Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
File: TnxZtb-73klP0T13jm8i3adJYsE.mft (raw, json)
Hash identifier: HjKyhEFXcQmcQN8ScisRttDCF4PlIdrYmPc2Imvi3p0=
Subject key identifier: 42:9F:9C:1E:55:DF:ED:52:5F:97:F4:69:57:5C:74:DA:7F:42:D9:35
Authority key identifier: 4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
Certificate issuer: /CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Certificate serial: 0194BBCE798AE175DB5F02C1372F64F114EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
Manifest number: 076C
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: TnxZtb-73klP0T13jm8i3adJYsE.crl (hash: 16Q27nGxwGb8Ybq+PErCqUpSyLWvWhTGtwLXqlAYkfs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:8a:e1:75:db:5f:02:c1:37:2f:64:f1:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7c59b5bfbbde494fd13d778e6f22dda74962c1
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=429f9c1e55dfed525f97f469575c74da7f42d935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:b4:9b:66:13:bb:b6:61:89:7e:aa:fc:04:
2c:b7:b1:0e:77:79:aa:32:c6:4d:cc:86:e5:9b:19:
fb:9c:8a:9a:94:36:92:0c:c6:a8:55:81:c5:2d:de:
c7:e6:81:b3:64:9d:3c:3b:f1:e1:02:ea:82:c8:9c:
c9:29:b8:d7:75:80:a5:25:b1:52:f3:d2:28:bd:c8:
6e:7c:4a:4b:55:af:74:28:7d:ea:7e:3b:c6:e3:e0:
5f:07:23:93:fb:d5:9c:77:2b:19:7a:c1:05:53:ab:
34:38:59:fc:17:42:be:a3:04:d1:22:4c:95:11:4b:
e2:8a:36:d4:a1:41:2d:af:53:ed:43:bd:14:83:cd:
94:4a:c0:6f:45:94:d4:c3:05:a4:dd:57:7b:f2:35:
7b:c5:c2:e0:23:7d:6b:6a:d6:36:fc:4b:f6:8d:23:
e5:a0:bd:23:b0:a2:03:12:0b:95:f6:7c:9b:3a:e1:
a8:ad:21:ad:02:ff:93:c7:82:53:b8:93:97:a9:ce:
0d:ca:be:63:54:66:81:0c:df:b3:8f:50:58:0c:1f:
25:0a:ef:a8:20:42:c4:a3:0e:1e:09:70:b5:1f:27:
78:76:f9:ac:2c:77:1c:f5:15:b9:f1:a5:9e:33:cb:
cf:98:83:7b:0f:d3:82:20:7b:a5:cc:af:a9:9f:78:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:9C:1E:55:DF:ED:52:5F:97:F4:69:57:5C:74:DA:7F:42:D9:35
X509v3 Authority Key Identifier:
keyid:4E:7C:59:B5:BF:BB:DE:49:4F:D1:3D:77:8E:6F:22:DD:A7:49:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnxZtb-73klP0T13jm8i3adJYsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f30602-5fa2-4ab8-99e7-c07f6c5a0aa7/1/TnxZtb-73klP0T13jm8i3adJYsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:ae:43:50:d5:91:02:61:dd:7a:ca:2a:aa:e8:5c:bf:ec:
7e:d7:4f:40:da:ce:15:32:c2:d9:d9:b9:10:0f:e8:04:7c:47:
f3:ea:d9:25:6b:c0:f7:2b:03:17:07:22:b2:bd:37:88:4b:17:
2b:aa:a3:c7:58:7d:8c:e4:be:74:7e:fd:77:9f:f1:ae:ab:6a:
ac:b8:9f:e8:12:90:2f:14:1e:7e:07:15:cd:60:8a:55:d5:f6:
a0:52:ca:18:bd:a5:5a:06:60:12:e5:74:a9:9d:9b:99:c5:59:
2c:13:3d:13:fa:bb:2a:d1:39:fd:80:92:10:ec:9b:f7:71:0c:
6c:9b:b0:45:ed:5e:57:6d:51:51:aa:ef:82:e5:cd:a6:f3:be:
5c:24:12:40:99:1f:6a:63:af:12:8b:e1:d1:5e:6c:ae:42:5b:
04:59:a2:7c:24:e6:20:d8:91:01:80:cb:a4:2c:c0:6b:df:e3:
8d:ba:02:d1:f1:cc:5a:61:0a:70:43:1e:01:fd:06:58:7b:c0:
3f:54:fb:4d:b1:11:f9:45:f4:5a:35:3a:24:82:f7:8e:db:e2:
4e:18:5d:f9:e2:23:fe:c3:45:99:cd:a4:bd:a5:30:6a:c8:b6:
a9:b2:2b:9f:f6:e7:4d:3b:9a:8a:f1:d2:ec:8d:bb:12:a3:b9:
61:cd:11:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znmK4XXbXwLBNy9k8RTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlN2M1OWI1YmZiYmRlNDk0ZmQxM2Q3NzhlNmYyMmRkYTc0
OTYyYzEwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
Eyg0MjlmOWMxZTU1ZGZlZDUyNWY5N2Y0Njk1NzVjNzRkYTdmNDJkOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tq0m2YTu7ZhiX6q/AQst7EOd3mq
MsZNzIblmxn7nIqalDaSDMaoVYHFLd7H5oGzZJ08O/HhAuqCyJzJKbjXdYClJbFS
89IovchufEpLVa90KH3qfjvG4+BfByOT+9WcdysZesEFU6s0OFn8F0K+owTRIkyV
EUviijbUoUEtr1PtQ70Ug82USsBvRZTUwwWk3Vd78jV7xcLgI31ratY2/Ev2jSPl
oL0jsKIDEguV9nybOuGorSGtAv+Tx4JTuJOXqc4Nyr5jVGaBDN+zj1BYDB8lCu+o
IELEow4eCXC1Hyd4dvmsLHcc9RW58aWeM8vPmIN7D9OCIHulzK+pn3hl7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKfnB5V3+1SX5f0aVdcdNp/Qtk1MB8GA1UdIwQY
MBaAFE58WbW/u95JT9E9d45vIt2nSWLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTct
YzA3ZjZjNWEwYWE3LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMzA2MDItNWZhMi00YWI4LTk5ZTctYzA3ZjZjNWEwYWE3
LzEvVG54WnRiLTcza2xQMFQxM2ptOGkzYWRKWXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN2uQ1DV
kQJh3XrKKqroXL/sftdPQNrOFTLC2dm5EA/oBHxH8+rZJWvA9ysDFwcisr03iEsX
K6qjx1h9jOS+dH79d5/xrqtqrLif6BKQLxQefgcVzWCKVdX2oFLKGL2lWgZgEuV0
qZ2bmcVZLBM9E/q7KtE5/YCSEOyb93EMbJuwRe1eV21RUarvguXNpvO+XCQSQJkf
amOvEovh0V5srkJbBFmifCTmINiRAYDLpCzAa9/jjboC0fHMWmEKcEMeAf0GWHvA
P1T7TbER+UX0WjU6JIL3jtviThhd+eIj/sNFmc2kvaUwasi2qbIrn/bnTTuaivHS
7I27EqO5Yc0RVw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:15 2025 by rpki-client