Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
File: txLJ_svev1b4RdYHkT0bVXFZKio.mft (raw, json)
Hash identifier: QXBV1aypMATt/bTkcgElShTTU+JrQuOR+WWRIRGL+BE=
Subject key identifier: 94:15:56:63:5A:32:5D:9F:A8:56:7F:53:48:FF:CD:D9:EB:FD:4B:BA
Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Certificate serial: 0194BC72EC9E490D414DAE7602945E7DAAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: txLJ_svev1b4RdYHkT0bVXFZKio.crl (hash: WWwfgBLn/Fo4whIx06Zc3DUvVXYPfaistHmkU76HBws=)
2: vwMbSzPxT5-ntMRApyWcJX1TgPs.roa (hash: 1QgGP9Z1wCTe+S03IzPWefFRvT9t0lh0yDjoWTpeyvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ec:9e:49:0d:41:4d:ae:76:02:94:5e:7d:aa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=941556635a325d9fa8567f5348ffcdd9ebfd4bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:e8:18:b9:37:f0:24:75:7c:a0:08:6f:cd:
30:5c:72:00:75:b8:c6:b0:ee:e6:c7:8d:1c:8e:3f:
78:6d:35:5b:2f:62:18:2d:b9:c4:c8:ef:6a:fe:37:
fb:ee:78:e0:73:2d:27:f0:c5:47:7c:4c:83:50:d3:
c9:66:a2:ba:a1:c6:35:4f:87:67:3a:36:5f:02:53:
0d:f7:1b:58:89:9f:56:0b:4b:c1:93:4a:a3:96:b5:
e7:af:af:e9:65:d5:11:47:70:e0:bf:0a:f7:4c:82:
f5:48:ae:d8:af:12:a9:2b:ef:b0:de:b4:b0:3a:3f:
d7:96:88:18:4b:c7:c3:dc:d5:ea:8f:ea:b7:66:b1:
eb:92:af:36:fa:84:38:3b:bd:af:6d:16:c9:74:57:
f1:c5:c2:54:51:3e:5f:37:e5:be:64:41:c7:a1:0b:
05:82:1a:a1:ea:28:da:93:35:6d:8e:85:24:d0:be:
88:c8:51:8c:cb:e4:9a:d6:c1:31:52:ea:77:a5:12:
df:73:d4:85:f3:82:ca:a9:68:d2:e4:d5:87:b4:af:
0c:5e:71:40:e9:c3:a9:b5:b3:89:ad:0b:c7:1a:45:
10:b7:7a:7d:f9:32:d6:6a:f7:b1:68:7c:3b:ff:b3:
db:4e:12:d8:c0:db:ee:44:52:72:8c:10:89:be:94:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:56:63:5A:32:5D:9F:A8:56:7F:53:48:FF:CD:D9:EB:FD:4B:BA
X509v3 Authority Key Identifier:
keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4c:7c:2e:f3:d7:72:eb:fa:17:9b:fd:78:78:8e:84:3d:d7:
ea:c6:99:9e:50:17:0a:50:6c:19:12:63:0c:88:bf:67:9f:fe:
02:24:48:15:18:37:a1:6d:9f:24:24:a7:4c:dc:e4:58:32:52:
50:e4:ff:a9:85:a3:1a:9d:f7:c5:bf:42:25:4b:60:be:aa:fb:
cf:dd:f1:fa:ee:d2:6b:09:d6:80:4a:ad:64:b6:d1:a3:a9:81:
29:f1:bc:a0:49:79:21:50:e2:17:d0:6a:5d:0c:5d:70:5d:1b:
eb:93:e8:e1:49:02:a0:b5:53:f6:68:9e:5f:bc:47:34:f6:c8:
4f:f9:ea:24:cf:92:d7:d3:40:c9:c2:bf:4f:42:78:35:b7:48:
84:31:cf:de:17:66:ae:a4:a4:6f:cf:54:c2:98:7c:db:e0:7e:
43:41:e2:3c:15:39:67:dd:91:2a:fd:73:07:1f:0a:43:66:c6:
a8:16:fa:63:db:5e:16:04:73:3a:76:3a:6a:18:de:59:f0:59:
84:37:c5:a3:fc:ba:2b:e9:c5:62:0e:25:ab:e1:77:db:63:f8:
98:d3:d0:c1:f6:99:4d:ed:4f:f6:21:bb:ee:9b:6e:fb:b7:c3:
eb:7b:ae:1f:2a:a2:2a:f2:8b:14:14:f7:d9:09:a2:dd:d6:1b:
ff:7e:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:09 2025 by rpki-client