd:82:
7e:40:13:23:09:05:7d:38:4c:1c:25:9d:c7:8a:8e:a8:41:61:
c2:49:2a:f2:b2:43:6f:5a:20:6f:e6:83:d3:56:94:04:78:3d:
78:8c:4b:93:68:7d:7f:fd:d2:c8:5d:86:73:66:4b:c8:87:25:
05:07:b3:3b:fe:33:46:97:7d:27:7e:dd:d4:a9:43:d2:5f:b4:
33:27:a1:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PF9dp1kG+Nrp/HyHB1FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDkwYzRkZjY3NmE2MTFmNTZhNWFlZDU4MDliMDU3ZTlh
YzU3OTEwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
Eyg2NTgwODFiNTY4Njg3MGYwMGNlM2I3ZDhiNzFhYmI0ZjNhNDMyOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMc1hfGeJZjryHAmGRVTU9mD2A9p
jL8RXVYIsI2q0n4Q+y352pMeFeKz+RZv12QmI3vFZMAkPpy4ZJlkJTcddPpKSxGz
+CdAjRfuHgiFM9VA02Ub+qZcifzFRwCuv9xD38/7IFabNFgvY1/WAzJdlsUHVwo+
UFOjgy7MXd1+GBl/oYv9wV7aLHieQEeh3JVMXf3JBMZfb+PVM1Flf0Xz/XwetsRk
R9e+M+u/gMvfRbQrvnIpirrCxhO9VAodcQrYKxt7SKiKE9FCyJkjEfX7m17CBpBi
qE0WKNSsLHJuO7E4v2eGLomM5viwXvgvuFg7pE+t3LN2UYPCbvEcYQpz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWAgbVoaHDwDOO32Lcau086QyiqMB8GA1UdIwQY
MBaAFLTZDE32dqYR9Wpa7VgJsFfprFeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5rTVRmWjJwaEgxYWxydFdBbXdWLW1zVjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYWFmNGEtZTAzZi00ZDYxLWI2NTIt
NDM1ZTU3ZmNjZGM5LzEvdE5rTVRmWjJwaEgxYWxydFdBbXdWLW1zVjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYWFmNGEtZTAzZi00ZDYxLWI2NTItNDM1ZTU3ZmNjZGM5
LzEvdE5rTVRmWjJwaEgxYWxydFdBbXdWLW1zVjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3YYNMIq
PVT6FmuZ+l3yD53rzmkdSR6pk6DSOopL8Df2jq9zBdze3h5KQRZFosN7VlK20Gmi
dIl1WTsMakBkiGmKJVuR31tvtIbtrIo4m68wjhEhdYo8VZk6hsrGnFpuv2QF+k4g
GCwv72HIJrIK6ygbSuONNhVfDbpIc5I6TCMFNuHhmEkVqeXyUV17sbjmMRniZuP2
w9t3vxy4uAISr9YoJ4Q4CgydXQBYEfbbUIJLe72CfkATIwkFfThMHCWdx4qOqEFh
wkkq8rJDb1ogb+aD01aUBHg9eIxLk2h9f/3SyF2Gc2ZLyIclBQezO/4zRpd9J37d
1KlD0l+0Myehog==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client