Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: YoRuiK9/BIMpHwFSE8aNTbJW2JNb6woJlaWir5JOtg0=
Subject key identifier: BF:31:ED:DF:29:FA:AF:2A:ED:54:C0:08:3F:2F:F1:74:43:DC:1D:EB
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0194BC72914D59195FDF2E72917522C6DE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 02C9
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: hekjokP8Fv6/LxCkRTTSGI3ixY7kCZ8x1iY9fWAs4U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:91:4d:59:19:5f:df:2e:72:91:75:22:c6:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=bf31eddf29faaf2aed54c0083f2ff17443dc1deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:18:f8:09:0f:f2:d4:e1:e9:77:38:86:78:
e3:54:0a:6c:93:b2:2a:20:35:cf:58:cc:b6:be:36:
25:55:5a:11:c6:09:26:d2:5c:2c:5e:96:38:19:a9:
4b:a3:f1:1c:90:75:fc:67:d5:3e:f3:01:62:0a:4d:
5d:c0:26:f1:ca:78:74:40:19:60:ab:4f:03:6a:4e:
b5:c0:5c:76:e0:e3:90:d0:41:62:73:63:dc:4a:f2:
f5:b3:6d:5d:59:9b:51:5b:93:6d:dd:6b:d5:20:6d:
1b:0d:bb:7a:f8:4b:94:6e:0b:5d:de:83:4b:f9:0c:
cb:27:2e:1d:33:ea:9e:bf:4d:02:a9:30:e7:bf:8a:
2a:6b:4e:40:1f:78:07:81:6c:b1:28:71:db:c5:b8:
1d:b9:34:b3:e9:10:e1:d3:25:ad:15:92:81:2c:5b:
1d:39:8f:ef:e8:2c:ea:83:f4:95:ff:68:52:0d:3b:
4e:17:b7:5c:25:6c:ac:8d:c7:b3:b8:9b:1d:66:91:
50:21:3a:e2:50:2a:9a:aa:a3:22:3e:53:db:bf:b8:
f6:c6:9c:99:f2:ff:a2:83:1f:7d:66:83:6b:de:b5:
4f:36:86:f9:a5:fb:91:d2:53:a4:7d:d0:56:18:ae:
f0:69:a4:b9:c6:b2:f9:f1:3d:c1:6a:82:c7:bc:86:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:ED:DF:29:FA:AF:2A:ED:54:C0:08:3F:2F:F1:74:43:DC:1D:EB
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8c:d1:fa:66:41:c2:91:7e:02:fb:d9:21:80:e4:6c:c6:6a:
03:75:24:60:c5:2b:20:93:88:6a:b7:d9:44:18:b2:b0:a8:d4:
34:c6:2f:f9:c4:43:ff:66:61:5e:1c:27:5f:d9:59:4c:be:c1:
eb:9d:2b:aa:90:46:e7:3d:00:50:7b:90:73:74:19:b8:db:01:
60:a9:5f:e0:cd:a1:7d:65:7c:b0:54:35:3c:e8:83:3a:79:f7:
e6:78:4d:7d:b9:26:31:3e:51:e3:45:87:38:ae:b9:d0:3a:cb:
f1:c4:ba:bd:58:82:f1:3b:76:16:02:a2:e4:20:36:b5:b2:71:
55:d9:84:d8:c2:02:82:52:c7:32:07:c9:46:74:3e:a0:35:e5:
71:09:c2:33:99:bc:d3:32:0a:4b:d9:6d:31:0b:ca:97:da:3f:
f2:1b:8e:f5:2f:72:11:17:b8:6a:82:60:63:fd:5c:0a:68:c4:
dc:0d:c4:39:cc:00:b8:71:d5:75:be:23:73:be:9d:be:ec:f9:
19:f0:f5:8f:16:43:d5:a2:06:3c:5a:54:b2:d2:46:45:64:05:
b4:6f:9a:c1:2a:a4:04:38:58:09:c9:b8:2c:9e:00:0b:2a:95:
c7:9f:d3:39:76:b9:0f:f2:e3:72:77:cc:70:34:3d:90:fc:f4:
49:7b:e0:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpFNWRlf3y5ykXUixt5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx
ZTMyMDMwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
EyhiZjMxZWRkZjI5ZmFhZjJhZWQ1NGMwMDgzZjJmZjE3NDQzZGMxZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB0Y+AkP8tTh6Xc4hnjjVApsk7Iq
IDXPWMy2vjYlVVoRxgkm0lwsXpY4GalLo/EckHX8Z9U+8wFiCk1dwCbxynh0QBlg
q08Dak61wFx24OOQ0EFic2PcSvL1s21dWZtRW5Nt3WvVIG0bDbt6+EuUbgtd3oNL
+QzLJy4dM+qev00CqTDnv4oqa05AH3gHgWyxKHHbxbgduTSz6RDh0yWtFZKBLFsd
OY/v6Czqg/SV/2hSDTtOF7dcJWysjcezuJsdZpFQITriUCqaqqMiPlPbv7j2xpyZ
8v+igx99ZoNr3rVPNob5pfuR0lOkfdBWGK7waaS5xrL58T3BaoLHvIZPVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8x7d8p+q8q7VTACD8v8XRD3B3rMB8GA1UdIwQY
MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt
OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1
LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYzR+mZB
wpF+AvvZIYDkbMZqA3UkYMUrIJOIarfZRBiysKjUNMYv+cRD/2ZhXhwnX9lZTL7B
650rqpBG5z0AUHuQc3QZuNsBYKlf4M2hfWV8sFQ1POiDOnn35nhNfbkmMT5R40WH
OK650DrL8cS6vViC8Tt2FgKi5CA2tbJxVdmE2MICglLHMgfJRnQ+oDXlcQnCM5m8
0zIKS9ltMQvKl9o/8huO9S9yERe4aoJgY/1cCmjE3A3EOcwAuHHVdb4jc76dvuz5
GfD1jxZD1aIGPFpUstJGRWQFtG+awSqkBDhYCcm4LJ4ACyqVx5/TOXa5D/LjcnfM
cDQ9kPz0SXvgMA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:39 2025 by rpki-client