Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: 37/+EaGe+WZMm2zw5NZ4eQVFkl0qoeT7rUkiX7a1FIY=
Subject key identifier: 3B:76:46:47:08:DE:04:72:84:D3:48:60:F5:E5:BD:57:9E:A6:5A:50
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 0194BCAA1C283A804514201E5B0580DE3A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 0FEC
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: O47QYsoOw1HSNdtroTZhn1kQDcMDR1ZNT+oGhbZ03fY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:28:3a:80:45:14:20:1e:5b:05:80:de:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=3b76464708de047284d34860f5e5bd579ea65a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:01:5d:21:af:20:1f:07:6f:cb:8a:f6:88:
ac:82:60:30:bb:8f:ec:46:d7:32:24:d1:4d:c5:ed:
ef:f3:16:7a:a7:8d:73:19:c2:04:42:f1:b2:9f:b0:
14:16:0d:57:32:fd:b5:0b:ab:e3:e9:0a:67:b7:e3:
df:98:ee:bf:44:1b:f7:7a:6c:cf:7f:09:09:80:d1:
e3:97:e5:41:bb:38:66:8b:42:98:9d:3e:54:99:77:
58:60:b5:35:44:e9:5e:da:9f:63:ee:a9:32:80:b5:
7c:47:b9:e4:6d:b2:03:76:4d:91:74:89:5e:e7:fc:
c5:27:d2:d8:2c:f5:06:ac:61:1d:ed:3e:a6:0c:ef:
ed:93:25:5c:f5:50:70:e4:6f:8b:de:7b:d9:cd:4c:
8f:53:58:d5:f8:8b:28:33:3a:56:3f:d5:21:c6:6d:
7e:58:e7:30:d9:df:c6:a5:e8:54:85:c5:c9:61:07:
c2:8c:70:50:c6:a2:a3:a1:67:47:4c:9d:7a:81:00:
57:e7:23:a4:b5:81:8e:88:07:0c:f6:24:ad:09:29:
95:3d:9b:12:a4:ea:97:4f:bd:18:b9:e7:35:18:6f:
5e:61:f7:02:8e:c7:ee:a2:ee:88:0e:ca:b0:fb:17:
c4:b5:22:07:50:88:22:2a:06:44:93:16:d5:ca:92:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:46:47:08:DE:04:72:84:D3:48:60:F5:E5:BD:57:9E:A6:5A:50
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:8c:76:2c:31:85:77:00:2e:a0:88:cd:30:50:b1:4f:bb:
47:b4:bd:c7:f2:a8:62:da:d3:da:22:c3:a1:ab:aa:c3:b4:c9:
b5:26:1e:30:b9:12:26:e1:d9:66:32:df:b6:86:7b:2c:21:16:
48:93:2c:0e:ff:84:6a:fc:3b:e7:2a:f8:79:60:ac:71:f7:24:
7a:31:e4:3d:55:19:40:38:c9:96:37:e6:84:23:07:a1:3b:ce:
95:da:17:73:71:8c:27:38:96:32:4c:86:8c:74:2e:d5:36:0c:
ce:00:81:48:ff:f9:9e:ca:be:1e:ac:e1:51:46:74:23:ac:fb:
c1:ec:ea:9a:0d:b5:38:6a:2b:66:84:cc:47:13:75:f8:ce:24:
9d:f3:82:56:b6:e6:15:67:48:0b:b6:af:90:57:59:cb:45:33:
f1:f1:ae:7e:87:34:f0:28:79:36:b0:08:41:45:6b:da:0a:86:
17:70:be:78:98:d6:b9:22:63:a9:e5:43:84:0a:34:77:87:8b:
e8:f6:ea:3f:f5:e1:e6:b4:e2:69:42:6f:b2:b0:ae:78:9e:96:
1e:b5:b7:4a:90:b8:aa:46:db:a3:c9:c1:6b:bd:49:24:c5:c5:
33:c5:e3:29:1d:e7:47:fd:81:3c:d3:11:5e:6d:59:c3:22:36:
fe:b2:27:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:21 2025 by rpki-client