Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier: Z6aKRedfRSLZHLvFWMIkn3jbdjC0m3acA4OoAiJU0qs=
Subject key identifier: 8A:21:65:4A:83:D8:0A:19:C0:45:FA:6B:CC:C9:EC:DF:45:EB:FB:B7
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial: 0195E0462CE2280A16BAC02BF9D4512AF79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number: 0CBF
Signing time: Sat 29 Mar 2025 05:00:50 +0000
Manifest this update: Sat 29 Mar 2025 05:00:50 +0000
Manifest next update: Sun 30 Mar 2025 05:00:50 +0000
Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: GlhjRAk/ie/Dqcg9wN8mYhP0s/Zxc69Qot8GaWeRejc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:2c:e2:28:0a:16:ba:c0:2b:f9:d4:51:2a:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Validity
Not Before: Mar 29 05:00:50 2025 GMT
Not After : Mar 30 05:00:50 2025 GMT
Subject: CN=8a21654a83d80a19c045fa6bccc9ecdf45ebfbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:c4:da:b8:82:7a:48:87:c4:ba:3e:a8:a5:
c7:3b:62:9b:bf:30:96:95:3a:8b:e1:7d:ce:df:44:
dc:ea:c4:05:df:ae:cb:cb:3d:85:14:bd:cd:11:4b:
4e:56:4a:0c:bc:45:de:cf:bd:f3:a7:85:38:1e:08:
c6:e6:9c:54:57:b9:7e:bb:82:c6:3b:00:82:7e:ca:
a3:ee:33:e2:97:e1:4d:42:7c:ab:01:65:12:0e:c2:
a4:e7:93:52:8f:43:16:59:46:b5:ca:89:e0:be:d2:
6a:3c:01:74:20:91:f7:9c:f0:63:1f:4c:1d:26:62:
aa:b3:e2:d9:4c:1d:6d:a4:36:c4:2d:01:80:ad:e6:
1a:2f:fc:e2:59:f1:c1:00:39:bd:0b:d1:eb:9d:82:
86:14:fb:2e:f5:cd:97:b1:57:95:1c:c1:94:e4:91:
e1:80:f1:b8:da:3d:83:37:e7:94:c0:f8:33:8e:37:
8e:69:86:5c:ca:1c:e3:7f:a3:78:8b:23:b9:46:0e:
91:27:10:ed:cf:e0:c6:98:f4:f2:13:80:82:e9:e3:
b2:d7:9d:40:d9:4d:e5:fd:15:d1:27:8b:54:e6:53:
73:a8:99:10:7b:be:54:0f:f3:42:af:ef:cc:16:c4:
57:e1:31:4b:e2:0a:60:dd:b8:86:99:a7:0d:0b:7d:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:65:4A:83:D8:0A:19:C0:45:FA:6B:CC:C9:EC:DF:45:EB:FB:B7
X509v3 Authority Key Identifier:
keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:f5:28:ef:db:f0:fc:ea:58:c7:e1:74:76:8f:35:97:bf:
26:e3:7d:d8:d9:9e:72:49:8d:88:ac:18:82:0e:9f:f0:95:c5:
7b:4c:9e:b5:11:84:71:37:88:5f:f0:72:7a:a0:18:d7:ce:1b:
ff:72:fa:a5:e1:f3:c8:c1:e1:37:74:fc:7c:77:d3:c6:1f:de:
26:fd:70:15:ec:84:84:25:38:0f:81:ee:9d:f1:0d:b3:ab:68:
2b:35:76:f1:18:00:f0:e8:a7:bf:ba:f1:b9:37:58:21:db:c2:
6b:cb:ca:b5:c8:30:63:fd:b9:fe:24:9d:67:3d:ce:a4:13:fd:
4a:dd:2f:99:6b:c4:03:43:5f:f2:ec:41:19:8c:03:70:52:4e:
85:02:97:1f:c7:71:19:82:b6:3b:7f:65:c5:5a:0a:12:aa:b3:
b1:6e:7c:21:e3:5d:d1:90:f4:02:f8:07:6b:10:8c:5a:e5:b8:
d3:c6:33:6b:c6:ec:04:b1:65:1c:ed:c1:cb:06:e2:c7:06:65:
42:00:30:ce:26:76:65:36:e0:2d:6a:62:71:3c:6e:7c:1c:f5:
c3:c1:82:d4:b0:2d:29:f4:15:3e:2f:92:07:f4:3f:12:a9:e5:
c5:9d:fe:41:28:30:fe:b6:0d:14:ee:08:7f:f8:b1:39:4a:db:
d6:34:91:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRiziKAoWusAr+dRRKvefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz
MTMwMTIwHhcNMjUwMzI5MDUwMDUwWhcNMjUwMzMwMDUwMDUwWjAzMTEwLwYDVQQD
Eyg4YTIxNjU0YTgzZDgwYTE5YzA0NWZhNmJjY2M5ZWNkZjQ1ZWJmYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oPE2riCekiHxLo+qKXHO2KbvzCW
lTqL4X3O30Tc6sQF367Lyz2FFL3NEUtOVkoMvEXez73zp4U4HgjG5pxUV7l+u4LG
OwCCfsqj7jPil+FNQnyrAWUSDsKk55NSj0MWWUa1yongvtJqPAF0IJH3nPBjH0wd
JmKqs+LZTB1tpDbELQGAreYaL/ziWfHBADm9C9HrnYKGFPsu9c2XsVeVHMGU5JHh
gPG42j2DN+eUwPgzjjeOaYZcyhzjf6N4iyO5Rg6RJxDtz+DGmPTyE4CC6eOy151A
2U3l/RXRJ4tU5lNzqJkQe75UD/NCr+/MFsRX4TFL4gpg3biGmacNC32VNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIohZUqD2AoZwEX6a8zJ7N9F6/u3MB8GA1UdIwQY
MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt
YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi
LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJb/1KO/b
8PzqWMfhdHaPNZe/JuN92NmeckmNiKwYgg6f8JXFe0yetRGEcTeIX/ByeqAY184b
/3L6peHzyMHhN3T8fHfTxh/eJv1wFeyEhCU4D4HunfENs6toKzV28RgA8Oinv7rx
uTdYIdvCa8vKtcgwY/25/iSdZz3OpBP9St0vmWvEA0Nf8uxBGYwDcFJOhQKXH8dx
GYK2O39lxVoKEqqzsW58IeNd0ZD0AvgHaxCMWuW408Yza8bsBLFlHO3BywbixwZl
QgAwziZ2ZTbgLWpicTxufBz1w8GC1LAtKfQVPi+SB/Q/EqnlxZ3+QSgw/rYNFO4I
f/ixOUrb1jSRzg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:39:14 2025 by rpki-client