Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json)
Hash identifier: bEkSOt5yN6lJYqTZ+JUarHDIrY8P/FsMySm90TI1udI=
Subject key identifier: 58:D5:28:8A:81:CE:55:D5:27:C8:DC:39:99:F2:38:A4:AD:9D:34:90
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 0194BCE0C864D9D665FB6EB52FB2997F8CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: O1afgd+XKOkXtCnneV4U5gR2OJEeQz3K/jNJFS1096A=)
2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c8:64:d9:d6:65:fb:6e:b5:2f:b2:99:7f:8c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=58d5288a81ce55d527c8dc3999f238a4ad9d3490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:74:2e:da:68:a3:08:30:c8:67:b6:5c:62:
5b:c3:66:ef:5e:cc:65:bf:b3:5e:e1:6f:1b:84:1e:
be:73:6d:b3:bf:eb:93:0b:df:ea:f3:33:f1:a9:a1:
cf:c6:89:6a:e3:82:c9:3f:d0:74:9e:3f:62:eb:ee:
4a:fc:37:9e:8d:4d:2b:72:86:9e:da:fd:0c:68:6a:
31:d3:da:05:a4:90:ce:ea:f7:b9:d4:38:da:ef:99:
23:29:33:bb:89:cd:0b:11:49:9d:25:8f:0f:01:aa:
dd:a3:2d:ab:2d:46:a5:7d:1b:0a:5c:e1:f7:a7:71:
fc:9d:ae:3b:22:b4:f1:0e:78:7e:b2:39:72:6b:70:
b7:b0:c5:36:35:7f:cd:1a:60:30:aa:0a:04:27:60:
68:68:8a:02:e9:79:b6:25:88:54:2e:b3:f7:f1:e0:
69:4d:c4:61:51:df:b7:fc:d9:62:8d:12:0f:3e:89:
8d:d9:51:67:2a:93:7c:59:ff:b3:89:91:af:db:20:
09:74:1b:b8:02:5a:19:71:6a:6a:dd:7c:f1:10:81:
9f:95:af:f7:6d:17:95:83:b3:4f:2e:ba:52:b9:f6:
87:c7:f7:7c:e4:49:9f:5c:a9:30:d4:73:18:69:54:
ab:8a:09:c3:23:be:1e:29:c3:cf:08:ce:3e:c6:ee:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D5:28:8A:81:CE:55:D5:27:C8:DC:39:99:F2:38:A4:AD:9D:34:90
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e1:f0:d1:9d:01:90:82:37:c1:f8:85:e4:cc:b6:59:f5:37:
30:b9:12:1d:f4:5a:eb:f6:6f:1a:7e:51:22:b4:6e:5d:cc:c5:
9d:2e:6f:16:63:73:f4:4a:11:83:56:29:db:2b:91:d6:e2:d3:
c4:43:da:de:b7:1d:4d:ab:e6:16:cc:6a:02:e4:9f:67:67:dc:
46:58:e6:5e:c8:22:00:5f:3e:25:3f:1b:b8:da:2b:ab:f5:6c:
53:c7:53:25:be:2a:d4:bc:7b:3b:86:8b:23:f8:05:ae:49:4c:
0b:d8:d3:57:f3:78:ae:22:82:6b:23:ad:bd:25:06:4d:da:7d:
76:96:1f:62:eb:63:d2:3e:75:f8:db:ed:fa:e0:a4:97:9d:0b:
9e:66:3b:6e:30:b6:58:41:5f:7f:c9:8e:54:af:21:f2:95:9a:
6c:68:fb:bd:e8:52:16:b5:16:14:22:10:dd:c3:b1:7d:fc:c4:
95:c8:cf:d5:35:3f:70:a4:3e:f7:15:83:13:7a:5d:e6:c8:af:
55:18:20:3b:62:ba:c0:6f:1f:5b:03:0d:38:30:a7:c0:9e:56:
2f:6f:23:4e:eb:7d:4b:10:bf:13:c6:09:54:82:64:3d:6f:05:
cb:b7:a7:4c:19:1b:90:01:7e:02:94:ba:2f:30:37:8b:ad:0a:
26:91:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:45 2025 by rpki-client