Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: 0vx4BYVzfEp/IgkweLh6M52TtdHeikb7REjzToZGL60=
Subject key identifier: A3:39:0D:AA:9B:2D:F3:4F:D9:A6:83:77:C3:42:23:4B:E1:46:4E:34
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 0194BBCEF8EC25FC83C8015396FA70A0BAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 13B6
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: ZzMigQ5q5OO5SW4QZ6/3B1/8uAvDRKElwEziANy/xTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:ec:25:fc:83:c8:01:53:96:fa:70:a0:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=a3390daa9b2df34fd9a68377c342234be1464e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:7e:f0:c4:cf:14:39:dc:82:c4:75:bd:c3:
1a:ff:03:98:22:e3:2d:43:56:e6:a1:2c:8b:51:54:
28:71:e6:f4:7e:00:37:99:db:cb:0f:fb:3f:68:5b:
1c:c7:e9:60:bf:cb:ea:5a:8c:c4:b3:20:cd:cf:95:
f3:11:77:0c:21:bd:03:77:ef:86:d1:63:18:b7:d1:
79:97:fb:88:e2:a4:0f:16:84:a9:0e:56:1b:2b:06:
23:88:23:f1:81:6a:ef:a3:0a:06:61:55:2f:d8:61:
8f:3c:93:fa:4d:dd:59:b0:c5:b8:2d:c5:cd:5d:48:
44:86:c0:b0:43:7b:3c:22:a7:ec:7a:15:a3:c1:ff:
f2:6a:15:68:72:93:1c:59:42:8b:ee:e8:17:7f:d0:
aa:71:c5:d9:a4:08:43:b2:36:93:6f:6a:56:64:ed:
1f:c4:9a:2d:d2:c0:0b:8a:6b:24:3a:b8:44:e3:f5:
38:24:10:c3:e3:d9:b5:7d:dd:52:7d:b0:ad:ec:62:
28:13:05:15:ef:95:26:7d:11:c7:76:c6:86:83:b3:
fa:07:8c:ef:72:5b:1a:c4:b5:e2:3c:d9:0a:0a:08:
d9:e0:7d:20:08:ff:43:9e:7f:c3:3e:7b:c3:ff:2f:
43:df:3d:9d:3d:cf:c7:f4:0a:d5:be:f8:03:0e:2a:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:0D:AA:9B:2D:F3:4F:D9:A6:83:77:C3:42:23:4B:E1:46:4E:34
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:a0:e4:ce:e8:44:ae:ef:89:4b:9d:47:ec:29:02:06:2b:
2c:77:98:b6:be:d2:46:6b:88:5f:aa:93:de:22:29:41:c0:ad:
e9:fb:08:32:34:7d:a5:0a:7b:04:2e:68:07:cf:3c:a9:d7:4c:
83:e3:0d:26:d3:4a:d0:3d:27:d9:ed:dd:b5:28:63:80:55:df:
6e:8a:81:ee:04:eb:83:e8:da:da:d6:04:8e:b9:bb:67:40:38:
08:8e:ce:f5:fa:6f:76:b1:74:e1:e4:b4:c2:b6:84:fd:f6:94:
58:f1:4a:46:68:0d:b0:c8:d0:b3:8e:95:6b:d1:c8:2d:6e:a3:
e0:e9:22:30:1f:dc:0f:61:ec:02:a8:84:4d:a3:8b:1b:91:4c:
e3:57:7d:53:d8:e7:a9:b4:68:80:01:b9:cf:18:ae:99:62:4a:
ad:87:dc:82:7f:30:95:d0:3e:b2:e1:d4:e4:92:e9:46:44:75:
ba:9a:b3:9b:51:46:c2:60:4c:07:7b:21:7e:a0:3e:c6:f3:ea:
5d:72:2e:ae:04:61:c9:e0:95:87:82:23:ee:ce:d1:63:89:90:
fe:63:8b:7f:fc:72:0d:4f:3b:70:15:53:4e:1d:48:32:b6:e0:
c2:87:3f:87:f7:fc:28:b1:e0:35:ea:c4:fb:0a:ad:18:ff:fc:
3a:d4:6b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvjsJfyDyAFTlvpwoLqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl
OGIyOWQwHhcNMjUwMTMxMTAwMTMwWhcNMjUwMjAxMTAwMTMwWjAzMTEwLwYDVQQD
EyhhMzM5MGRhYTliMmRmMzRmZDlhNjgzNzdjMzQyMjM0YmUxNDY0ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5t+8MTPFDncgsR1vcMa/wOYIuMt
Q1bmoSyLUVQoceb0fgA3mdvLD/s/aFscx+lgv8vqWozEsyDNz5XzEXcMIb0Dd++G
0WMYt9F5l/uI4qQPFoSpDlYbKwYjiCPxgWrvowoGYVUv2GGPPJP6Td1ZsMW4LcXN
XUhEhsCwQ3s8IqfsehWjwf/yahVocpMcWUKL7ugXf9CqccXZpAhDsjaTb2pWZO0f
xJot0sALimskOrhE4/U4JBDD49m1fd1SfbCt7GIoEwUV75UmfRHHdsaGg7P6B4zv
clsaxLXiPNkKCgjZ4H0gCP9Dnn/DPnvD/y9D3z2dPc/H9ArVvvgDDipmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM5DaqbLfNP2aaDd8NCI0vhRk40MB8GA1UdIwQY
MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt
YTEwNTZmNTg5MzU0LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0
LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn2g5M7o
RK7viUudR+wpAgYrLHeYtr7SRmuIX6qT3iIpQcCt6fsIMjR9pQp7BC5oB888qddM
g+MNJtNK0D0n2e3dtShjgFXfboqB7gTrg+ja2tYEjrm7Z0A4CI7O9fpvdrF04eS0
wraE/faUWPFKRmgNsMjQs46Va9HILW6j4OkiMB/cD2HsAqiETaOLG5FM41d9U9jn
qbRogAG5zxiumWJKrYfcgn8wldA+suHU5JLpRkR1upqzm1FGwmBMB3shfqA+xvPq
XXIurgRhyeCVh4Ij7s7RY4mQ/mOLf/xyDU87cBVTTh1IMrbgwoc/h/f8KLHgNerE
+wqtGP/8OtRr3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:27 2025 by rpki-client