Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
File: TMC300XPrlNH086YtCQbkA5KnvM.mft (raw, json)
Hash identifier: yn2DU/MdmzF717c8TyZ6JMZQn46dSKOOSvpjfliS2JI=
Subject key identifier: DA:72:E4:98:F4:61:1F:F9:84:4F:57:0F:A7:44:79:F1:2E:14:4F:73
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 0194BC04ACA081DFDA31DC1CAB9BAEC87841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
Manifest number: 059D
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: TMC300XPrlNH086YtCQbkA5KnvM.crl (hash: eGYjePveOQ/LLoSpdfiQ0Q4LEaNNFM97PgG5cyYKyyU=)
2: Vh_JUxD0F48NbjyYRcDhXuGyEXI.roa (hash: RX3aXV1jt4pV7znP3Nr6a04cOEHqVMLgDW/kqRB9jNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ac:a0:81:df:da:31:dc:1c:ab:9b:ae:c8:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=da72e498f4611ff9844f570fa74479f12e144f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:c0:b3:32:c9:4b:0a:b0:c5:93:1b:1e:c3:
d5:a3:48:ab:81:f9:bd:0c:10:72:21:84:bc:80:86:
30:8f:0e:aa:34:91:9d:d6:7c:d9:c4:ce:9e:5d:aa:
9a:bc:e0:03:f4:bd:9f:71:39:e0:30:67:10:bc:17:
11:19:01:d6:7a:34:f9:aa:8e:64:fc:4a:35:8a:d4:
15:55:b8:a0:b2:3f:c2:09:7d:db:c8:43:db:38:5a:
ff:7b:a7:d9:d2:b7:bb:57:e5:a1:0c:2f:0d:22:a2:
b2:7b:ae:8f:8d:33:10:32:68:43:0b:70:c2:d1:3a:
d5:df:4e:be:a7:bd:20:3e:41:12:e9:7a:18:52:a2:
2b:68:15:31:1d:cd:65:75:92:12:fa:89:4a:f4:f6:
0a:d7:00:90:2b:28:ec:23:ff:a4:01:d1:7d:b3:ea:
84:24:a5:84:72:4a:ab:62:3f:e0:c0:e8:71:43:46:
b1:29:f1:2f:d5:14:9d:ac:72:bf:56:b6:b7:2a:51:
47:31:d2:af:54:a6:29:81:80:26:cf:3d:17:5d:34:
da:d9:46:4a:d3:a4:55:20:c0:37:9c:f5:3e:35:25:
c3:e4:ad:31:6e:3f:86:47:a2:d7:75:b8:9d:97:47:
47:59:14:a8:a5:9a:65:db:19:56:48:93:a5:57:9d:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:E4:98:F4:61:1F:F9:84:4F:57:0F:A7:44:79:F1:2E:14:4F:73
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:38:d7:76:44:de:3f:d4:97:02:98:be:a0:9e:3a:1f:dd:
41:b8:55:a5:ac:8a:f7:b6:78:e6:ef:2a:af:b4:0f:43:a9:66:
b3:ae:53:34:dd:ba:4c:6f:f9:35:85:06:57:64:38:b1:2f:1e:
ca:ac:a9:2f:9e:51:f7:5e:be:cb:9f:62:aa:33:2b:09:0f:ed:
8f:50:d4:0e:b1:77:7c:83:94:09:c5:b0:74:72:8f:20:ea:6e:
e5:cb:34:e5:f7:3a:47:ff:1d:2a:72:65:44:31:e7:22:dc:c7:
40:6c:17:13:d3:1f:74:9e:82:60:50:07:d2:37:55:9a:dd:b0:
5c:a1:5d:1e:45:7f:9c:d5:38:a6:08:04:29:9e:89:c8:d1:00:
52:87:18:a7:02:58:c3:6a:07:5b:98:62:14:46:36:ec:1d:02:
39:51:2c:33:72:2f:e0:31:78:41:e9:6a:21:64:83:a1:f8:fe:
ea:0b:b3:c9:bf:01:db:a8:bc:6f:a5:db:c1:21:8d:8d:54:8e:
7a:4c:58:c2:c4:fa:2f:b0:45:0f:67:7b:7c:84:87:09:22:15:
a5:4f:20:5e:46:91:6f:20:97:88:a1:a2:ce:e3:5b:2b:0c:f3:
f4:dc:e8:31:b6:5f:33:0d:2b:59:17:27:2a:24:f2:d2:80:14:
90:1f:1d:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKyggd/aMdwcq5uuyHhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYzBiN2QzNDVjZmFlNTM0N2QzY2U5OGI0MjQxYjkwMGU0
YTllZjMwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
EyhkYTcyZTQ5OGY0NjExZmY5ODQ0ZjU3MGZhNzQ0NzlmMTJlMTQ0ZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGrAszLJSwqwxZMbHsPVo0irgfm9
DBByIYS8gIYwjw6qNJGd1nzZxM6eXaqavOAD9L2fcTngMGcQvBcRGQHWejT5qo5k
/Eo1itQVVbigsj/CCX3byEPbOFr/e6fZ0re7V+WhDC8NIqKye66PjTMQMmhDC3DC
0TrV306+p70gPkES6XoYUqIraBUxHc1ldZIS+olK9PYK1wCQKyjsI/+kAdF9s+qE
JKWEckqrYj/gwOhxQ0axKfEv1RSdrHK/Vra3KlFHMdKvVKYpgYAmzz0XXTTa2UZK
06RVIMA3nPU+NSXD5K0xbj+GR6LXdbidl0dHWRSopZpl2xlWSJOlV51KQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpy5Jj0YR/5hE9XD6dEefEuFE9zMB8GA1UdIwQY
MBaAFEzAt9NFz65TR9POmLQkG5AOSp7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYt
MWJlMzI1ZjdhMmUzLzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNmQzNzAtZjYzMi00Y2ExLThiOTYtMWJlMzI1ZjdhMmUz
LzEvVE1DMzAwWFBybE5IMDg2WXRDUWJrQTVLbnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMM413ZE
3j/UlwKYvqCeOh/dQbhVpayK97Z45u8qr7QPQ6lms65TNN26TG/5NYUGV2Q4sS8e
yqypL55R916+y59iqjMrCQ/tj1DUDrF3fIOUCcWwdHKPIOpu5cs05fc6R/8dKnJl
RDHnItzHQGwXE9MfdJ6CYFAH0jdVmt2wXKFdHkV/nNU4pggEKZ6JyNEAUocYpwJY
w2oHW5hiFEY27B0COVEsM3Iv4DF4QelqIWSDofj+6guzyb8B26i8b6XbwSGNjVSO
ekxYwsT6L7BFD2d7fISHCSIVpU8gXkaRbyCXiKGizuNbKwzz9NzoMbZfMw0rWRcn
KiTy0oAUkB8djw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:55 2025 by rpki-client