Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
File: TShV3jcUZy5-qwceFh0RoDDT048.mft (raw, json)
Hash identifier: kkmnDiX5sqtHdEI/Lku5suTN5hDf+OoMOY2CZe2bISA=
Subject key identifier: 05:EE:19:C3:B0:58:47:D9:31:57:70:40:65:D4:6F:A4:CA:5C:5D:02
Authority key identifier: 4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F
Certificate issuer: /CN=4d2855de3714672e7eab071e161d11a030d3d38f
Certificate serial: 0194BCE0691B5488201A2D639B5CC98FDAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: TShV3jcUZy5-qwceFh0RoDDT048.crl (hash: KqJ9bO74mU8FhfcOkA1MSmPSDPJRVrra+WjPMO0BEY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:69:1b:54:88:20:1a:2d:63:9b:5c:c9:8f:da:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2855de3714672e7eab071e161d11a030d3d38f
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=05ee19c3b05847d93157704065d46fa4ca5c5d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:6a:40:62:39:5c:db:a5:12:0b:bb:39:b9:
9e:47:2f:f5:8b:0a:60:72:32:12:13:6d:f1:59:40:
ec:db:fa:47:49:17:fd:11:1d:2b:3f:8b:4d:ea:ae:
6e:1d:67:b4:84:50:50:5c:c6:71:9a:9b:0a:f8:40:
a9:a6:05:7d:d2:4a:5c:9d:a2:70:e8:a2:9a:2b:40:
9b:17:c6:72:9b:a7:8e:d2:7a:26:70:a6:92:52:c7:
68:c3:97:a5:6f:1e:2b:40:d7:f3:da:ea:4e:12:6f:
5d:f5:d2:23:5d:33:56:3a:81:b5:54:e6:a0:1d:94:
c8:13:0c:63:1b:6d:d0:33:35:23:da:a0:9d:2e:e6:
b4:bf:b2:d2:c8:09:97:f4:be:dd:c6:72:28:c2:28:
32:6d:53:09:bd:ba:66:71:ea:d6:a5:73:96:a7:5f:
0d:65:66:a3:f1:ca:4c:26:8d:d2:f2:68:8d:4f:b5:
95:34:94:ee:b0:fa:c0:d5:32:ac:a5:2f:c1:f3:a1:
ff:93:11:33:f1:b9:8d:ad:50:11:ec:b5:0c:4d:fd:
7a:13:b5:50:91:a3:21:ad:3a:93:f9:79:e5:5a:6a:
0c:15:ea:2b:70:7e:3a:38:9a:f5:41:2b:19:e0:85:
1e:ba:47:5a:e8:38:ba:02:c1:10:d2:8c:ae:fa:77:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:19:C3:B0:58:47:D9:31:57:70:40:65:D4:6F:A4:CA:5C:5D:02
X509v3 Authority Key Identifier:
keyid:4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c6:30:4f:7b:14:eb:80:38:26:41:e5:fc:27:d1:e4:32:91:
89:cc:d4:88:0d:51:ef:85:7c:b5:36:26:29:1f:63:15:68:b6:
29:59:ed:94:c6:c7:c7:f3:9e:f8:10:f4:6d:f1:f3:5e:41:f1:
66:ae:54:e9:b0:2a:b9:72:73:06:91:74:9b:bd:07:82:29:a1:
55:71:d9:43:36:db:6a:6d:54:f8:85:09:a0:14:d5:b9:7f:59:
f7:4d:3d:8a:33:f2:d4:bb:e7:c3:ab:63:d4:84:eb:f4:aa:df:
5b:b4:1f:bd:ed:f0:01:6c:bc:09:c8:8f:a0:14:9d:c4:27:02:
20:be:80:6a:a8:9e:82:6d:45:18:03:79:7b:2a:f2:4f:10:f7:
1d:a9:41:7f:0b:4b:ec:9d:70:42:b5:59:f9:ff:8c:6a:bf:bf:
d5:d6:0a:f5:5b:e5:3f:53:9d:67:d6:a1:76:02:29:6b:9f:ed:
96:8e:c3:38:8a:5b:b7:fc:7d:dc:a3:21:04:b6:fc:cf:e8:7f:
94:64:d2:bb:2c:06:8b:f3:78:28:c7:f6:f8:7c:df:85:5e:a5:
d9:fe:a5:53:a3:ae:1f:20:df:87:34:ca:ba:a9:60:44:ba:7b:
38:1b:6a:65:7f:2f:64:23:89:a4:ee:74:2e:03:fc:da:5f:82:
5d:42:c8:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GkbVIggGi1jm1zJj9rlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjg1NWRlMzcxNDY3MmU3ZWFiMDcxZTE2MWQxMWEwMzBk
M2QzOGYwHhcNMjUwMTMxMTUwMDExWhcNMjUwMjAxMTUwMDExWjAzMTEwLwYDVQQD
EygwNWVlMTljM2IwNTg0N2Q5MzE1NzcwNDA2NWQ0NmZhNGNhNWM1ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTRqQGI5XNulEgu7ObmeRy/1iwpg
cjISE23xWUDs2/pHSRf9ER0rP4tN6q5uHWe0hFBQXMZxmpsK+ECppgV90kpcnaJw
6KKaK0CbF8Zym6eO0nomcKaSUsdow5elbx4rQNfz2upOEm9d9dIjXTNWOoG1VOag
HZTIEwxjG23QMzUj2qCdLua0v7LSyAmX9L7dxnIowigybVMJvbpmcerWpXOWp18N
ZWaj8cpMJo3S8miNT7WVNJTusPrA1TKspS/B86H/kxEz8bmNrVAR7LUMTf16E7VQ
kaMhrTqT+XnlWmoMFeorcH46OJr1QSsZ4IUeukda6Di6AsEQ0oyu+nf8HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXuGcOwWEfZMVdwQGXUb6TKXF0CMB8GA1UdIwQY
MBaAFE0oVd43FGcufqsHHhYdEaAw09OPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNoVjNqY1VaeTUtcXdjZUZoMFJvRERUMDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84NDdjOWQtMjAxYy00NzdhLWJhOTYt
MzI4ZjY2OTk2ZWMxLzEvVFNoVjNqY1VaeTUtcXdjZUZoMFJvRERUMDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84NDdjOWQtMjAxYy00NzdhLWJhOTYtMzI4ZjY2OTk2ZWMx
LzEvVFNoVjNqY1VaeTUtcXdjZUZoMFJvRERUMDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8YwT3sU
64A4JkHl/CfR5DKRiczUiA1R74V8tTYmKR9jFWi2KVntlMbHx/Oe+BD0bfHzXkHx
Zq5U6bAquXJzBpF0m70HgimhVXHZQzbbam1U+IUJoBTVuX9Z9009ijPy1Lvnw6tj
1ITr9KrfW7Qfve3wAWy8CciPoBSdxCcCIL6Aaqiegm1FGAN5eyryTxD3HalBfwtL
7J1wQrVZ+f+Mar+/1dYK9VvlP1OdZ9ahdgIpa5/tlo7DOIpbt/x93KMhBLb8z+h/
lGTSuywGi/N4KMf2+HzfhV6l2f6lU6OuHyDfhzTKuqlgRLp7OBtqZX8vZCOJpO50
LgP82l+CXULI9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:02 2025 by rpki-client