Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: E4T/yUIjeKWGpVtLh1Fwdp++ihNUoOqCbcaRMjoP2dM=
Subject key identifier: 68:41:05:D7:38:C0:0B:15:05:F8:90:3E:0B:01:08:9B:B1:CD:4E:DD
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0194BD4EA7D5A06795751A55C41401E2A784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: piIwXoBkXbdyn1ytkCq5Z3WuSFk5uSY2K3ZmjiLRyOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:d5:a0:67:95:75:1a:55:c4:14:01:e2:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=684105d738c00b1505f8903e0b01089bb1cd4edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:1e:9c:cd:f1:ba:1d:92:5d:f6:2a:14:a8:
27:27:db:6d:29:bf:3a:48:36:e7:c3:b9:0b:1e:dc:
49:12:6e:dc:c2:89:a2:00:68:84:fb:7b:94:98:2f:
d5:7f:ea:6d:e7:1b:a5:c6:70:98:69:23:89:c4:8c:
d3:a5:44:24:f5:1d:fe:5b:b0:4c:43:b7:33:a3:dc:
d8:b0:00:2b:5c:58:16:39:67:68:6d:76:34:75:3b:
4c:15:43:54:f2:56:d6:21:95:5a:a2:1d:5f:71:82:
b2:01:9d:df:78:5d:d0:b2:a6:eb:fa:54:b6:27:3e:
7c:81:6f:6d:d5:83:22:a9:c0:cf:ed:b2:f7:4b:02:
b3:9b:74:b8:9a:b9:18:94:6d:fa:56:30:53:2f:f7:
b4:a4:df:87:09:0d:f4:03:74:78:e0:78:5a:6e:21:
35:09:42:29:2c:eb:14:74:83:41:59:fa:91:f3:cd:
30:f7:16:61:37:0b:56:e0:d4:dc:4a:91:6e:5e:68:
47:e1:91:00:33:c2:77:f9:69:c6:dd:42:7a:a2:13:
04:b4:ff:19:e3:92:1a:55:ee:b7:44:bc:a6:52:88:
1b:ee:df:18:0b:ef:8e:34:d8:ec:18:bd:ab:a9:fe:
f1:ea:a3:5f:d7:08:14:7a:be:d6:1c:39:5f:a9:fd:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:05:D7:38:C0:0B:15:05:F8:90:3E:0B:01:08:9B:B1:CD:4E:DD
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:88:92:54:ff:ee:bb:88:dd:d7:00:95:90:a1:89:6a:3d:7d:
e7:fc:e9:57:46:97:17:bb:19:fc:19:db:8d:4d:d4:0b:19:fe:
a3:ee:4f:3e:e1:57:9b:f3:e2:11:b2:15:c8:ce:4a:fb:48:88:
5c:fc:fb:56:a7:85:e3:f6:da:ce:17:a8:27:c2:8b:3b:fa:73:
d4:46:3a:af:4d:78:c8:2f:46:4e:49:33:c1:10:4d:9f:3d:f3:
52:73:dc:ef:f8:b0:59:98:e9:05:f2:b5:ee:ef:0b:1a:13:3a:
6b:c2:bb:00:e2:07:b0:91:71:14:2f:7f:0f:74:f7:c1:ee:3e:
18:09:aa:11:e3:97:80:6a:d0:16:4e:d0:b6:0d:42:13:34:16:
0d:13:86:d2:32:75:d0:e7:4b:6a:04:da:fa:6e:57:ed:26:ac:
6c:23:be:3e:2a:58:d0:65:70:23:63:48:fd:eb:83:37:10:fd:
da:a0:7c:93:df:fe:a2:e4:52:28:d3:91:00:42:4f:3d:15:cc:
49:b0:3c:4e:07:15:9d:31:aa:4a:1d:18:35:34:75:cc:45:ed:
5d:d7:50:2c:b3:74:c8:d3:ba:e3:d7:ea:f8:05:48:98:f0:3a:
2e:d9:49:36:04:5b:bb:73:33:46:0d:9d:90:cd:5f:3f:57:51:
9a:b6:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:09 2025 by rpki-client