Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: i5C38NL6XLiXJRp2ebieYBpg7gKmbU6IqX8dfaZyJzQ=
Subject key identifier: 5B:CC:79:CE:74:FB:04:1B:66:75:40:71:EF:CD:8C:C2:7F:7C:D5:F9
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0194BCE0757FBBE04000F9809859440AD067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: w8tzlS3Te4E6evmYyHWkE13d8CBJ2OgZHpJCWG3kYHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:7f:bb:e0:40:00:f9:80:98:59:44:0a:d0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=5bcc79ce74fb041b66754071efcd8cc27f7cd5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:87:d0:50:2b:00:dc:e8:e1:90:ec:d8:8c:
a9:ed:2c:c4:ae:99:33:f9:3c:db:89:8a:d2:6a:47:
7f:c8:2a:ff:3b:7e:98:6e:bd:2e:c7:b0:d4:f4:46:
6a:f8:32:17:f9:90:1d:23:cc:d9:43:12:c3:4f:83:
28:36:30:4b:de:69:80:15:04:3d:1e:33:c1:eb:69:
3a:31:14:db:86:bf:9d:fd:8c:aa:39:7b:5e:b7:62:
30:ee:6a:40:36:b0:12:07:b5:1b:a9:e1:bc:eb:c0:
06:c3:b1:c8:80:42:68:4f:7c:a5:50:f2:56:69:10:
bb:93:1c:4b:79:4b:96:af:76:d2:9e:24:dd:5a:3e:
ac:6e:27:ac:2d:46:8f:66:04:70:69:82:4c:70:6a:
1c:41:71:e4:df:68:01:b8:ac:8d:da:2f:84:f6:7a:
19:78:a0:b4:91:e0:e9:b8:17:6e:ed:41:5b:9f:78:
68:ec:8d:9e:4a:73:36:bb:7c:2b:8d:55:26:60:74:
ba:db:c7:99:28:98:89:61:61:35:7a:ee:8a:33:34:
cf:a7:9f:87:cb:28:00:57:5f:78:fd:1f:ce:a4:2f:
2d:52:e8:4a:8a:e5:d0:03:19:78:51:bc:f5:ba:27:
cd:bb:54:7d:a3:17:0b:68:a2:bf:db:27:71:8f:94:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CC:79:CE:74:FB:04:1B:66:75:40:71:EF:CD:8C:C2:7F:7C:D5:F9
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b7:b6:96:6c:4e:a4:c9:fc:e0:1e:11:9b:2a:ac:97:7a:5e:
b6:0a:da:fe:af:c3:7a:1f:65:92:ea:12:a4:9b:40:cc:f0:a7:
03:7b:83:90:db:ca:43:9a:4f:0c:4d:d1:24:ed:24:af:6c:bc:
b2:c7:c7:01:19:9f:a7:b3:49:07:02:5d:6c:ec:b3:0d:4f:06:
c7:f3:b6:22:ef:f3:c6:e9:c0:66:ef:87:0e:07:50:ec:f6:9a:
47:ca:76:f1:76:b5:f6:4c:ed:bb:c2:2e:a9:4b:09:e9:b9:8b:
66:1b:b4:68:3f:7c:46:e5:49:d9:e5:82:4c:21:df:a0:bf:24:
3c:b8:66:2b:aa:57:3a:b9:bb:61:13:4c:24:55:fd:26:c9:c7:
bd:6d:f2:23:e1:1e:ea:31:ad:07:9c:45:a7:0b:98:1b:12:fd:
20:ed:34:66:40:b9:ad:76:dd:06:77:f9:29:91:44:0f:27:5c:
de:81:68:a9:5d:b4:a7:a4:9c:a6:47:2d:f6:a3:51:25:6b:fd:
f1:1a:89:5c:77:75:74:d2:43:c5:1f:fb:3f:1c:82:bc:1f:73:
e5:ff:67:8b:17:eb:1d:a6:87:17:07:e1:24:39:58:e7:03:e1:
bb:d4:00:9a:62:1f:39:02:7b:e5:a8:da:67:1e:22:9f:d7:be:
b8:28:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:49 2025 by rpki-client