Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: 4eU1GtAGwj3M9QIrheepMbNdtpxYYbpBb/w0M+lYUvI=
Subject key identifier: 3C:8F:9B:00:1C:D6:43:DE:87:E4:08:D2:8E:17:9C:2D:68:70:80:E0
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 0195DFD95C436611E1110929591A6793C7B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 1417
Signing time: Sat 29 Mar 2025 03:01:58 +0000
Manifest this update: Sat 29 Mar 2025 03:01:58 +0000
Manifest next update: Sun 30 Mar 2025 03:01:58 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: PNoSTvzL6IxiMDTKZONtjhRkM2nyKsvBptetmsUmpCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:5c:43:66:11:e1:11:09:29:59:1a:67:93:c7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Mar 29 03:01:58 2025 GMT
Not After : Mar 30 03:01:58 2025 GMT
Subject: CN=3c8f9b001cd643de87e408d28e179c2d687080e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:87:43:ff:97:62:1a:45:75:8c:30:e0:c2:
e7:93:28:e6:30:8d:2c:dc:54:7e:cd:8e:76:df:3e:
78:25:0c:0b:ee:f5:a0:79:97:77:9c:e7:cc:9d:71:
1b:53:65:53:a9:f1:78:25:ab:75:b2:6c:8b:e0:8f:
02:78:b5:35:00:40:ce:6c:21:9d:08:f5:3b:36:9d:
01:e8:b6:64:f3:27:fb:7f:2f:8f:7c:99:89:cd:a3:
fe:a2:7e:f0:e1:a6:a6:56:8c:19:5b:4c:16:38:b4:
38:36:ac:24:75:c2:f0:a8:bd:f2:bf:75:47:15:5f:
f9:66:77:0e:16:ab:a1:94:d6:f5:da:69:22:f1:e4:
0f:de:96:1b:79:f5:a9:07:7a:44:bd:bf:2c:e0:b7:
01:61:87:1b:b2:e9:ad:27:5f:56:84:60:66:20:a9:
a4:68:7a:33:71:09:ec:44:2d:8b:d3:04:ca:d4:4d:
cd:de:10:55:e3:ce:b1:ea:67:fe:90:74:cc:96:b1:
5e:69:f1:58:35:a8:33:03:a8:b9:bb:3b:83:1c:65:
35:e1:63:24:7e:b5:15:1d:d0:0e:ba:8f:ae:dd:1e:
bd:f0:f3:65:4c:63:ff:18:db:27:7b:14:fc:cd:b3:
56:62:1f:5c:65:2b:ee:91:a1:a2:af:31:d3:f4:fb:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:9B:00:1C:D6:43:DE:87:E4:08:D2:8E:17:9C:2D:68:70:80:E0
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a9:4f:9f:24:8a:86:6a:03:aa:a2:c3:94:94:e5:ba:fc:2a:
8d:5d:f8:33:4b:80:57:d5:c8:7f:20:6d:7b:a1:eb:0f:13:d8:
79:95:93:4d:c6:48:e8:7c:dc:73:fc:9c:f8:c1:0c:2a:3f:d4:
74:76:a3:76:1a:0a:f4:09:1a:ee:5d:b4:58:76:63:a5:e0:bd:
02:2b:52:8b:8c:b1:36:07:2f:c1:1e:60:86:f6:06:91:6d:f3:
a1:65:d5:ba:e0:c3:61:87:84:a6:cd:fe:cd:e1:38:09:73:db:
3d:42:33:b1:d5:fc:c5:60:38:e6:3b:c4:0d:06:b7:5b:29:f1:
6b:ae:07:bf:22:8d:be:0b:b1:62:18:d8:20:e7:18:63:ec:97:
ec:ac:77:d5:93:45:2c:54:aa:f6:73:f1:f8:06:25:68:8a:f9:
7f:74:6b:2d:58:df:bc:50:02:2c:cc:09:88:f3:02:55:1f:de:
1a:23:98:43:9f:40:57:e1:be:4f:83:7d:ef:78:2c:86:8a:a3:
9e:5a:6c:13:46:9c:4c:11:fe:09:f6:25:34:f7:1f:ff:28:22:
f5:26:7a:a3:d8:c0:fa:cc:ef:97:18:93:40:89:47:1c:7f:85:
fa:5e:34:3c:2f:93:b4:bf:3e:fe:da:10:dc:1e:4b:64:e4:34:
b7:77:25:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2VxDZhHhEQkpWRpnk8e1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDcxMGI2NTM3M2UwZDkxMGRhNzA2MzZmYzE0M2MwNmJh
NWRkYWMwHhcNMjUwMzI5MDMwMTU4WhcNMjUwMzMwMDMwMTU4WjAzMTEwLwYDVQQD
EygzYzhmOWIwMDFjZDY0M2RlODdlNDA4ZDI4ZTE3OWMyZDY4NzA4MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz16HQ/+XYhpFdYww4MLnkyjmMI0s
3FR+zY523z54JQwL7vWgeZd3nOfMnXEbU2VTqfF4Jat1smyL4I8CeLU1AEDObCGd
CPU7Np0B6LZk8yf7fy+PfJmJzaP+on7w4aamVowZW0wWOLQ4NqwkdcLwqL3yv3VH
FV/5ZncOFquhlNb12mki8eQP3pYbefWpB3pEvb8s4LcBYYcbsumtJ19WhGBmIKmk
aHozcQnsRC2L0wTK1E3N3hBV486x6mf+kHTMlrFeafFYNagzA6i5uzuDHGU14WMk
frUVHdAOuo+u3R698PNlTGP/GNsnexT8zbNWYh9cZSvukaGirzHT9PsyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyPmwAc1kPeh+QI0o4XnC1ocIDgMB8GA1UdIwQY
MBaAFEzXELZTc+DZENpwY2/BQ8Brpd2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDIt
ZjkyNTBkZDc5ZmU5LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ZjQwZGQtNGMwNy00MDViLWEwNDItZjkyNTBkZDc5ZmU5
LzEvVE5jUXRsTno0TmtRMm5CamI4RkR3R3VsM2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlalPnySK
hmoDqqLDlJTluvwqjV34M0uAV9XIfyBte6HrDxPYeZWTTcZI6Hzcc/yc+MEMKj/U
dHajdhoK9Aka7l20WHZjpeC9AitSi4yxNgcvwR5ghvYGkW3zoWXVuuDDYYeEps3+
zeE4CXPbPUIzsdX8xWA45jvEDQa3Wynxa64HvyKNvguxYhjYIOcYY+yX7Kx31ZNF
LFSq9nPx+AYlaIr5f3RrLVjfvFACLMwJiPMCVR/eGiOYQ59AV+G+T4N973gshoqj
nlpsE0acTBH+CfYlNPcf/ygi9SZ6o9jA+szvlxiTQIlHHH+F+l40PC+TtL8+/toQ
3B5LZOQ0t3cl1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:31 2025 by rpki-client