Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json)
Hash identifier: wUSMhGvFIV7hGEVcSIcpIUR6+GUvbYaAxUleKi6hSRA=
Subject key identifier: 70:A5:C8:56:63:4C:C3:8B:0E:69:6B:40:99:8D:C1:A8:42:DF:B4:3E
Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Certificate serial: 0195DFD98562DC03C67E64A4FFF79A188083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
Manifest number: 02B6
Signing time: Sat 29 Mar 2025 03:02:09 +0000
Manifest this update: Sat 29 Mar 2025 03:02:09 +0000
Manifest next update: Sun 30 Mar 2025 03:02:09 +0000
Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=)
2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: pAuwm0qjeGfrDglX8suz4w/lhsAz1jZAso9/omr4+JE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:85:62:dc:03:c6:7e:64:a4:ff:f7:9a:18:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09
Validity
Not Before: Mar 29 03:02:09 2025 GMT
Not After : Mar 30 03:02:09 2025 GMT
Subject: CN=70a5c856634cc38b0e696b40998dc1a842dfb43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:e3:ba:bf:c3:4c:11:d0:b3:b3:c1:9f:f8:
b9:a9:bb:df:74:71:ab:9a:ea:77:fe:0d:ce:f2:da:
1d:98:e6:38:59:67:4e:74:97:4f:ee:e3:84:fc:ec:
59:a3:8d:6e:8d:fc:c9:57:77:ad:de:67:69:e1:c7:
09:4f:cb:b7:dc:a4:13:04:fe:6d:49:c3:6e:58:2a:
d8:f9:09:34:27:ef:e8:92:af:63:16:16:06:62:70:
f5:cc:2e:61:63:bf:ce:63:5b:88:45:26:22:75:61:
69:77:b8:08:fa:5c:97:b5:40:0f:7c:60:03:12:a5:
9d:43:1d:9b:a7:29:5f:5f:0b:d3:ca:1a:b4:55:a3:
83:58:0c:4e:78:3a:c8:d9:6b:49:37:79:0a:c1:92:
ce:99:42:0d:96:d0:e9:5f:e4:49:5d:d0:57:e4:4b:
97:d9:82:8d:61:9d:ce:16:aa:be:dd:de:2a:08:7b:
a7:41:c4:65:65:23:0c:42:c9:d7:6e:6c:21:06:40:
e4:55:f0:13:50:19:97:c3:09:64:45:b0:c4:a3:eb:
34:6e:d7:74:6c:e1:3d:35:53:d4:c1:82:54:03:1d:
29:94:c8:a6:fb:59:3b:45:6c:62:eb:c0:21:73:dc:
e8:49:3e:c7:47:31:46:57:80:2e:dc:74:96:a7:e7:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A5:C8:56:63:4C:C3:8B:0E:69:6B:40:99:8D:C1:A8:42:DF:B4:3E
X509v3 Authority Key Identifier:
keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:96:75:ec:78:b8:e3:a3:2f:27:d6:29:6c:e5:8e:27:44:36:
d8:a2:cf:45:8f:a3:39:ae:81:0a:52:42:fa:f5:ef:4e:5d:d8:
d3:b5:3d:6c:67:d9:b6:16:91:dd:87:2c:d5:0f:22:52:8f:b4:
3c:0e:08:ed:0b:bb:86:42:39:b2:d1:73:ac:5c:d7:4c:05:ec:
6b:30:7d:3c:c6:d7:d6:5c:ac:d0:2f:60:aa:bd:dd:14:70:42:
fc:0e:61:c5:10:3d:dc:fb:4e:86:b8:fe:6b:3d:56:67:89:eb:
e9:86:a1:6c:68:e1:2d:73:ee:c8:4e:7b:0d:bb:5f:f6:42:cb:
15:fb:33:3e:00:f9:32:56:05:8b:84:62:7a:55:da:e9:0c:2a:
d3:be:26:da:eb:87:d4:5c:76:8e:44:c4:ef:89:55:c1:e4:3e:
18:ee:bc:5c:e7:e3:7b:1d:d6:6d:86:7d:27:4c:4b:cb:78:b9:
44:99:62:32:25:f4:fd:c5:21:f2:5a:ac:88:75:a5:73:81:f1:
6c:b4:c8:cf:ea:3c:a4:00:e6:ee:b9:ed:63:18:42:92:7f:23:
ed:a2:6e:b4:09:30:4f:cf:4a:ce:a0:9c:c2:da:57:36:2d:37:
68:ba:1a:c1:11:c8:a2:3b:97:ef:c8:a4:f2:73:92:46:31:d0:
ad:d6:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:53:35 2025 by rpki-client