Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json)
Hash identifier: LyyU1rYvSvjt36t9qARmXIn0bBKqVtKsEga8D6tPRa8=
Subject key identifier: 49:10:9B:46:C1:65:0C:AD:61:9B:1E:3E:3B:23:5F:A3:62:17:4F:0A
Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Certificate serial: 01962DF44003BC2929CF8089C5C75363EB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 07:01:43 +0000
Manifest this update: Sun 13 Apr 2025 07:01:43 +0000
Manifest next update: Mon 14 Apr 2025 07:01:43 +0000
Files and hashes: 1: RachvBT8K5RrKxFdgA0E6V8Tpkk.roa (hash: vHi3hayejwDoniD0Pthlstu8q6vyCTap1RFSLihvYco=)
2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: aWRs482EUrJcvYn+JgpjutEmTh0ceGmBvLy71CeunAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:40:03:bc:29:29:cf:80:89:c5:c7:53:63:eb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef
Validity
Not Before: Apr 13 07:01:43 2025 GMT
Not After : Apr 14 07:01:43 2025 GMT
Subject: CN=49109b46c1650cad619b1e3e3b235fa362174f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:86:98:7e:97:23:f3:1f:b5:fc:48:8f:f0:
3d:12:a0:ab:a3:ff:dd:0c:df:9f:fa:b6:48:bb:f1:
62:c3:f9:1e:ce:88:ae:0a:0b:77:ae:0b:fb:ff:b7:
6c:69:89:a2:ad:4b:7e:78:66:84:3d:a2:18:6a:9a:
2d:13:66:7a:d7:59:76:ae:9f:c8:4b:a7:f4:ff:fb:
eb:2f:d0:1c:69:fd:51:72:3c:fb:a3:94:1f:cc:bf:
22:5a:93:e7:7d:e3:eb:cd:a4:0c:1e:90:ca:a3:19:
ba:e0:e8:ea:a2:0c:25:2a:2f:b0:15:b2:ef:04:69:
22:c7:36:99:d6:66:16:65:c2:0a:38:68:f4:9f:0d:
66:4a:63:89:82:a5:8b:32:6b:5f:2d:7c:27:50:aa:
de:b7:5a:19:f2:5e:a3:aa:09:d0:76:3f:e4:60:58:
7a:d4:fa:94:32:dc:c2:1b:b0:32:3b:c8:5b:d4:c9:
b3:2a:c1:b1:72:a4:68:5f:74:f7:c2:8f:e2:b8:f9:
de:6a:44:ba:e3:c1:b8:65:b2:c2:8e:1a:7c:9b:01:
d2:1a:29:7b:f0:06:3d:9a:39:7c:a2:17:53:d4:85:
5a:ef:57:53:f7:1b:bc:5e:f7:9a:d1:13:22:be:fb:
7f:71:7d:02:40:57:71:cd:4e:99:c8:56:74:97:16:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:9B:46:C1:65:0C:AD:61:9B:1E:3E:3B:23:5F:A3:62:17:4F:0A
X509v3 Authority Key Identifier:
keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:91:f9:83:e6:ee:31:19:74:9d:f3:64:25:a1:7e:1c:b7:ae:
0a:a5:40:35:91:66:97:28:d8:4b:cb:8e:ed:0a:8c:82:52:47:
d4:07:e7:af:b5:62:fd:60:42:50:e0:09:97:77:21:5d:8a:01:
e9:4b:d8:b5:7f:76:c4:95:31:a4:2a:15:f3:cf:13:8a:6c:01:
3f:59:41:41:be:3c:46:b8:c1:a1:5a:3e:90:aa:36:83:f6:13:
aa:69:25:0b:8e:f6:17:11:48:6b:ed:54:ad:ad:2c:64:dc:8b:
23:63:7e:b7:7c:f3:1a:7d:b8:a2:0c:00:42:9a:8b:f6:72:83:
e6:12:5e:7a:e7:a0:05:bf:99:3d:f3:8e:01:96:d3:4a:4e:50:
4c:49:0f:5d:ff:4f:01:11:cc:82:b7:d9:b0:bd:d8:29:5d:61:
e6:4f:d0:c2:9b:e4:c4:03:98:4c:61:55:9e:ff:4c:5c:6d:13:
9b:a3:3e:95:89:16:62:95:bf:07:82:ef:59:67:ce:7a:6c:4c:
ba:23:a5:84:d2:2b:fc:ff:2d:af:4f:e5:d5:36:df:ea:d4:07:
1f:a3:78:c2:83:70:08:93:71:a7:95:05:dc:a1:26:63:f7:24:
2d:48:b6:8a:23:30:bc:c2:52:0b:8f:3d:59:c5:cb:a8:7d:9c:
d0:50:35:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EADvCkpz4CJxcdTY+uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTJiMjVhMjMwNGY3YmE0NGMzOGQwMzk1ZGRmMmVkMDRm
NWM3ZWYwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg0OTEwOWI0NmMxNjUwY2FkNjE5YjFlM2UzYjIzNWZhMzYyMTc0ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj2GmH6XI/MftfxIj/A9EqCro//d
DN+f+rZIu/Fiw/kezoiuCgt3rgv7/7dsaYmirUt+eGaEPaIYapotE2Z611l2rp/I
S6f0//vrL9Acaf1Rcjz7o5QfzL8iWpPnfePrzaQMHpDKoxm64OjqogwlKi+wFbLv
BGkixzaZ1mYWZcIKOGj0nw1mSmOJgqWLMmtfLXwnUKret1oZ8l6jqgnQdj/kYFh6
1PqUMtzCG7AyO8hb1MmzKsGxcqRoX3T3wo/iuPneakS648G4ZbLCjhp8mwHSGil7
8AY9mjl8ohdT1IVa71dT9xu8Xvea0RMivvt/cX0CQFdxzU6ZyFZ0lxbi9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkQm0bBZQytYZsePjsjX6NiF08KMB8GA1UdIwQY
MBaAFLcSslojBPe6RMONA5Xd8u0E9cfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMt
MDgxY2I3Y2I4OGYzLzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMtMDgxY2I3Y2I4OGYz
LzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJH5g+bu
MRl0nfNkJaF+HLeuCqVANZFmlyjYS8uO7QqMglJH1Afnr7Vi/WBCUOAJl3chXYoB
6UvYtX92xJUxpCoV888TimwBP1lBQb48RrjBoVo+kKo2g/YTqmklC472FxFIa+1U
ra0sZNyLI2N+t3zzGn24ogwAQpqL9nKD5hJeeuegBb+ZPfOOAZbTSk5QTEkPXf9P
ARHMgrfZsL3YKV1h5k/QwpvkxAOYTGFVnv9MXG0Tm6M+lYkWYpW/B4LvWWfOemxM
uiOlhNIr/P8tr0/l1Tbf6tQHH6N4woNwCJNxp5UF3KEmY/ckLUi2iiMwvMJSC489
WcXLqH2c0FA1oQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net