Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
File: txC5vh4ts3SC4fjyWzX9pTgNMsY.mft (raw, json)
Hash identifier: HtwxmH7o5bapkLa+MHQfqAhMOsoiC21tDCl9UNOX6tY=
Subject key identifier: D7:3D:44:4B:61:96:D5:94:0C:1C:12:E0:B2:66:FD:2E:73:49:FF:E8
Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Certificate serial: 0194BD85B04F8623A1F54BE28598FBFF1EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
Manifest number: 10F5
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: txC5vh4ts3SC4fjyWzX9pTgNMsY.crl (hash: 8WdrQx+/IYSbKEzsbJ+k6XEe/cTjcBe8v/FXj0Zq3J0=)
2: y7dJRRp79aTyhXJq7SLE893fmyk.roa (hash: QjKSW2+AFDFFoGHFdC8m0Zba5598T5O0nbfB4lqoZ3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:4f:86:23:a1:f5:4b:e2:85:98:fb:ff:1e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=d73d444b6196d5940c1c12e0b266fd2e7349ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:e7:8d:e6:bc:9f:7b:03:a5:9a:cd:be:f8:
d9:cc:14:42:c9:45:85:37:1a:f9:16:a1:3a:87:35:
4a:3f:5d:7c:21:09:7f:b0:fe:7e:c1:49:54:8b:3a:
74:fa:87:f6:24:64:e2:14:c4:88:48:a5:5b:8a:3c:
38:3d:0d:32:5c:36:fc:39:f3:79:46:17:ca:e4:d7:
cf:6e:0c:2a:11:53:e4:b0:ca:0b:11:6c:08:d7:13:
e1:c3:a6:52:9b:ab:d4:f5:1b:c1:27:1c:8a:53:6e:
a4:d7:6c:86:ea:20:43:b5:d2:06:e3:ee:9b:31:cf:
04:15:ae:5f:0e:86:a4:50:0a:32:31:68:bd:1e:df:
bc:a3:52:1c:93:e8:1b:93:a7:17:f5:62:12:27:11:
c2:1b:9e:ab:a5:34:54:48:3c:94:da:51:de:19:8f:
60:61:b5:f9:45:3b:11:96:06:39:3b:23:24:ea:9e:
a1:36:7b:d8:67:38:fe:ee:9a:cd:2f:e3:25:bf:b7:
88:c0:98:da:16:6b:0b:2c:72:58:b1:f6:c2:0d:96:
36:95:42:c5:a9:33:20:44:ea:d2:a3:e9:28:e3:4d:
fc:85:08:04:ae:65:a1:42:08:e1:4d:ac:29:16:c2:
12:f3:0d:9c:6a:00:00:df:ba:68:e1:5b:df:35:e2:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:44:4B:61:96:D5:94:0C:1C:12:E0:B2:66:FD:2E:73:49:FF:E8
X509v3 Authority Key Identifier:
keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:36:61:0d:7c:e8:0c:cb:99:64:3a:2e:ce:e6:8c:20:92:78:
a0:7c:9d:02:60:d8:b6:33:9b:1d:2d:75:22:1b:cb:07:43:d3:
a3:ea:1c:8b:54:c1:12:63:ec:11:0a:f1:ae:1f:fc:c2:0d:46:
3f:95:b5:d4:ea:20:35:e6:2f:68:ba:53:ee:1d:4f:53:bd:74:
66:af:b8:76:bd:96:d0:73:8b:5d:70:50:44:43:cf:19:4f:be:
4f:a9:70:ed:8b:20:ce:4d:c1:5d:8e:82:28:4d:11:c3:32:90:
51:04:6b:76:7e:bc:b1:77:b4:64:a1:14:80:da:0d:90:6f:8c:
9f:07:48:61:0c:8d:24:2b:fc:ae:68:96:ac:b3:a8:12:6a:19:
70:df:b4:26:e1:cd:75:d8:14:0f:81:87:c8:9e:97:08:9f:d9:
f7:a3:4f:1d:a8:74:64:c9:92:b7:da:13:24:84:bb:10:e2:15:
e8:12:06:03:d7:ec:77:67:e3:87:07:72:fd:ee:fa:f9:84:38:
a0:53:74:47:86:8f:bb:3e:30:a8:9b:6f:52:ef:f3:82:29:ca:
04:83:b6:dd:d8:d3:b3:3a:d6:0f:b8:4b:8a:85:b2:e2:ad:27:
0c:d3:03:ac:14:50:64:b3:be:9f:c1:51:bc:c9:f5:0f:1f:fe:
d1:27:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client