Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
File: tx2wYltK6IrGpYSzacz_cNmENq0.mft (raw, json)
Hash identifier: 6LMhUxiRuJUy0oUpy9Y7Z3wN5PbreZ/OZYPPdEj8cRY=
Subject key identifier: EC:E6:2A:57:44:9F:9C:91:EC:8C:94:72:7C:88:77:B9:6E:D1:52:B7
Authority key identifier: B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
Certificate issuer: /CN=b71db0625b4ae88ac6a584b369ccff70d98436ad
Certificate serial: 018AB57816969F465C4510C633E20269F80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx2wYltK6IrGpYSzacz_cNmENq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
Manifest number: 0885
Signing time: Thu 21 Sep 2023 02:01:00 +0000
Manifest this update: Thu 21 Sep 2023 02:01:00 +0000
Manifest next update: Fri 22 Sep 2023 02:01:00 +0000
Files and hashes: 1: tx2wYltK6IrGpYSzacz_cNmENq0.crl (hash: NC1//39toWGrcEDzpRWBAoOjvhvCDMbR7vnrq5D31yM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b5:78:16:96:9f:46:5c:45:10:c6:33:e2:02:69:f8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71db0625b4ae88ac6a584b369ccff70d98436ad
Validity
Not Before: Sep 21 02:01:00 2023 GMT
Not After : Sep 22 02:01:00 2023 GMT
Subject: CN=ece62a57449f9c91ec8c94727c8877b96ed152b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:e5:4c:46:81:1e:e9:8b:e7:61:36:b9:aa:
b0:ab:7f:43:78:01:14:25:c1:0d:d5:b8:e8:19:b2:
9c:9b:aa:f5:1e:fc:2a:76:f6:a1:bc:86:02:a5:3b:
9f:3d:65:b4:6f:68:ef:c8:c2:84:0c:96:56:c0:79:
33:af:62:60:a5:67:51:40:f6:96:6a:14:2e:ac:50:
87:b0:a8:de:d0:5d:1d:55:21:7f:04:a7:5e:b1:45:
6a:cf:9b:a4:4d:7d:c6:45:97:c1:83:07:6a:6b:89:
c3:f8:30:60:5f:04:a9:00:88:dc:91:a5:63:f8:f4:
66:f5:c4:ba:4a:45:3d:88:39:8e:fa:db:82:0e:ce:
48:c0:e9:32:ab:a6:ef:b4:a1:b2:91:d9:a0:3f:67:
b4:5b:fc:52:d2:92:64:ee:3c:a4:59:08:ce:f1:d3:
11:1c:2d:8a:c5:b1:19:a0:e6:f4:11:a0:a7:5a:76:
7b:0c:6f:33:a3:6e:c8:6d:5d:df:67:3b:07:3a:39:
e6:53:b0:01:f5:5a:82:66:2e:54:c0:6b:fc:b7:7d:
82:3e:be:1c:61:43:ab:8d:87:e9:bc:8f:71:d4:3d:
11:f7:48:77:79:c4:7f:03:38:58:05:ea:0a:bb:4e:
5d:5d:0c:a2:d7:3f:b9:55:58:bc:12:7b:48:d0:2b:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:2A:57:44:9F:9C:91:EC:8C:94:72:7C:88:77:B9:6E:D1:52:B7
X509v3 Authority Key Identifier:
keyid:B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx2wYltK6IrGpYSzacz_cNmENq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:28:05:68:fe:f7:79:74:85:df:52:8d:33:80:d4:d8:12:
09:87:bd:db:60:1e:77:6b:65:26:83:d8:b9:6c:44:5c:c8:f7:
44:30:c3:92:e0:3e:09:d7:3c:aa:57:36:d4:fa:7c:b5:36:fb:
e5:7d:7b:3e:b7:9e:fd:47:ca:96:90:7a:f2:36:9b:46:d4:f5:
4e:ec:45:c2:94:16:58:7a:11:f1:08:13:e2:90:8c:c1:62:da:
d8:a8:ba:a3:de:f2:0f:5c:22:03:54:e6:7c:0e:27:43:29:14:
d2:da:90:78:08:42:8b:4e:a3:f3:49:e7:59:7b:e3:2f:2e:11:
b5:2e:6f:21:c5:d6:8f:61:7a:d8:4b:3a:27:b7:5e:12:9d:38:
14:bd:6e:c8:7d:8c:c3:47:4a:9e:19:c3:3a:7a:8b:4e:87:6c:
94:04:e5:6e:ad:d2:d0:63:8d:c5:9e:04:1f:4e:3b:88:7b:79:
cd:8b:e2:5e:1d:0c:20:f0:7c:f3:9c:5c:b6:31:43:bb:c8:7a:
c1:be:f9:bc:ac:8c:d1:87:d6:50:7b:df:aa:b0:40:4b:93:e5:
a1:a8:62:d6:83:fc:1b:27:2d:04:c9:d8:ff:45:c2:66:5c:fd:
f3:0c:0f:c6:7e:21:21:53:1b:4e:d8:23:c1:ad:c0:71:3c:84:
0c:c8:7b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq1eBaWn0ZcRRDGM+ICafgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWRiMDYyNWI0YWU4OGFjNmE1ODRiMzY5Y2NmZjcwZDk4
NDM2YWQwHhcNMjMwOTIxMDIwMTAwWhcNMjMwOTIyMDIwMTAwWjAzMTEwLwYDVQQD
EyhlY2U2MmE1NzQ0OWY5YzkxZWM4Yzk0NzI3Yzg4NzdiOTZlZDE1MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptvlTEaBHumL52E2uaqwq39DeAEU
JcEN1bjoGbKcm6r1HvwqdvahvIYCpTufPWW0b2jvyMKEDJZWwHkzr2JgpWdRQPaW
ahQurFCHsKje0F0dVSF/BKdesUVqz5ukTX3GRZfBgwdqa4nD+DBgXwSpAIjckaVj
+PRm9cS6SkU9iDmO+tuCDs5IwOkyq6bvtKGykdmgP2e0W/xS0pJk7jykWQjO8dMR
HC2KxbEZoOb0EaCnWnZ7DG8zo27IbV3fZzsHOjnmU7AB9VqCZi5UwGv8t32CPr4c
YUOrjYfpvI9x1D0R90h3ecR/AzhYBeoKu05dXQyi1z+5VVi8EntI0Cs3vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzmKldEn5yR7IyUcnyId7lu0VK3MB8GA1UdIwQY
MBaAFLcdsGJbSuiKxqWEs2nM/3DZhDatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHgyd1lsdEs2SXJHcFlTemFjel9jTm1FTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNGI5MjMtNjZmMS00ZWNkLTljODAt
MWQwMjRlYjM1OGE1LzEvdHgyd1lsdEs2SXJHcFlTemFjel9jTm1FTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wNGI5MjMtNjZmMS00ZWNkLTljODAtMWQwMjRlYjM1OGE1
LzEvdHgyd1lsdEs2SXJHcFlTemFjel9jTm1FTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz0oBWj+
93l0hd9SjTOA1NgSCYe922Aed2tlJoPYuWxEXMj3RDDDkuA+Cdc8qlc21Pp8tTb7
5X17Pree/UfKlpB68jabRtT1TuxFwpQWWHoR8QgT4pCMwWLa2Ki6o97yD1wiA1Tm
fA4nQykU0tqQeAhCi06j80nnWXvjLy4RtS5vIcXWj2F62Es6J7deEp04FL1uyH2M
w0dKnhnDOnqLTodslATlbq3S0GONxZ4EH047iHt5zYviXh0MIPB885xctjFDu8h6
wb75vKyM0YfWUHvfqrBAS5Ploahi1oP8GyctBMnY/0XCZlz98wwPxn4hIVMbTtgj
wa3AcTyEDMh7gQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:54 2025 by rpki-client