Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json)
Hash identifier: ww2Ht4PO97Izu9cynOZKB9OWrk1iS2Od6clp9W058Mk=
Subject key identifier: 16:B9:EA:18:AF:98:96:5B:8B:C5:DB:39:33:A3:A6:D3:73:A7:0B:E2
Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Certificate serial: 0194BCAA437840020E988EB083A3B8C0FEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
Manifest number: 29
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: FtXUoPVCbOMFkTviHoxPPVb28Jj0xic5Q/yYZjebqSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:43:78:40:02:0e:98:8e:b0:83:a3:b8:c0:fe:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=16b9ea18af98965b8bc5db3933a3a6d373a70be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:b9:fd:7a:4d:fc:0a:11:83:f2:66:89:f7:
32:00:4d:16:49:d0:31:d9:53:40:bb:e6:e9:b3:5f:
20:2d:b3:51:8d:73:c8:be:6e:0d:5e:65:a9:5f:af:
5a:8e:d9:44:47:b0:aa:e9:1b:ea:8b:3d:2f:1b:1c:
a6:07:3c:ad:07:87:ce:c8:e3:70:b8:31:90:14:f6:
ea:a3:f8:81:0f:b3:fb:d2:e3:c7:f0:95:05:c6:10:
6e:48:f7:8f:23:9c:7e:8e:b5:9d:97:ed:4f:ea:ca:
3f:c6:8d:07:d1:2f:b6:59:55:cc:c6:93:90:36:4b:
6e:54:74:cf:d0:b2:9e:36:6d:37:e3:ba:e0:16:72:
8a:9c:5a:e0:37:cc:9d:34:27:e7:04:cf:a0:0e:3d:
93:cd:ce:7d:33:72:33:36:d5:80:02:c9:c0:7f:4e:
70:76:65:2b:6c:c3:6c:bb:72:7f:7f:d6:bf:c3:e0:
79:36:c6:21:72:72:da:89:13:e5:69:c2:c7:4b:26:
83:f5:27:b5:9d:ea:14:94:7e:f7:63:14:a6:16:03:
6b:83:cb:3a:2d:f8:8d:5b:e7:16:2c:1d:f0:eb:36:
70:29:67:e9:04:0c:0c:f1:04:50:c2:9a:02:ff:2d:
9e:85:47:2d:06:f3:f0:c1:51:45:0a:6b:33:e9:51:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:EA:18:AF:98:96:5B:8B:C5:DB:39:33:A3:A6:D3:73:A7:0B:E2
X509v3 Authority Key Identifier:
keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d2:04:a8:8c:7c:7e:49:9d:24:a8:3e:fb:19:df:e0:12:fb:
79:a9:e2:85:14:ba:37:e1:da:f4:ad:94:0a:10:ed:1d:36:c3:
23:d5:b3:77:80:d3:1e:76:15:e5:c6:e3:a5:c0:8d:50:68:04:
fe:6e:e5:7b:fb:e9:6f:b3:11:4f:3b:62:86:9b:c4:f1:bb:96:
dd:90:e4:d6:5f:90:4e:9e:ca:a6:ab:91:ca:31:02:b3:6c:92:
03:fe:62:c1:09:dd:99:14:1c:19:4d:7b:ca:e2:1c:ac:c5:b2:
97:ae:5b:94:60:ba:07:75:d5:c6:9e:bd:a1:3b:ed:68:9b:03:
23:15:89:b4:17:66:12:5a:8a:df:1f:78:54:74:55:2a:a6:c5:
fb:9c:7d:28:c0:cb:38:a4:0f:cb:a2:c2:23:e5:94:5b:37:e9:
5a:90:71:9c:11:93:b6:39:21:b3:c1:c6:c3:1d:c1:88:ec:cc:
56:00:da:27:2d:21:37:34:4e:38:48:6d:94:0b:76:ca:fd:31:
3d:48:8f:30:8f:f9:ff:54:4b:74:17:49:0c:47:f5:e0:73:15:
0e:4e:65:d2:6c:82:9a:98:af:90:97:38:8c:69:39:eb:a7:61:
8e:7c:95:18:89:87:8f:dc:30:a1:f7:e9:19:c8:82:1c:95:64:
e7:a2:76:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qkN4QAIOmI6wg6O4wP60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2FjYTM2ODQ2ZDJkMzAyMzY0OGVhYzU4MWM3ZDliNjMx
N2VlZGMwHhcNMjUwMTMxMTQwMTAyWhcNMjUwMjAxMTQwMTAyWjAzMTEwLwYDVQQD
EygxNmI5ZWExOGFmOTg5NjViOGJjNWRiMzkzM2EzYTZkMzczYTcwYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7q5/XpN/AoRg/JmifcyAE0WSdAx
2VNAu+bps18gLbNRjXPIvm4NXmWpX69ajtlER7Cq6Rvqiz0vGxymBzytB4fOyONw
uDGQFPbqo/iBD7P70uPH8JUFxhBuSPePI5x+jrWdl+1P6so/xo0H0S+2WVXMxpOQ
NktuVHTP0LKeNm0347rgFnKKnFrgN8ydNCfnBM+gDj2Tzc59M3IzNtWAAsnAf05w
dmUrbMNsu3J/f9a/w+B5NsYhcnLaiRPlacLHSyaD9Se1neoUlH73YxSmFgNrg8s6
LfiNW+cWLB3w6zZwKWfpBAwM8QRQwpoC/y2ehUctBvPwwVFFCmsz6VF1rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa56hivmJZbi8XbOTOjptNzpwviMB8GA1UdIwQY
MBaAFLU6yjaEbS0wI2SOrFgcfZtjF+7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMt
NGJiMzdiMThiOWZlLzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMtNGJiMzdiMThiOWZl
LzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNIEqIx8
fkmdJKg++xnf4BL7eanihRS6N+Ha9K2UChDtHTbDI9Wzd4DTHnYV5cbjpcCNUGgE
/m7le/vpb7MRTztihpvE8buW3ZDk1l+QTp7KpquRyjECs2ySA/5iwQndmRQcGU17
yuIcrMWyl65blGC6B3XVxp69oTvtaJsDIxWJtBdmElqK3x94VHRVKqbF+5x9KMDL
OKQPy6LCI+WUWzfpWpBxnBGTtjkhs8HGwx3BiOzMVgDaJy0hNzROOEhtlAt2yv0x
PUiPMI/5/1RLdBdJDEf14HMVDk5l0myCmpivkJc4jGk566dhjnyVGImHj9wwoffp
GciCHJVk56J2kA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:58 2025 by rpki-client