Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: IYUl/o2fFUkrCwWip34b6b64OgFRMLCVyeaeHOiln28=
Subject key identifier: A8:D1:82:61:F7:E9:63:09:0D:D5:2D:33:AD:67:55:C2:EC:B6:B1:CC
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 0194BD8524A7C4B381C76ADF2F713E71A448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: A8qwa6hNqU6XHCzC8wJwLoCMn2UAOqL4cOabx3dg2aM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:a7:c4:b3:81:c7:6a:df:2f:71:3e:71:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=a8d18261f7e963090dd52d33ad6755c2ecb6b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:69:89:a7:26:b9:2d:fa:ac:a2:87:e0:56:
a1:39:ba:a3:9d:af:10:bb:be:8c:ea:cb:96:56:40:
88:24:5e:5c:f0:40:9c:70:87:fd:c8:1c:cd:ab:6f:
c0:58:72:32:f0:34:a0:04:47:42:1c:cd:d7:20:ce:
25:14:64:0d:cd:bf:99:c2:99:c9:16:89:be:93:04:
66:90:63:0f:9c:dd:fb:cd:29:08:a9:12:dd:cb:f2:
a4:33:8e:90:88:98:37:f6:c0:71:0b:c1:f9:40:97:
ed:6b:8c:b6:fc:4a:fe:c0:d9:d0:3b:60:d0:68:c0:
69:72:0c:60:64:e0:3a:ca:b2:d1:47:b3:b7:7c:97:
b0:e1:e9:14:94:51:58:74:80:b9:66:96:85:ad:23:
f5:ad:0c:d5:d4:68:52:4d:90:0b:57:2f:4d:b1:2b:
1a:b4:15:0e:6f:a6:a1:b6:08:d8:a3:6c:d0:ab:40:
38:ff:4d:3c:f9:4b:e8:ba:e2:16:53:0d:8e:af:57:
ed:4e:6a:07:0b:8d:dd:79:12:34:4d:7b:68:bd:4e:
ac:bd:1c:f5:ae:6c:65:b2:8b:3f:11:de:e3:ed:72:
b5:57:32:f2:78:67:98:e5:ef:33:c9:d3:06:c3:4b:
e5:4b:0f:51:98:6d:9a:3b:62:cd:b2:0d:d0:17:1e:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:82:61:F7:E9:63:09:0D:D5:2D:33:AD:67:55:C2:EC:B6:B1:CC
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:14:86:27:69:0b:ca:59:db:4b:c8:fc:99:de:d8:e9:eb:4c:
40:60:4e:96:fa:a3:1e:8d:a3:62:16:87:61:09:33:2d:ae:8b:
99:28:31:30:eb:aa:66:82:37:63:d8:96:11:70:f5:49:d1:e6:
ce:6e:4f:aa:9c:a8:e4:d6:24:65:26:ae:4c:56:08:6c:7e:0b:
71:ec:ae:b6:08:8d:f5:6d:c6:96:79:da:0d:01:ae:a1:45:d9:
62:69:1a:bc:b9:57:70:4f:75:b2:67:e4:ac:12:2f:77:da:72:
18:06:2a:76:54:fa:f5:42:8f:34:88:cb:6c:2c:27:91:7c:bb:
3d:ea:12:c3:42:ee:8a:4d:19:e9:8f:bb:cd:99:a8:06:e4:59:
8a:b4:4f:0a:b4:d5:f0:74:6b:05:fa:6a:44:c1:3c:55:5a:22:
23:b4:39:c5:3f:e8:98:43:1a:49:e9:cb:45:7b:9d:86:34:ab:
db:e8:6d:09:81:1c:41:d3:70:62:43:0d:23:d6:31:69:8a:71:
b1:69:12:a2:6b:42:07:25:8a:8d:a7:1b:68:7f:60:50:7e:62:
19:42:6b:c5:3b:af:d6:c5:dc:43:9a:bb:d2:11:ad:e8:0e:f4:
69:e2:29:38:96:00:55:97:c0:16:2e:40:37:10:b3:f9:c1:a8:
1a:a3:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:50 2025 by rpki-client