Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier: e/7W0bmPFKNbOV2PwcC90uEhtx106PbUp35+/ggQLds=
Subject key identifier: 0C:39:B3:11:29:D4:EC:65:FA:A7:54:B8:92:37:FB:58:11:29:26:CC
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0195E12223D154030CDF8C4B7C926EE72F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number: 025E
Signing time: Sat 29 Mar 2025 09:01:05 +0000
Manifest this update: Sat 29 Mar 2025 09:01:05 +0000
Manifest next update: Sun 30 Mar 2025 09:01:05 +0000
Files and hashes: 1: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: RJjQHEAgI1EzQSf3W1M9Y1Ehne+0VyNE3Mpjpq7l1Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:23:d1:54:03:0c:df:8c:4b:7c:92:6e:e7:2f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Mar 29 09:01:05 2025 GMT
Not After : Mar 30 09:01:05 2025 GMT
Subject: CN=0c39b31129d4ec65faa754b89237fb58112926cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:bd:d1:3a:8f:7e:56:55:07:4e:73:99:7b:
d2:50:25:e1:79:be:ac:ee:c2:b4:56:5b:0c:63:9f:
da:01:b9:c4:cd:f7:df:1e:84:34:1f:e1:f4:85:fd:
05:b4:dc:bc:99:6a:1e:4c:47:c8:3e:b5:8c:14:1c:
29:55:92:ab:2a:8a:6a:6e:01:e5:59:cc:f8:19:ea:
62:ff:f2:e1:fa:45:d2:86:4f:35:f0:a1:d4:f1:af:
5d:67:2e:34:2c:43:8e:70:46:02:e3:8a:8e:bd:2b:
ac:90:b1:93:a6:28:b3:16:67:79:dd:64:e5:81:59:
9c:04:31:60:e2:f0:b6:17:c0:cb:59:95:f6:a1:d4:
5e:dc:6a:fc:8c:55:3e:d2:2c:10:33:6f:8a:52:1c:
cd:4f:37:f4:85:73:98:4f:2f:ea:b6:72:dc:cc:c0:
4d:13:b2:26:8e:81:05:b8:d7:28:a4:21:02:ce:2d:
e0:cc:1a:39:39:a6:9d:95:35:d0:fa:22:66:5a:f2:
aa:a9:1d:bc:a5:e6:1f:da:6a:d5:04:a0:f2:42:60:
aa:a3:f7:39:a6:32:9e:74:22:ac:12:be:ee:72:25:
2a:c0:c1:f0:04:ec:08:de:25:bf:2d:ac:e9:df:c0:
e3:49:a7:9a:bc:a0:7d:6a:3b:88:b9:c9:08:6e:27:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:B3:11:29:D4:EC:65:FA:A7:54:B8:92:37:FB:58:11:29:26:CC
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4a:88:36:90:2e:5d:fe:5a:a0:92:65:dc:23:aa:83:98:f2:
95:d9:08:af:c9:f9:56:ee:92:e3:fd:20:12:aa:d4:86:a3:82:
d8:c0:b2:f5:9e:62:43:94:35:d6:4c:b5:d1:38:19:91:b5:26:
9e:ea:81:89:3c:2a:7c:42:5b:45:d2:be:5a:e4:a0:6e:98:52:
e5:7c:36:82:15:ce:fe:9a:76:f4:35:d8:28:35:f1:9e:34:02:
0d:97:0b:94:61:57:9a:10:f4:99:0b:35:ee:20:32:a2:c0:16:
6d:44:50:5e:97:36:1d:a7:de:ed:ce:a1:91:f0:df:38:45:a0:
96:49:a1:3d:b4:a1:d5:ba:88:b1:cd:37:6b:76:19:e2:dc:8a:
d4:45:6f:82:22:73:e6:ea:82:5f:07:75:ff:2d:89:58:df:d0:
95:6c:39:1e:52:51:49:cc:4f:1a:2b:52:bf:a0:02:5b:4c:10:
bd:81:8e:31:9f:6b:f2:a3:a1:bd:c7:fd:6f:55:ee:cd:dc:f9:
0c:a5:15:c0:f7:42:95:2f:ef:d6:98:9d:f8:9a:21:a1:9d:f3:
41:62:b4:1b:69:3c:48:2a:c0:06:48:df:cc:06:e7:b0:21:82:
36:56:82:f4:d7:47:f7:bf:1d:52:88:78:59:2f:e5:3f:f3:cd:
b5:00:97:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIiPRVAMM34xLfJJu5y9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl
NmNiNTAwHhcNMjUwMzI5MDkwMTA1WhcNMjUwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
EygwYzM5YjMxMTI5ZDRlYzY1ZmFhNzU0Yjg5MjM3ZmI1ODExMjkyNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+290TqPflZVB05zmXvSUCXheb6s
7sK0VlsMY5/aAbnEzfffHoQ0H+H0hf0FtNy8mWoeTEfIPrWMFBwpVZKrKopqbgHl
Wcz4Gepi//Lh+kXShk818KHU8a9dZy40LEOOcEYC44qOvSuskLGTpiizFmd53WTl
gVmcBDFg4vC2F8DLWZX2odRe3Gr8jFU+0iwQM2+KUhzNTzf0hXOYTy/qtnLczMBN
E7ImjoEFuNcopCECzi3gzBo5OaadlTXQ+iJmWvKqqR28peYf2mrVBKDyQmCqo/c5
pjKedCKsEr7uciUqwMHwBOwI3iW/Lazp38DjSaeavKB9ajuIuckIbif2dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw5sxEp1Oxl+qdUuJI3+1gRKSbMMB8GA1UdIwQY
MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt
OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4
LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUqINpAu
Xf5aoJJl3COqg5jyldkIr8n5Vu6S4/0gEqrUhqOC2MCy9Z5iQ5Q11ky10TgZkbUm
nuqBiTwqfEJbRdK+WuSgbphS5Xw2ghXO/pp29DXYKDXxnjQCDZcLlGFXmhD0mQs1
7iAyosAWbURQXpc2Hafe7c6hkfDfOEWglkmhPbSh1bqIsc03a3YZ4tyK1EVvgiJz
5uqCXwd1/y2JWN/QlWw5HlJRScxPGitSv6ACW0wQvYGOMZ9r8qOhvcf9b1Xuzdz5
DKUVwPdClS/v1pid+JohoZ3zQWK0G2k8SCrABkjfzAbnsCGCNlaC9NdH978dUoh4
WS/lP/PNtQCXoA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:10 2025 by rpki-client