Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
File: TpisyG9BxHFbEMHdUmMcMqgZSjA.mft (raw, json)
Hash identifier: 4U56d/e7mg5bU6HtlA5U5hqpQO51KR149aGCHoF/Ql4=
Subject key identifier: CA:79:74:ED:47:1F:82:1D:52:42:38:6F:B6:CE:8D:83:1D:FF:52:70
Authority key identifier: 4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30
Certificate issuer: /CN=4e98acc86f41c4715b10c1dd52631c32a8194a30
Certificate serial: 0194BC04D05770F4E6545EAD975093AA5D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
Manifest number: 0F13
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: TpisyG9BxHFbEMHdUmMcMqgZSjA.crl (hash: Re0xYiGlykV23j0FOqdcUrkUDNuWDIknZQIG8tiLU6E=)
2: ohqKuhVASRrB9T2VKGm2oxF8gPE.roa (hash: BAH92y9b1xJW2sbjfw7QOsduF26YD433wmBfFvaPMSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:57:70:f4:e6:54:5e:ad:97:50:93:aa:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e98acc86f41c4715b10c1dd52631c32a8194a30
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=ca7974ed471f821d5242386fb6ce8d831dff5270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:b2:68:fd:63:16:b8:0e:6b:00:f6:a5:8d:
02:88:9e:99:ea:25:9f:19:10:d7:c3:e6:c1:05:4c:
66:f6:ed:42:b2:05:88:99:85:70:86:1e:d5:86:aa:
a4:21:87:9e:4d:44:13:44:37:8d:57:fc:83:98:79:
c9:90:8b:ab:53:d4:32:24:24:32:30:53:1d:ff:7a:
12:61:35:ca:19:fa:56:cf:60:ae:d0:d3:51:e1:b6:
1c:32:67:dc:b6:93:1d:d6:ab:2a:07:26:5e:f0:68:
41:2d:7b:de:d7:6c:7a:6f:a0:ed:cc:d1:34:db:27:
b0:05:7c:4a:d6:f4:c0:c0:25:ee:05:40:28:b1:51:
64:52:df:8a:b2:04:2a:3d:02:2c:24:65:92:ed:88:
f8:65:33:9c:48:11:d1:b7:ce:41:82:c4:e4:5f:fd:
53:21:92:69:d8:de:d1:0e:86:11:73:b9:ad:4b:63:
1c:ad:07:30:60:5c:3d:17:a7:f3:73:a3:20:cc:56:
c7:6c:ba:a7:6f:9e:d5:a7:3a:12:be:56:6c:0e:bb:
9b:60:36:00:3b:5f:fa:1e:3f:93:21:b6:f4:f5:3e:
51:e2:93:1a:55:54:6b:47:3c:26:5a:00:e4:3c:90:
96:41:53:c1:02:2b:6b:a4:a5:7f:b1:f2:ef:73:47:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:74:ED:47:1F:82:1D:52:42:38:6F:B6:CE:8D:83:1D:FF:52:70
X509v3 Authority Key Identifier:
keyid:4E:98:AC:C8:6F:41:C4:71:5B:10:C1:DD:52:63:1C:32:A8:19:4A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpisyG9BxHFbEMHdUmMcMqgZSjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f870c4-bdc9-453b-b3c8-491d30f4a2c8/1/TpisyG9BxHFbEMHdUmMcMqgZSjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:0e:57:d7:cf:4a:d2:d2:d8:88:03:70:44:64:ec:81:f4:
d6:69:e9:4c:1d:bd:77:9b:4d:5a:54:b2:70:6c:32:41:a1:16:
df:50:7d:6a:b9:45:06:bf:5a:34:d0:64:5d:97:f7:9c:4d:e9:
b9:16:d9:e2:5a:00:7b:08:93:03:c9:26:16:14:8c:c0:15:d0:
c6:ab:03:7d:8e:61:84:08:1a:20:37:6a:a4:f0:66:f9:59:9c:
24:10:92:d1:6a:53:72:c3:26:f1:e1:62:af:e1:b4:11:84:77:
e5:d3:3b:a7:b6:30:09:e5:e2:5d:34:0c:7c:8a:7b:e4:ea:aa:
fb:76:69:7f:ce:cd:6b:cc:f3:76:cf:21:5e:71:e0:aa:ee:88:
2e:2f:3f:5f:ed:15:b3:67:ec:ee:86:96:13:37:74:f2:f5:67:
98:d1:14:95:c2:59:71:de:d5:7c:27:82:55:cc:2f:70:be:aa:
4c:75:77:72:24:fc:6c:83:77:ad:38:60:57:3e:ad:80:52:65:
ea:62:27:8f:4b:6d:59:c8:93:a2:71:15:99:53:0c:04:c6:6f:
0b:9a:2a:ca:a9:ca:c1:04:35:b4:c4:30:23:87:e1:be:78:cb:
8e:f2:74:2e:db:75:e5:5e:79:5f:15:44:7b:2d:58:b6:fa:af:
7a:b8:68:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNBXcPTmVF6tl1CTql0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOThhY2M4NmY0MWM0NzE1YjEwYzFkZDUyNjMxYzMyYTgx
OTRhMzAwHhcNMjUwMTMxMTEwMDE5WhcNMjUwMjAxMTEwMDE5WjAzMTEwLwYDVQQD
EyhjYTc5NzRlZDQ3MWY4MjFkNTI0MjM4NmZiNmNlOGQ4MzFkZmY1MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gmyaP1jFrgOawD2pY0CiJ6Z6iWf
GRDXw+bBBUxm9u1CsgWImYVwhh7VhqqkIYeeTUQTRDeNV/yDmHnJkIurU9QyJCQy
MFMd/3oSYTXKGfpWz2Cu0NNR4bYcMmfctpMd1qsqByZe8GhBLXve12x6b6DtzNE0
2yewBXxK1vTAwCXuBUAosVFkUt+KsgQqPQIsJGWS7Yj4ZTOcSBHRt85BgsTkX/1T
IZJp2N7RDoYRc7mtS2McrQcwYFw9F6fzc6MgzFbHbLqnb57VpzoSvlZsDrubYDYA
O1/6Hj+TIbb09T5R4pMaVVRrRzwmWgDkPJCWQVPBAitrpKV/sfLvc0eyEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp5dO1HH4IdUkI4b7bOjYMd/1JwMB8GA1UdIwQY
MBaAFE6YrMhvQcRxWxDB3VJjHDKoGUowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgt
NDkxZDMwZjRhMmM4LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mODcwYzQtYmRjOS00NTNiLWIzYzgtNDkxZDMwZjRhMmM4
LzEvVHBpc3lHOUJ4SEZiRU1IZFVtTWNNcWdaU2pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRkOV9fP
StLS2IgDcERk7IH01mnpTB29d5tNWlSycGwyQaEW31B9arlFBr9aNNBkXZf3nE3p
uRbZ4loAewiTA8kmFhSMwBXQxqsDfY5hhAgaIDdqpPBm+VmcJBCS0WpTcsMm8eFi
r+G0EYR35dM7p7YwCeXiXTQMfIp75Oqq+3Zpf87Na8zzds8hXnHgqu6ILi8/X+0V
s2fs7oaWEzd08vVnmNEUlcJZcd7VfCeCVcwvcL6qTHV3ciT8bIN3rThgVz6tgFJl
6mInj0ttWciTonEVmVMMBMZvC5oqyqnKwQQ1tMQwI4fhvnjLjvJ0Ltt15V55XxVE
ey1Ytvqverho1A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:29 2025 by rpki-client