Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.mft
File: tq8SwVTAKQhVvZFCm31JPICI29s.mft (raw, json)
Hash identifier: zmIm3TBME/ylSg++zxz3djLyyqLtL/olxu3DC15yDqg=
Subject key identifier: 39:C3:88:99:BE:35:3C:6E:A0:69:77:FA:47:FC:48:51:8F:18:53:D9
Authority key identifier: B6:AF:12:C1:54:C0:29:08:55:BD:91:42:9B:7D:49:3C:80:88:DB:DB
Certificate issuer: /CN=b6af12c154c0290855bd91429b7d493c8088dbdb
Certificate serial: 0194BBCEA5575AB139F79A524D4CA5F3574D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq8SwVTAKQhVvZFCm31JPICI29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: tq8SwVTAKQhVvZFCm31JPICI29s.crl (hash: d3W0/Bs4UuCGZTDKfC2biPXArotFwYvMWiMx8xGSfLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:57:5a:b1:39:f7:9a:52:4d:4c:a5:f3:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6af12c154c0290855bd91429b7d493c8088dbdb
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=39c38899be353c6ea06977fa47fc48518f1853d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:36:56:81:2a:76:b7:00:da:21:10:88:4f:
f8:e2:74:9d:b4:75:a0:85:fc:11:8b:4a:2b:72:46:
6e:41:f3:81:c5:a1:e0:d5:82:92:30:cb:36:85:12:
32:c6:d2:30:8a:c2:1e:cc:3f:31:c7:6c:7a:67:48:
c1:b2:52:9e:ea:17:7d:72:95:fc:ac:f4:da:f0:ab:
25:d4:71:f4:be:37:8e:bb:fb:e7:af:09:58:b2:4f:
cb:af:8c:89:4d:7d:a7:ab:42:bb:d1:0e:00:65:01:
c6:67:dd:7a:ed:f0:40:e2:0a:55:76:09:da:c5:39:
61:e4:db:94:ff:02:69:5a:3d:fc:82:9b:82:0e:0d:
40:44:49:ec:08:32:ad:14:b8:07:5b:00:a0:bb:e0:
d4:97:25:22:cb:f3:72:25:2b:dc:e4:52:7a:77:a0:
6a:48:ed:c3:e1:d9:d5:14:58:29:2b:af:2d:e7:77:
a2:17:6f:8d:eb:8a:18:3b:f8:f4:22:66:24:5e:2d:
bb:f6:25:83:71:06:d6:ea:71:76:d4:1d:72:40:81:
d1:5d:4f:dd:f0:05:db:41:2d:89:01:1f:ec:3b:3e:
ea:f4:5d:d1:a9:e2:0c:ff:92:70:a9:2b:9d:62:c3:
6b:53:fb:3c:cb:a1:56:a5:dc:78:a3:55:c8:c7:54:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:88:99:BE:35:3C:6E:A0:69:77:FA:47:FC:48:51:8F:18:53:D9
X509v3 Authority Key Identifier:
keyid:B6:AF:12:C1:54:C0:29:08:55:BD:91:42:9B:7D:49:3C:80:88:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq8SwVTAKQhVvZFCm31JPICI29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e2:b2:1b:8a:fe:ac:c9:c5:23:82:83:55:7a:73:f2:f9:9c:
76:e7:01:70:06:f0:0d:03:0f:59:72:12:c4:53:50:d8:f7:c9:
67:e3:98:42:01:7f:d7:6b:45:e5:1f:dd:94:9e:50:78:cd:0e:
89:f6:e0:6c:9f:8c:3d:e2:5d:4f:64:d5:2c:26:df:88:24:cc:
2f:5d:84:8d:e1:72:8c:99:e4:7c:d5:b5:be:17:20:74:de:f0:
ad:73:29:43:de:41:46:7f:d5:3e:13:b5:1d:0b:54:53:a4:6c:
50:fa:50:4f:17:a8:97:6b:0c:32:7b:34:93:66:3d:32:d8:1f:
10:59:72:ad:0d:1b:76:5d:e4:82:18:71:f1:ae:5d:3e:9d:f6:
80:0a:98:eb:7a:24:89:9b:74:04:d8:bf:25:dd:24:25:b4:25:
49:53:a3:92:fb:17:db:58:e1:b2:4f:02:4b:33:bc:fc:6d:a6:
6d:98:8b:24:79:5e:0c:52:54:ec:a2:1f:b5:9a:28:82:38:d8:
08:eb:30:71:d1:60:9d:e5:cd:e4:96:89:30:62:5c:13:37:49:
40:5a:ac:92:1f:51:14:d7:37:11:70:27:ba:58:91:62:4d:c0:
ec:50:2b:00:43:7f:6a:db:d3:d4:5b:7e:45:ac:65:1d:99:f5:
04:98:31:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqVXWrE595pSTUyl81dNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YWYxMmMxNTRjMDI5MDg1NWJkOTE0MjliN2Q0OTNjODA4
OGRiZGIwHhcNMjUwMTMxMTAwMTA5WhcNMjUwMjAxMTAwMTA5WjAzMTEwLwYDVQQD
EygzOWMzODg5OWJlMzUzYzZlYTA2OTc3ZmE0N2ZjNDg1MThmMTg1M2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLI2VoEqdrcA2iEQiE/44nSdtHWg
hfwRi0orckZuQfOBxaHg1YKSMMs2hRIyxtIwisIezD8xx2x6Z0jBslKe6hd9cpX8
rPTa8Ksl1HH0vjeOu/vnrwlYsk/Lr4yJTX2nq0K70Q4AZQHGZ9167fBA4gpVdgna
xTlh5NuU/wJpWj38gpuCDg1AREnsCDKtFLgHWwCgu+DUlyUiy/NyJSvc5FJ6d6Bq
SO3D4dnVFFgpK68t53eiF2+N64oYO/j0ImYkXi279iWDcQbW6nF21B1yQIHRXU/d
8AXbQS2JAR/sOz7q9F3RqeIM/5JwqSudYsNrU/s8y6FWpdx4o1XIx1RPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnDiJm+NTxuoGl3+kf8SFGPGFPZMB8GA1UdIwQY
MBaAFLavEsFUwCkIVb2RQpt9STyAiNvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHE4U3dWVEFLUWhWdlpGQ20zMUpQSUNJMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81MTY5ZmItYTU5Ni00ODMzLTliYjQt
Mjg5ZDYwZDQyYzIzLzEvdHE4U3dWVEFLUWhWdlpGQ20zMUpQSUNJMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi81MTY5ZmItYTU5Ni00ODMzLTliYjQtMjg5ZDYwZDQyYzIz
LzEvdHE4U3dWVEFLUWhWdlpGQ20zMUpQSUNJMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeKyG4r+
rMnFI4KDVXpz8vmcducBcAbwDQMPWXISxFNQ2PfJZ+OYQgF/12tF5R/dlJ5QeM0O
ifbgbJ+MPeJdT2TVLCbfiCTML12EjeFyjJnkfNW1vhcgdN7wrXMpQ95BRn/VPhO1
HQtUU6RsUPpQTxeol2sMMns0k2Y9MtgfEFlyrQ0bdl3kghhx8a5dPp32gAqY63ok
iZt0BNi/Jd0kJbQlSVOjkvsX21jhsk8CSzO8/G2mbZiLJHleDFJU7KIftZoogjjY
COswcdFgneXN5JaJMGJcEzdJQFqskh9RFNc3EXAnuliRYk3A7FArAEN/atvT1Ft+
RaxlHZn1BJgxLw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:15 2025 by rpki-client