Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft (raw, json)
Hash identifier: CMtgH3VARy2uZbPdV/PjTeM4KKBxnnOonS1Rvo22PFs=
Subject key identifier: 81:7E:9F:47:20:1D:5E:F0:27:69:D8:3C:F6:B3:80:75:C3:74:E2:79
Authority key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
Certificate issuer: /CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Certificate serial: 0194BBCEFC11D9BDF27A87C6AC1352647C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
Manifest number: 03C9
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl (hash: 53DpNFzL0gClpQoRNbZar5no8THGbLkFzndWk51DAAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:11:d9:bd:f2:7a:87:c6:ac:13:52:64:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=817e9f47201d5ef02769d83cf6b38075c374e279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:79:a7:4e:76:eb:38:fa:65:be:4f:4a:4c:
44:77:d6:d9:58:9e:b9:d2:ac:ca:49:e2:54:46:15:
94:0e:51:04:bf:c1:18:82:59:4b:36:63:8b:95:65:
41:7f:30:0c:ae:c6:fc:b6:90:23:d4:e8:53:09:41:
1f:66:90:23:c4:90:65:49:81:23:6a:f3:2d:42:c1:
0a:2d:b3:1d:09:47:ae:40:fc:69:bd:3e:6b:db:02:
41:85:5f:1c:ba:b5:c7:92:5e:56:83:f1:c3:f7:0c:
a0:5e:20:e9:ba:09:d6:e7:71:0e:3f:c0:02:cb:6f:
30:fc:c5:0f:29:75:2e:c4:06:59:02:3e:9d:a2:9c:
0b:ed:1f:a6:a8:95:d4:ea:fe:ec:b3:56:1e:47:65:
67:ad:62:ef:79:ac:ac:30:4d:1c:fd:2b:ed:ff:90:
28:8c:9d:c8:54:2b:72:a0:ad:66:22:5f:2d:32:c2:
5c:77:19:ee:e5:9e:6f:77:d8:33:33:59:9a:ac:27:
97:a4:cb:30:69:5a:06:02:fd:bd:db:b3:22:f2:f7:
1f:cf:83:0e:03:fe:40:27:7f:51:c3:57:c3:ae:40:
8b:21:d0:32:f4:db:cf:13:9d:e0:0e:26:62:4e:12:
49:57:d3:9f:35:0d:56:99:2a:63:a0:8f:31:f1:02:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:9F:47:20:1D:5E:F0:27:69:D8:3C:F6:B3:80:75:C3:74:E2:79
X509v3 Authority Key Identifier:
keyid:B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:24:5d:e6:a8:b3:37:7b:7a:36:14:4e:64:19:be:f1:59:9c:
0e:30:47:00:55:cc:a1:bb:55:61:94:17:c0:07:03:52:38:07:
ba:b8:11:54:00:92:0e:15:05:81:95:0e:19:cb:d8:fc:70:26:
7d:c5:5f:04:75:aa:17:c6:89:4b:c5:98:a5:06:ea:76:f0:21:
87:26:06:9d:02:64:1b:78:d2:51:0e:ff:80:b3:39:af:ce:b1:
ea:24:57:f9:bf:f0:46:74:61:98:f0:07:9c:aa:20:6b:60:57:
bf:b7:8d:60:ec:87:fa:1a:bd:0e:54:56:7c:69:8a:69:3c:b5:
d6:eb:a3:e0:ea:6e:b7:c0:f8:8d:e1:0f:b8:7c:82:2f:13:1c:
33:0e:3f:57:4d:d1:25:09:f7:cd:27:79:32:7b:79:2e:3f:c9:
4c:4c:42:98:78:bf:95:f4:97:32:f1:bd:e3:86:ab:df:9e:0b:
53:07:8c:32:0b:d3:0d:5a:ee:af:f4:a8:6c:c2:c0:00:0c:95:
f2:0d:15:4a:87:11:e7:f4:72:a3:e3:0b:54:79:a1:be:a0:ff:
d5:c6:ec:44:b1:8f:d1:3d:72:33:72:fc:b7:97:9c:17:4a:35:
e9:fd:87:f2:1a:bf:ea:27:59:fc:91:03:90:00:c9:87:57:d3:
52:09:1e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvwR2b3yeofGrBNSZHwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWFhZWYxY2VhMTlmMmY5MjZmNTcwOTYxNTQ1Y2ZlNGVk
NjlhZjYwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg4MTdlOWY0NzIwMWQ1ZWYwMjc2OWQ4M2NmNmIzODA3NWMzNzRlMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiV5p0526zj6Zb5PSkxEd9bZWJ65
0qzKSeJURhWUDlEEv8EYgllLNmOLlWVBfzAMrsb8tpAj1OhTCUEfZpAjxJBlSYEj
avMtQsEKLbMdCUeuQPxpvT5r2wJBhV8curXHkl5Wg/HD9wygXiDpugnW53EOP8AC
y28w/MUPKXUuxAZZAj6dopwL7R+mqJXU6v7ss1YeR2VnrWLveaysME0c/Svt/5Ao
jJ3IVCtyoK1mIl8tMsJcdxnu5Z5vd9gzM1marCeXpMswaVoGAv2927Mi8vcfz4MO
A/5AJ39Rw1fDrkCLIdAy9NvPE53gDiZiThJJV9OfNQ1WmSpjoI8x8QJVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF+n0cgHV7wJ2nYPPazgHXDdOJ5MB8GA1UdIwQY
MBaAFLaarvHOoZ8vkm9XCWFUXP5O1pr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEt
N2ZlMjBmMmVmZWQ0LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mMDE3MTItNzJiYi00MDg4LThiNjEtN2ZlMjBmMmVmZWQ0
LzEvdHBxdThjNmhueS1TYjFjSllWUmNfazdXbXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSRd5qiz
N3t6NhROZBm+8VmcDjBHAFXMobtVYZQXwAcDUjgHurgRVACSDhUFgZUOGcvY/HAm
fcVfBHWqF8aJS8WYpQbqdvAhhyYGnQJkG3jSUQ7/gLM5r86x6iRX+b/wRnRhmPAH
nKoga2BXv7eNYOyH+hq9DlRWfGmKaTy11uuj4Oput8D4jeEPuHyCLxMcMw4/V03R
JQn3zSd5Mnt5Lj/JTExCmHi/lfSXMvG944ar354LUweMMgvTDVrur/SobMLAAAyV
8g0VSocR5/Ryo+MLVHmhvqD/1cbsRLGP0T1yM3L8t5ecF0o16f2H8hq/6idZ/JED
kADJh1fTUgkeJw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:59 2025 by rpki-client