Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft
File: tWpL1vXr8vf_2ajRzZparN5iKFw.mft (raw, json)
Hash identifier: qFC0xklDs9NfZPUKVzpKYYQUcE5r7voHQBvKu0JbwxE=
Subject key identifier: 47:DB:9A:25:72:08:97:75:BB:04:82:44:D9:26:5F:3F:9F:BC:15:6D
Authority key identifier: B5:6A:4B:D6:F5:EB:F2:F7:FF:D9:A8:D1:CD:9A:5A:AC:DE:62:28:5C
Certificate issuer: /CN=b56a4bd6f5ebf2f7ffd9a8d1cd9a5aacde62285c
Certificate serial: 0194BC72E2C57652200B6722D4D99E1B653B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWpL1vXr8vf_2ajRzZparN5iKFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft
Manifest number: 05E4
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: tWpL1vXr8vf_2ajRzZparN5iKFw.crl (hash: 5AqV4WouiuNe2bQMaOo5m5A4n5Z5JPT2nmYqOE2yRyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:c5:76:52:20:0b:67:22:d4:d9:9e:1b:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a4bd6f5ebf2f7ffd9a8d1cd9a5aacde62285c
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=47db9a2572089775bb048244d9265f3f9fbc156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:db:e6:d0:29:a3:03:ba:4c:66:9c:89:6f:
f4:92:f7:37:ce:77:c3:7e:61:7b:f5:e4:cd:12:32:
2a:ec:a4:06:f9:07:04:24:79:a1:f9:5a:e5:59:bb:
65:69:ed:ea:ca:4b:50:5c:63:95:ce:98:fe:3e:8c:
10:2a:26:ab:23:83:d0:a3:d0:84:1f:a2:8f:bf:a6:
8b:ef:8d:4f:e8:f9:ac:d7:0d:e7:8c:ac:e3:77:21:
d7:f5:82:cc:0f:17:5d:dd:c6:87:a0:b4:89:0a:3d:
98:27:fc:6f:70:68:32:fa:9e:cc:b7:e5:e8:1a:5c:
e9:e5:9a:ef:09:49:da:f0:91:c6:ba:83:c5:43:c3:
f2:46:33:e9:a9:93:c3:5b:4f:ec:48:2f:b9:e3:00:
39:43:8b:6d:fb:d8:2a:42:06:3c:6c:81:61:1d:94:
f7:a6:56:60:ea:5c:01:e1:86:21:dd:c4:c2:6a:a5:
0c:b3:cc:a0:10:4c:19:ed:bf:5b:e5:e2:ed:5f:10:
38:19:f8:f3:48:a6:af:7c:94:ef:62:57:23:20:cb:
94:5b:5d:26:c9:33:5e:0d:34:da:e8:6f:c6:48:68:
e1:f9:ee:92:25:05:d8:d4:74:34:1d:b2:4f:da:b4:
4b:fd:2a:8b:08:6e:20:8c:f9:db:cd:a5:31:99:a4:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:9A:25:72:08:97:75:BB:04:82:44:D9:26:5F:3F:9F:BC:15:6D
X509v3 Authority Key Identifier:
keyid:B5:6A:4B:D6:F5:EB:F2:F7:FF:D9:A8:D1:CD:9A:5A:AC:DE:62:28:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWpL1vXr8vf_2ajRzZparN5iKFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dde736-2730-4bfe-a5b3-082e11363f0a/1/tWpL1vXr8vf_2ajRzZparN5iKFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:76:07:fd:ba:e0:5a:8a:8e:b0:ef:36:21:5b:a8:c3:53:23:
28:74:04:b0:84:0b:26:5e:89:27:11:0f:32:86:ea:dd:85:57:
01:ec:c4:b0:4d:8e:e4:64:58:7d:93:65:dd:ef:dd:21:04:17:
47:13:e6:77:f4:b8:1a:22:20:d8:06:ff:ea:2d:61:5f:96:2a:
64:58:59:2d:08:21:b9:d8:f8:4e:ea:9b:2b:60:1c:c6:7a:26:
cf:d2:21:00:4d:38:3c:55:08:59:e3:b6:67:1e:ae:30:f6:dc:
0a:94:84:f5:e9:45:9f:6e:c2:d1:1a:c5:22:37:c5:4c:a7:11:
b7:37:bd:43:f4:e7:49:15:e5:bd:c7:92:34:e5:e3:39:8c:00:
2c:ab:88:1a:15:32:2a:3d:d5:11:58:da:f4:f3:99:21:6a:a0:
39:e8:18:4a:0c:35:34:5d:c0:75:51:2b:00:34:4d:06:51:ff:
1c:e7:7f:a3:3f:0f:44:77:67:dc:f7:c7:72:21:9d:3a:63:71:
55:f7:23:ff:bc:4d:9d:c2:1b:e0:9f:d8:cd:17:be:57:1a:21:
f8:a9:98:71:e5:f2:59:7a:8e:4f:8a:ac:86:98:78:ea:6e:64:
da:1f:a0:cf:10:fc:da:3a:57:92:96:bd:47:3a:bf:b2:ac:a9:
8b:71:58:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuLFdlIgC2ci1NmeG2U7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmE0YmQ2ZjVlYmYyZjdmZmQ5YThkMWNkOWE1YWFjZGU2
MjI4NWMwHhcNMjUwMTMxMTMwMDMzWhcNMjUwMjAxMTMwMDMzWjAzMTEwLwYDVQQD
Eyg0N2RiOWEyNTcyMDg5Nzc1YmIwNDgyNDRkOTI2NWYzZjlmYmMxNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppfb5tApowO6TGaciW/0kvc3znfD
fmF79eTNEjIq7KQG+QcEJHmh+VrlWbtlae3qyktQXGOVzpj+PowQKiarI4PQo9CE
H6KPv6aL741P6Pms1w3njKzjdyHX9YLMDxdd3caHoLSJCj2YJ/xvcGgy+p7Mt+Xo
Glzp5ZrvCUna8JHGuoPFQ8PyRjPpqZPDW0/sSC+54wA5Q4tt+9gqQgY8bIFhHZT3
plZg6lwB4YYh3cTCaqUMs8ygEEwZ7b9b5eLtXxA4GfjzSKavfJTvYlcjIMuUW10m
yTNeDTTa6G/GSGjh+e6SJQXY1HQ0HbJP2rRL/SqLCG4gjPnbzaUxmaQbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfbmiVyCJd1uwSCRNkmXz+fvBVtMB8GA1UdIwQY
MBaAFLVqS9b16/L3/9mo0c2aWqzeYihcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdwTDF2WHI4dmZfMmFqUnpacGFyTjVpS0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kZGU3MzYtMjczMC00YmZlLWE1YjMt
MDgyZTExMzYzZjBhLzEvdFdwTDF2WHI4dmZfMmFqUnpacGFyTjVpS0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kZGU3MzYtMjczMC00YmZlLWE1YjMtMDgyZTExMzYzZjBh
LzEvdFdwTDF2WHI4dmZfMmFqUnpacGFyTjVpS0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXYH/brg
WoqOsO82IVuow1MjKHQEsIQLJl6JJxEPMobq3YVXAezEsE2O5GRYfZNl3e/dIQQX
RxPmd/S4GiIg2Ab/6i1hX5YqZFhZLQghudj4TuqbK2Acxnomz9IhAE04PFUIWeO2
Zx6uMPbcCpSE9elFn27C0RrFIjfFTKcRtze9Q/TnSRXlvceSNOXjOYwALKuIGhUy
Kj3VEVja9POZIWqgOegYSgw1NF3AdVErADRNBlH/HOd/oz8PRHdn3PfHciGdOmNx
Vfcj/7xNncIb4J/YzRe+Vxoh+KmYceXyWXqOT4qshph46m5k2h+gzxD82jpXkpa9
Rzq/sqypi3FYAg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:29 2025 by rpki-client