Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: F51xi7yhplqiDrnC7MIVKJi9//4XWOiD1TpfKImnJwI=
Subject key identifier: E9:20:F4:68:07:74:74:36:4C:85:52:55:A4:15:EB:59:EA:B3:D2:88
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 0194BBCF039129C21360B27BA1E497295814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: ma51JeNI6dVipFRp8Ypo/Ntt9t4iAl1pL76VP17Cglo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:91:29:c2:13:60:b2:7b:a1:e4:97:29:58:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=e920f468077474364c855255a415eb59eab3d288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:6a:10:72:71:2a:3b:79:ed:c7:88:d8:f0:
32:3b:a2:d4:a9:a6:4d:2a:e4:25:7e:74:2f:44:db:
95:8e:53:af:86:6f:6f:b4:76:b9:98:27:c6:6c:bd:
0f:f6:6c:35:cf:be:c0:5f:7e:f5:f3:ff:9f:80:7c:
a0:85:48:2f:52:02:62:c9:e4:9b:9d:54:79:2a:b1:
3f:62:b6:7e:e3:88:5c:29:f9:f2:25:3b:38:3c:95:
d0:0c:0a:5a:54:d2:19:96:ba:ac:79:41:ca:c7:21:
a3:85:d5:84:70:8d:e3:76:b9:b5:3f:b9:ae:8a:d4:
b5:c8:7c:da:30:ac:32:af:2f:95:1b:06:1f:36:05:
8c:c5:c1:3f:fe:f0:4f:e9:6f:4f:aa:c3:69:d0:62:
17:c9:ae:57:00:93:ac:29:df:83:0b:a5:1b:8c:bf:
46:c2:e9:b1:4d:cc:b3:d2:cd:ac:e3:70:5f:8b:a1:
86:24:01:ca:e2:33:4b:aa:5c:99:1b:da:64:dd:dd:
4a:ea:44:4e:01:83:50:2c:a9:30:37:83:ec:23:8c:
98:03:36:f3:a9:76:89:e2:8a:98:a5:ab:29:45:45:
05:2b:27:5c:9f:1d:50:7f:b2:c1:60:1c:e4:db:9d:
35:74:2c:c7:c2:8b:c1:f0:c5:da:e4:ff:0c:f4:6d:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:F4:68:07:74:74:36:4C:85:52:55:A4:15:EB:59:EA:B3:D2:88
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:58:48:6e:9d:aa:d2:c8:ee:2e:f0:1a:f5:1b:25:c8:7f:94:
67:dd:77:44:77:2b:ec:41:02:0e:c6:8d:98:2d:aa:19:4a:e5:
3d:b5:fc:7d:0a:8c:e6:db:77:0c:88:cf:d2:06:a7:9c:d5:a6:
26:a5:99:93:f3:01:1c:f2:f8:15:cc:0a:d0:a8:de:38:87:41:
a4:e9:62:66:99:84:86:e8:de:cc:42:88:2c:0e:88:92:5e:8d:
21:66:25:27:60:d5:60:6a:59:b3:80:e7:41:16:db:cd:78:25:
74:2f:4e:3f:ca:b4:dc:76:95:62:1c:50:cb:1a:39:ed:be:bb:
88:9e:d1:5c:18:e8:b4:d2:ff:c8:a2:61:2d:75:b4:98:63:49:
7d:a1:b9:12:c6:73:1e:e5:52:6e:b1:c7:62:90:c0:bc:b3:b5:
bc:21:cf:4e:0f:ee:11:84:b6:a1:e3:04:d5:d7:6d:f4:6d:87:
10:c9:ce:9a:de:99:45:47:d8:52:37:11:e9:4f:46:e0:b4:6b:
f8:6c:b6:06:b8:c7:56:9c:0f:c1:c4:62:bd:7c:77:75:04:b5:
87:47:3a:6f:9b:8d:cc:9f:1e:08:d7:a0:61:4c:b1:e3:7a:36:
56:43:47:c6:79:8d:ff:ce:fe:3d:69:b3:03:0d:27:c6:6e:d8:
a2:4c:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:08 2025 by rpki-client