Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: bpT5ncMLQoyDUf5R6K9K1eCdlpMloxYniYnXgtEx2QM=
Subject key identifier: 20:1D:3D:C5:03:3C:E3:6C:ED:BB:7C:44:87:B1:0A:CC:BA:93:76:D7
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 0194BC3BCFDA3B05D4BD6074041A31875133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 021F
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: g7G/YHRI9o55YbRUrPq7sLTqL0eWq08qmD/U7y6/7Hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:da:3b:05:d4:bd:60:74:04:1a:31:87:51:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=201d3dc5033ce36cedbb7c4487b10accba9376d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:60:6a:7c:b1:cb:71:3b:b8:27:a0:4e:a6:
b7:78:5f:9a:12:dc:7c:86:22:b1:9e:ba:61:0f:40:
86:67:b1:46:ce:74:2a:34:5d:22:f7:2a:b3:3e:18:
54:8b:c7:25:33:1d:4b:97:2f:19:5b:f8:41:33:26:
59:44:d6:76:af:a1:19:20:55:55:aa:4d:35:d6:94:
2e:2b:78:20:6b:40:65:48:c1:01:70:94:bd:dc:07:
ea:52:05:56:45:2a:b4:d9:57:fc:5a:88:0c:29:93:
a7:d6:43:3c:c9:d9:c0:16:2d:e6:e3:21:8a:d1:d1:
f9:5f:d4:07:38:09:f8:55:0b:df:ad:54:6b:08:74:
54:87:93:74:31:c1:9a:23:3e:ec:f1:99:d3:0b:2e:
bf:df:ca:f4:92:15:02:b3:4c:e3:5e:5f:43:c4:df:
99:6d:05:75:20:88:76:7f:8f:f1:51:fd:33:52:73:
e3:a4:dc:8a:58:b6:bc:27:53:86:3a:dd:56:0f:27:
58:57:ff:da:8d:f1:55:91:6f:83:dc:1a:ab:33:d1:
e0:97:54:45:f7:9b:18:07:da:05:fd:62:bb:e6:1d:
2f:89:01:22:36:86:24:45:48:9a:d6:cf:53:5c:61:
3c:b7:20:0a:13:44:e8:f9:e4:95:63:c8:ee:38:94:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1D:3D:C5:03:3C:E3:6C:ED:BB:7C:44:87:B1:0A:CC:BA:93:76:D7
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:38:21:fa:0f:5e:29:a6:d8:89:26:1e:cf:97:da:52:eb:
ea:87:0c:13:85:d5:bc:70:b6:7a:08:04:50:20:c4:9c:8b:2d:
c1:11:9d:49:85:90:7f:42:40:f7:0c:73:58:9b:b4:7c:1e:7a:
64:99:c4:2e:1f:34:7a:3f:04:69:af:21:22:d9:c7:ae:02:30:
1f:40:c8:6b:5a:61:90:20:db:d8:77:3a:2d:68:d0:aa:06:12:
c7:a0:d0:54:15:cf:06:34:49:eb:a6:4c:3a:a0:ad:79:bd:0c:
af:ce:11:08:c1:b5:62:91:8d:8b:d4:13:84:47:77:41:40:7e:
b6:19:d3:b3:1a:31:bc:af:a1:1f:45:1a:65:87:8e:f3:f9:d7:
9c:03:ee:87:cc:73:b7:ae:03:9b:bb:94:69:94:64:3e:27:2b:
bb:ab:65:69:54:25:36:50:3f:36:02:77:ab:36:e7:c4:f9:b7:
b7:e7:fc:e3:93:4c:55:5e:35:5b:41:4b:aa:14:d7:07:86:fc:
c9:fe:c1:22:e5:e2:10:d8:14:03:91:dc:44:91:70:e7:4c:72:
2c:91:2a:58:bc:cc:fe:8f:bf:cc:05:9f:e6:18:77:c5:db:52:
8b:77:70:ec:54:c6:55:c9:05:d3:c9:3a:cf:e6:25:05:e7:97:
fd:19:52:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8/aOwXUvWB0BBoxh1EzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTYyN2I5MjM5ZmVhMzQ1N2NkODdjYjkzN2FiNGM3OTg2
Y2FjMDkwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
EygyMDFkM2RjNTAzM2NlMzZjZWRiYjdjNDQ4N2IxMGFjY2JhOTM3NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp9ganyxy3E7uCegTqa3eF+aEtx8
hiKxnrphD0CGZ7FGznQqNF0i9yqzPhhUi8clMx1Lly8ZW/hBMyZZRNZ2r6EZIFVV
qk011pQuK3gga0BlSMEBcJS93AfqUgVWRSq02Vf8WogMKZOn1kM8ydnAFi3m4yGK
0dH5X9QHOAn4VQvfrVRrCHRUh5N0McGaIz7s8ZnTCy6/38r0khUCs0zjXl9DxN+Z
bQV1IIh2f4/xUf0zUnPjpNyKWLa8J1OGOt1WDydYV//ajfFVkW+D3BqrM9Hgl1RF
95sYB9oF/WK75h0viQEiNoYkRUia1s9TXGE8tyAKE0To+eSVY8juOJQmbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAdPcUDPONs7bt8RIexCsy6k3bXMB8GA1UdIwQY
MBaAFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2Qt
YTVmZWIzOTczNTEyLzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2QtYTVmZWIzOTczNTEy
LzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1Q4IfoP
Ximm2IkmHs+X2lLr6ocME4XVvHC2eggEUCDEnIstwRGdSYWQf0JA9wxzWJu0fB56
ZJnELh80ej8Eaa8hItnHrgIwH0DIa1phkCDb2Hc6LWjQqgYSx6DQVBXPBjRJ66ZM
OqCteb0Mr84RCMG1YpGNi9QThEd3QUB+thnTsxoxvK+hH0UaZYeO8/nXnAPuh8xz
t64Dm7uUaZRkPicru6tlaVQlNlA/NgJ3qzbnxPm3t+f845NMVV41W0FLqhTXB4b8
yf7BIuXiENgUA5HcRJFw50xyLJEqWLzM/o+/zAWf5hh3xdtSi3dw7FTGVckF08k6
z+YlBeeX/RlSqA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:53 2025 by rpki-client