Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json)
Hash identifier: YnqzzOoMFY5P/Pr61SHVYxIAArclinoBssYq9C8bnVI=
Subject key identifier: F7:C3:E5:27:6E:84:8B:E0:5C:FD:16:56:3C:BD:47:AD:FB:A2:D5:1E
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0194BCA9BD0740BF3E52665F82A1AA6358CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
Manifest number: 0A82
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: tubKmqRgI3/Z0F5KTskiJUAUYATt6t0yKLG++ZOyXzI=)
2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bd:07:40:bf:3e:52:66:5f:82:a1:aa:63:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=f7c3e5276e848be05cfd16563cbd47adfba2d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:a3:5d:d9:30:83:14:90:e2:bc:75:03:18:
fa:85:af:6b:c0:7a:0a:2d:a2:98:97:d7:38:cf:e8:
77:84:0c:16:5d:bf:c1:2c:97:ad:e2:cf:52:2d:50:
5e:f2:97:4a:da:9e:49:36:0c:43:ff:69:86:7e:a5:
3b:20:13:ab:58:7a:80:05:a9:fe:18:8f:30:e0:5f:
28:20:3d:92:40:0d:93:51:97:56:c2:5d:6f:2a:f4:
da:15:3e:4b:dc:42:22:9f:39:cb:93:f9:d4:45:ab:
7e:f0:74:d4:f0:bf:08:73:27:41:e6:7a:d3:e8:69:
f2:e5:0a:f3:ea:4a:c5:98:67:7b:a0:85:09:cc:6b:
ba:7a:3d:2b:c8:a7:80:c1:9e:78:a4:2a:cf:5d:e7:
b2:e0:53:1c:bb:ef:e4:03:0c:93:09:35:7b:c2:45:
57:f0:4b:a8:d7:67:96:56:8e:aa:d3:20:da:10:59:
e0:70:c3:7d:4c:e8:4b:1d:81:a1:ba:e3:a6:ef:8d:
23:12:75:db:47:ba:8c:c6:eb:19:d3:2e:a9:b9:7b:
88:e7:53:97:ec:2c:0b:1d:b0:1f:38:8b:7b:80:13:
85:f6:19:e3:63:de:2c:f0:37:14:bf:6c:9c:e5:6e:
09:f2:e9:87:a9:12:dc:78:53:9b:e7:d1:92:28:3e:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:E5:27:6E:84:8B:E0:5C:FD:16:56:3C:BD:47:AD:FB:A2:D5:1E
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b8:c4:93:41:72:b2:f2:0b:a1:6d:0f:9b:99:86:cf:ae:ad:
fd:ca:02:8f:9e:95:e5:13:f9:37:f9:5d:4d:ce:43:b5:1e:7b:
0e:8b:cc:3d:ed:68:29:4e:ed:0c:a4:0b:00:e3:ea:58:ae:a4:
3f:3e:5d:3e:7e:95:84:99:57:f1:d5:94:09:ad:e0:9e:11:11:
d2:c2:05:d9:24:6a:80:91:66:d4:c1:30:86:5f:e2:ab:38:be:
04:68:35:93:19:c6:fb:d3:39:91:1b:e6:13:bd:09:21:ff:cf:
5a:23:cd:bb:e7:af:85:8e:ee:81:4b:b2:15:5c:6f:46:6e:e5:
b8:fb:8e:27:97:2f:1f:e1:4c:2d:4c:fc:66:62:36:37:e3:ca:
00:8a:63:46:5d:00:17:b8:7d:51:07:7e:dd:0d:a1:90:0f:01:
c6:76:a2:e4:a0:b5:66:55:51:ce:2a:e8:aa:04:25:26:d1:c6:
4b:e4:ca:ce:06:33:50:2b:07:ca:1d:79:55:4a:cd:bc:ad:39:
44:66:86:96:e1:5c:a5:0e:a5:66:6c:12:3e:ad:f9:ae:67:56:
bf:ed:73:57:d8:14:1e:cd:11:bb:1e:37:52:40:49:c2:2b:f2:
68:5b:8e:4d:b5:20:46:b8:0c:b8:6b:4c:b7:91:bf:16:33:fd:
80:50:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:03 2025 by rpki-client