Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File: tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier: DDeaaCVtL4rGX8RgizfYJC6UyRKiwy4wDNGEmXAZH8g=
Subject key identifier: AD:89:49:4D:05:8D:86:15:DD:CF:CE:BB:AE:86:E2:F2:31:1C:BC:40
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer: /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial: 0194BC3C5B15D32669AF6132DB1B5F88885C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number: 068F
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: bJuMpWaMLgqU24DaTThfB8lkuufeEjsQ7yGb8oYC/94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:15:d3:26:69:af:61:32:db:1b:5f:88:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=ad89494d058d8615ddcfcebbae86e2f2311cbc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:1c:67:38:7c:85:a1:7b:24:fa:b8:e8:77:
85:06:f8:2a:d9:52:a3:e7:bb:47:86:78:02:6a:1e:
ee:1d:22:19:7a:b3:97:9c:66:2e:df:2a:71:63:4d:
55:10:a2:1f:ad:0b:9e:79:b1:f5:06:f2:8c:0a:29:
1b:81:cc:85:e7:aa:61:1e:17:a5:03:af:6c:10:ab:
95:20:88:af:c7:1e:0a:1f:c7:44:4c:43:1a:15:36:
36:2c:62:47:ec:c5:11:8e:97:a6:69:a0:f2:8b:c5:
55:75:8f:91:e4:4f:c7:0d:50:0d:82:b2:fe:21:28:
34:ea:a5:44:70:11:cd:05:69:6e:ab:3d:fe:38:cc:
fa:80:02:78:b5:63:92:1e:ee:b2:32:46:a3:cd:39:
1d:fd:c6:b0:69:c6:36:28:e4:a9:84:ec:56:44:42:
c2:24:86:a4:0e:06:0f:72:66:00:99:ed:cd:e5:0a:
cc:4b:f0:d6:5d:da:41:a8:67:59:33:5c:d6:0f:f0:
02:ba:2c:0f:89:c7:3d:5b:41:91:09:fd:ec:7f:aa:
37:40:84:9e:b2:58:87:bf:2d:e4:f0:46:eb:e0:4f:
78:ec:27:ca:9b:64:67:d9:37:82:ea:40:5a:1a:5a:
1a:8b:77:41:6f:18:6a:bd:aa:9b:57:97:3a:48:7b:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:49:4D:05:8D:86:15:DD:CF:CE:BB:AE:86:E2:F2:31:1C:BC:40
X509v3 Authority Key Identifier:
keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:22:23:82:c4:6c:75:ed:ec:5d:c2:c9:e0:59:83:cd:15:84:
f2:e4:3c:29:92:bd:12:4d:56:ec:3b:6b:4d:ca:1a:e4:db:8d:
57:a5:7e:de:f8:50:f2:90:ea:0d:23:08:b0:07:04:b1:bd:38:
43:83:ef:9c:e4:5b:fd:0f:8a:c8:d2:a1:5f:ec:5d:77:c7:c3:
fd:23:7e:9c:06:fa:ad:04:24:c5:36:9f:71:09:12:7d:34:ea:
04:82:b9:bd:c8:42:df:ad:b4:e2:32:05:24:c6:65:b5:25:e5:
f3:38:a8:b3:f5:a6:d7:f8:f4:b9:0e:df:ae:34:9f:f2:c0:81:
76:cc:b3:07:e7:84:d4:b8:d5:07:83:e1:34:0d:21:4a:d6:0e:
bb:d7:b6:74:bf:d3:6c:0e:53:c6:25:7f:81:b1:33:ee:12:23:
40:67:56:d8:f0:ca:95:59:05:ee:31:7d:18:b3:c0:07:68:09:
70:e1:4f:a6:f4:e2:42:4d:93:b4:b3:cd:cd:38:27:75:1e:a4:
b6:f6:d9:f4:7f:84:39:e9:4a:5b:c4:22:bd:75:5a:af:63:47:
b0:b8:df:68:01:e7:8d:38:6c:c0:9d:77:d6:3b:5c:c3:1d:ef:
36:bd:09:1a:03:84:29:44:ad:ef:91:3f:25:42:db:8d:0f:83:
65:bc:46:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFsV0yZpr2Ey2xtfiIhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDVkMTkwMWM1NzExMDBiODlhNWM0OGMzYTcwNjU3ODQx
NTcxOTYwHhcNMjUwMTMxMTIwMDU5WhcNMjUwMjAxMTIwMDU5WjAzMTEwLwYDVQQD
EyhhZDg5NDk0ZDA1OGQ4NjE1ZGRjZmNlYmJhZTg2ZTJmMjMxMWNiYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IwcZzh8haF7JPq46HeFBvgq2VKj
57tHhngCah7uHSIZerOXnGYu3ypxY01VEKIfrQueebH1BvKMCikbgcyF56phHhel
A69sEKuVIIivxx4KH8dETEMaFTY2LGJH7MURjpemaaDyi8VVdY+R5E/HDVANgrL+
ISg06qVEcBHNBWluqz3+OMz6gAJ4tWOSHu6yMkajzTkd/cawacY2KOSphOxWRELC
JIakDgYPcmYAme3N5QrMS/DWXdpBqGdZM1zWD/ACuiwPicc9W0GRCf3sf6o3QISe
sliHvy3k8Ebr4E947CfKm2Rn2TeC6kBaGloai3dBbxhqvaqbV5c6SHuUiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2JSU0FjYYV3c/Ou66G4vIxHLxAMB8GA1UdIwQY
MBaAFLYF0ZAcVxEAuJpcSMOnBleEFXGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2Et
ZThlYzA1YzkzMjdkLzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85MDA4MGEtMzEyZS00N2QzLWI2Y2EtZThlYzA1YzkzMjdk
LzEvdGdYUmtCeFhFUUM0bWx4SXc2Y0dWNFFWY1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSIjgsRs
de3sXcLJ4FmDzRWE8uQ8KZK9Ek1W7DtrTcoa5NuNV6V+3vhQ8pDqDSMIsAcEsb04
Q4PvnORb/Q+KyNKhX+xdd8fD/SN+nAb6rQQkxTafcQkSfTTqBIK5vchC36204jIF
JMZltSXl8zios/Wm1/j0uQ7frjSf8sCBdsyzB+eE1LjVB4PhNA0hStYOu9e2dL/T
bA5TxiV/gbEz7hIjQGdW2PDKlVkF7jF9GLPAB2gJcOFPpvTiQk2TtLPNzTgndR6k
tvbZ9H+EOelKW8QivXVar2NHsLjfaAHnjThswJ131jtcwx3vNr0JGgOEKUSt75E/
JULbjQ+DZbxGdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:28 2025 by rpki-client