Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.mft
File: tq8SwVTAKQhVvZFCm31JPICI29s.mft (raw, json)
Hash identifier: D3Gl8sc3YY6UlYwTPajmFaNujrGQ+v1Mmz8cEYEixO4=
Subject key identifier: 03:4E:23:65:3B:4F:A1:27:19:E1:5E:F8:8A:7C:8F:48:10:F9:1D:CC
Authority key identifier: B6:AF:12:C1:54:C0:29:08:55:BD:91:42:9B:7D:49:3C:80:88:DB:DB
Certificate issuer: /CN=b6af12c154c0290855bd91429b7d493c8088dbdb
Certificate serial: 0194D10BF733D03FBA7B949F192B2891895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq8SwVTAKQhVvZFCm31JPICI29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.mft
Manifest number: 08AB
Signing time: Tue 04 Feb 2025 13:00:09 +0000
Manifest this update: Tue 04 Feb 2025 13:00:09 +0000
Manifest next update: Wed 05 Feb 2025 13:00:09 +0000
Files and hashes: 1: tq8SwVTAKQhVvZFCm31JPICI29s.crl (hash: DqilXfT5j1eaA+nNfZzry/DdvZGP70T3YT/6EE4ArQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:0b:f7:33:d0:3f:ba:7b:94:9f:19:2b:28:91:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6af12c154c0290855bd91429b7d493c8088dbdb
Validity
Not Before: Feb 4 13:00:09 2025 GMT
Not After : Feb 5 13:00:09 2025 GMT
Subject: CN=034e23653b4fa12719e15ef88a7c8f4810f91dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:cc:9e:b4:44:1c:6c:ce:83:5b:51:b2:55:
f8:2a:7c:8e:ba:83:16:2c:1d:7e:9e:f0:45:a1:2d:
23:a1:62:da:af:91:24:35:5b:ab:73:2f:6a:a3:fd:
ff:2c:6a:d0:4a:64:72:1a:b1:70:df:03:db:1b:0d:
59:a9:f5:56:18:5b:d2:ab:35:88:6e:f3:cf:bb:8f:
cf:3f:f1:b0:a4:d9:e4:60:e2:06:5e:66:c3:ed:58:
fc:a7:92:b0:9f:02:6c:0d:b8:0b:b3:59:4e:a7:46:
45:b8:66:b2:5e:d9:6b:31:7c:88:be:db:69:5e:33:
5f:9c:10:42:90:47:60:15:68:93:e9:44:79:0d:50:
5b:00:99:42:c1:90:6a:d3:50:b2:90:52:61:34:08:
c1:e8:59:dd:7f:e8:5e:d8:ce:d5:09:5a:3b:e9:4c:
e7:38:51:55:87:72:4c:a7:94:be:e9:e4:1b:44:ea:
e9:df:fc:56:1e:e3:37:41:5d:51:b8:2c:58:ea:eb:
e1:ef:40:3b:fa:44:37:92:03:bd:93:4f:f0:a0:6f:
22:b1:47:a2:c5:53:ff:c7:05:74:e4:45:00:12:01:
3f:6f:40:8f:56:03:86:a1:45:1f:d1:f6:f3:1b:b6:
49:0a:8c:b5:82:bd:9e:49:1d:6f:cc:01:4b:13:9d:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:23:65:3B:4F:A1:27:19:E1:5E:F8:8A:7C:8F:48:10:F9:1D:CC
X509v3 Authority Key Identifier:
keyid:B6:AF:12:C1:54:C0:29:08:55:BD:91:42:9B:7D:49:3C:80:88:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq8SwVTAKQhVvZFCm31JPICI29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/5169fb-a596-4833-9bb4-289d60d42c23/1/tq8SwVTAKQhVvZFCm31JPICI29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d4:66:bd:1a:ca:27:64:e0:67:9b:07:73:3c:3f:b5:23:a9:
2a:2b:00:0b:41:15:ca:78:ab:fa:72:6e:55:fc:81:72:00:89:
97:ca:1b:58:43:e5:90:92:41:28:c8:5e:e3:e6:7f:8d:d4:59:
fc:7a:f6:f4:19:05:e4:36:7a:b4:76:3e:5f:ec:2f:ba:08:58:
5e:53:64:7d:f8:58:4f:b8:1d:51:18:bc:8a:98:4a:07:e0:41:
f9:e7:91:70:b1:bb:d1:3c:b6:f9:18:cc:d4:ed:27:60:e9:50:
a7:60:cd:c2:cd:d2:49:21:c3:bc:17:48:49:03:50:ad:4a:ca:
8b:dd:21:22:70:60:97:60:0e:e3:14:59:08:4d:4c:05:af:16:
22:6a:b6:8d:a0:85:e3:8b:62:90:8c:49:f9:67:6a:4f:9c:3d:
c6:47:33:d5:e1:eb:01:9d:db:25:e0:6b:fe:f1:60:c0:ec:5c:
a3:8b:04:41:fd:de:2b:63:c0:a1:41:b7:45:5f:04:bb:6b:cd:
97:62:6b:b6:a9:0b:b9:1d:95:25:e4:19:a5:8e:84:ab:e5:74:
71:3f:02:8b:53:85:97:de:89:d4:e7:85:6e:2b:c9:8b:6c:c6:
46:a3:bf:39:eb:26:63:c9:93:cc:fc:ad:de:6e:39:9f:15:8a:
38:bc:9c:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTRC/cz0D+6e5SfGSsokYlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YWYxMmMxNTRjMDI5MDg1NWJkOTE0MjliN2Q0OTNjODA4
OGRiZGIwHhcNMjUwMjA0MTMwMDA5WhcNMjUwMjA1MTMwMDA5WjAzMTEwLwYDVQQD
EygwMzRlMjM2NTNiNGZhMTI3MTllMTVlZjg4YTdjOGY0ODEwZjkxZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphnMnrREHGzOg1tRslX4KnyOuoMW
LB1+nvBFoS0joWLar5EkNVurcy9qo/3/LGrQSmRyGrFw3wPbGw1ZqfVWGFvSqzWI
bvPPu4/PP/GwpNnkYOIGXmbD7Vj8p5KwnwJsDbgLs1lOp0ZFuGayXtlrMXyIvttp
XjNfnBBCkEdgFWiT6UR5DVBbAJlCwZBq01CykFJhNAjB6Fndf+he2M7VCVo76Uzn
OFFVh3JMp5S+6eQbROrp3/xWHuM3QV1RuCxY6uvh70A7+kQ3kgO9k0/woG8isUei
xVP/xwV05EUAEgE/b0CPVgOGoUUf0fbzG7ZJCoy1gr2eSR1vzAFLE52ipwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANOI2U7T6EnGeFe+Ip8j0gQ+R3MMB8GA1UdIwQY
MBaAFLavEsFUwCkIVb2RQpt9STyAiNvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHE4U3dWVEFLUWhWdlpGQ20zMUpQSUNJMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi81MTY5ZmItYTU5Ni00ODMzLTliYjQt
Mjg5ZDYwZDQyYzIzLzEvdHE4U3dWVEFLUWhWdlpGQ20zMUpQSUNJMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi81MTY5ZmItYTU5Ni00ODMzLTliYjQtMjg5ZDYwZDQyYzIz
LzEvdHE4U3dWVEFLUWhWdlpGQ20zMUpQSUNJMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNRmvRrK
J2TgZ5sHczw/tSOpKisAC0EVynir+nJuVfyBcgCJl8obWEPlkJJBKMhe4+Z/jdRZ
/Hr29BkF5DZ6tHY+X+wvughYXlNkffhYT7gdURi8iphKB+BB+eeRcLG70Ty2+RjM
1O0nYOlQp2DNws3SSSHDvBdISQNQrUrKi90hInBgl2AO4xRZCE1MBa8WImq2jaCF
44tikIxJ+WdqT5w9xkcz1eHrAZ3bJeBr/vFgwOxco4sEQf3eK2PAoUG3RV8Eu2vN
l2JrtqkLuR2VJeQZpY6Eq+V0cT8Ci1OFl96J1OeFbivJi2zGRqO/OesmY8mTzPyt
3m45nxWKOLycoA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:58 2025 by rpki-client