Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: ckdcJrPVG6YtflT1f/aPj02sbX2e9lxtjOdMsmJFSyw=
Subject key identifier: 5B:16:D0:00:3B:81:AD:2B:A5:45:3E:1C:A3:6C:3F:25:70:CE:B5:85
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 0194BD176F61DE45B9220CDFC66756ECBB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: RachvBT8K5RrKxFdgA0E6V8Tpkk.roa (hash: vHi3hayejwDoniD0Pthlstu8q6vyCTap1RFSLihvYco=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: OTwPg2nlgn+S17qdAujf8x+HWG1R0yz5j1tPAAn1fjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6f:61:de:45:b9:22:0c:df:c6:67:56:ec:bb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=5b16d0003b81ad2ba5453e1ca36c3f2570ceb585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:a7:6e:75:56:2e:f5:84:33:38:f2:6e:57:
78:cb:3c:99:ee:05:5c:0f:2b:8b:9e:13:fa:7c:84:
c1:60:4a:19:3e:76:d4:aa:2c:03:58:77:09:e6:86:
13:85:a7:84:2d:cb:68:12:df:b9:6a:a6:b5:34:3b:
f3:a1:ca:19:f8:b0:38:a1:65:2b:50:41:e2:12:d7:
c6:d8:57:da:21:cc:30:a0:69:8e:ff:24:c6:42:cd:
e6:f6:77:ac:9a:66:2f:f8:c1:c4:9a:ea:50:2b:c1:
06:17:e8:8f:95:d1:56:88:6c:6d:13:92:47:14:73:
20:6e:e8:c6:20:1d:e2:55:05:57:64:25:59:da:65:
b9:13:f3:a3:49:c6:0f:cd:a4:a1:f9:b8:be:e0:37:
5b:40:d8:ba:2e:48:a1:78:87:6b:43:5c:e7:be:21:
a9:7e:88:8d:a0:3e:06:65:9b:d7:4f:dd:35:4a:5f:
a6:50:b3:5e:b4:f5:5e:08:6e:a7:ea:bd:d9:a3:21:
06:ab:ae:6d:8c:c0:c1:92:c2:e2:a0:76:0f:e5:ff:
15:85:79:be:ed:3b:1c:f8:47:b6:ac:c9:7a:51:0b:
33:b9:5d:26:9b:0a:0f:0c:e9:a5:12:bc:41:57:ef:
f1:e9:ff:46:7b:88:2b:1c:7e:64:ed:b4:70:df:a4:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:D0:00:3B:81:AD:2B:A5:45:3E:1C:A3:6C:3F:25:70:CE:B5:85
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:23:0a:04:02:80:e5:86:c7:1d:05:cf:98:32:8f:a9:4b:
98:9d:dc:41:3c:6b:74:f0:a0:28:90:13:d1:a0:1b:04:61:9e:
58:2c:08:68:19:3e:ec:7f:7c:04:b2:3f:58:81:23:a2:01:24:
11:8c:9e:46:bd:81:9b:78:05:a8:8e:19:61:0f:1a:2c:fb:f4:
ee:4e:62:0e:81:c8:7f:f7:9c:46:8c:9a:a1:53:b6:4f:76:2d:
eb:f9:60:d6:e4:44:5c:cf:02:9c:a2:9c:a9:e4:b5:7e:bf:6f:
53:7b:07:6a:57:3b:0a:7c:46:e5:af:12:f9:e8:ec:4f:c0:85:
e6:3c:f4:54:7b:44:42:6f:86:2d:53:3d:a2:27:72:1b:9f:52:
cc:24:51:a7:8a:3a:d5:30:9c:3e:05:68:03:83:73:8f:62:9d:
57:55:c8:b4:10:9f:9d:33:23:74:66:5d:9b:8a:9d:c9:4d:2d:
e9:b9:c1:e2:c5:d5:70:01:0d:db:12:fc:fc:94:d5:20:3f:34:
4e:4b:ef:0b:30:ab:d8:64:d7:df:67:38:df:06:ce:e1:2b:c8:
49:24:ad:ff:d1:47:a5:26:9a:4e:c0:98:6f:dc:49:f1:6c:70:
be:13:ef:78:72:ed:e9:ea:89:13:5b:f8:43:42:59:cb:31:51:
8c:d6:b6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F29h3kW5IgzfxmdW7Lt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTJiMjVhMjMwNGY3YmE0NGMzOGQwMzk1ZGRmMmVkMDRm
NWM3ZWYwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
Eyg1YjE2ZDAwMDNiODFhZDJiYTU0NTNlMWNhMzZjM2YyNTcwY2ViNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wmnbnVWLvWEMzjybld4yzyZ7gVc
DyuLnhP6fITBYEoZPnbUqiwDWHcJ5oYThaeELctoEt+5aqa1NDvzocoZ+LA4oWUr
UEHiEtfG2FfaIcwwoGmO/yTGQs3m9nesmmYv+MHEmupQK8EGF+iPldFWiGxtE5JH
FHMgbujGIB3iVQVXZCVZ2mW5E/OjScYPzaSh+bi+4DdbQNi6LkiheIdrQ1znviGp
foiNoD4GZZvXT901Sl+mULNetPVeCG6n6r3ZoyEGq65tjMDBksLioHYP5f8VhXm+
7Tsc+Ee2rMl6UQszuV0mmwoPDOmlErxBV+/x6f9Ge4grHH5k7bRw36QjuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsW0AA7ga0rpUU+HKNsPyVwzrWFMB8GA1UdIwQY
MBaAFLcSslojBPe6RMONA5Xd8u0E9cfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMt
MDgxY2I3Y2I4OGYzLzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMtMDgxY2I3Y2I4OGYz
LzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7sjCgQC
gOWGxx0Fz5gyj6lLmJ3cQTxrdPCgKJAT0aAbBGGeWCwIaBk+7H98BLI/WIEjogEk
EYyeRr2Bm3gFqI4ZYQ8aLPv07k5iDoHIf/ecRoyaoVO2T3Yt6/lg1uREXM8CnKKc
qeS1fr9vU3sHalc7CnxG5a8S+ejsT8CF5jz0VHtEQm+GLVM9oidyG59SzCRRp4o6
1TCcPgVoA4Nzj2KdV1XItBCfnTMjdGZdm4qdyU0t6bnB4sXVcAEN2xL8/JTVID80
TkvvCzCr2GTX32c43wbO4SvISSSt/9FHpSaaTsCYb9xJ8WxwvhPveHLt6eqJE1v4
Q0JZyzFRjNa2gw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:08 2025 by rpki-client