Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: X284TSVLXkwHPehaOaxay6mqG4YNoy+KQ5zOJAiSv5I=
Subject key identifier: D7:86:2C:7F:4F:AC:E4:9D:69:00:0E:C6:20:3F:E8:2B:AD:06:1C:8A
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0194BD179B8BADC04D61B9090DB543407004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: EfzQx2huNb2bC5CWdVM3gotQOdk0JFinmKF0bqfAQ2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9b:8b:ad:c0:4d:61:b9:09:0d:b5:43:40:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=d7862c7f4face49d69000ec6203fe82bad061c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:35:fe:b4:e7:cb:48:d8:75:8f:97:a8:11:
10:42:d3:8b:8d:9d:85:5c:92:54:26:86:6a:e1:44:
bd:91:a7:22:7f:b7:e2:c1:88:70:4d:ae:1d:60:07:
b3:df:72:bd:91:75:87:ce:ba:2d:b1:70:91:c4:72:
d1:0d:18:6d:bd:df:1f:bc:18:6a:1c:7a:9f:9a:cc:
4f:d8:fb:ed:69:92:e3:d1:28:b0:f4:9d:b2:e0:49:
d9:a5:54:ff:20:b6:8d:b4:74:f9:33:2d:ea:d5:ab:
2e:74:f5:fb:1a:da:b1:62:40:7e:68:ef:f9:b8:99:
8f:72:6c:93:c7:cf:71:f0:17:5c:ad:05:22:1f:44:
d7:d7:c0:30:59:f4:13:0f:22:a9:d1:42:1e:9e:f1:
8e:42:c4:29:7b:22:d1:c9:fd:40:79:28:bd:5b:80:
46:ee:de:b5:4a:6c:93:0e:e9:ec:34:a3:b8:2c:11:
64:57:79:f8:2e:c7:3d:34:9a:62:5f:ac:fe:4a:88:
13:bf:e5:55:d6:af:d3:7c:fd:21:08:b0:5f:19:89:
8c:ea:86:15:73:95:03:d5:e2:31:bb:c2:dd:35:77:
9c:84:b5:c6:cd:2f:03:17:20:c7:e4:1c:bb:3c:6d:
3a:bc:80:e1:8f:7f:f1:54:9a:d9:5c:fa:a7:10:b8:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:86:2C:7F:4F:AC:E4:9D:69:00:0E:C6:20:3F:E8:2B:AD:06:1C:8A
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0b:16:f7:6a:37:ec:cd:29:d0:77:a0:3b:ef:a8:78:df:bc:
11:44:88:8f:23:09:a1:d2:a9:e2:55:21:ed:ec:de:63:91:33:
be:6d:fb:63:6d:a6:76:5a:1d:56:26:a1:4e:ef:c8:2a:9c:14:
b7:ad:6c:87:be:68:80:c8:a2:e3:69:74:b8:d1:0a:31:23:19:
7b:2f:04:4b:59:da:d8:05:6a:a4:d5:88:43:ed:e5:a9:1a:2e:
f3:0a:c4:c9:ae:26:5f:7b:ff:7c:b5:f0:f2:84:51:74:f2:0e:
b8:15:e7:6c:fc:87:58:48:90:c7:e8:0f:e0:8a:34:12:80:cf:
7f:53:cc:17:82:49:0e:6e:9f:80:65:62:a0:2c:5b:8e:62:f4:
df:ff:88:66:bb:1f:6f:75:5d:f6:d1:89:f3:50:83:9a:dd:cd:
66:87:32:f5:95:2c:9f:5d:6c:ac:02:b3:30:94:98:d4:d4:4f:
ed:88:b7:62:ed:1a:5b:56:22:6e:d0:82:d1:79:cc:c6:b1:f0:
f5:40:e7:a8:1e:40:a1:08:b0:4d:be:35:06:c5:3b:cf:df:76:
f9:23:36:2e:63:55:8e:74:20:51:ea:2a:ca:17:21:0a:2a:10:
73:cd:fd:bb:8b:4b:34:20:c7:9b:10:25:98:32:68:a4:54:b1:
5c:50:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:55 2025 by rpki-client