Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: UmyhgX4NbiQJ3BD0e4AfRIbkoXNipl9Ij7OJFkxUTpU=
Subject key identifier: 83:46:D2:91:03:ED:39:6A:EE:7B:58:8A:BE:EB:FA:3D:A0:4B:D6:34
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 0194BC04E0A9FE5D30EC0678F465B34F28BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0976
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: mWduXonRde1Es1eHSvYQ4Yp3baD4scwInhjgSq7JVp8=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:a9:fe:5d:30:ec:06:78:f4:65:b3:4f:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=8346d29103ed396aee7b588abeebfa3da04bd634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:5e:31:7e:df:5f:5e:54:74:f2:01:eb:c5:
48:16:09:20:8b:2b:7c:eb:e9:4a:67:d7:da:c6:a0:
39:5e:d6:67:5a:b5:04:ac:de:b1:3d:d3:eb:3d:0d:
d9:2c:e2:92:91:6b:45:15:04:7e:d1:92:b2:e3:b4:
a4:9e:9f:f7:87:a6:b9:98:5f:20:cf:d8:4e:50:ab:
1b:e5:5f:7d:d3:12:d7:73:c3:5c:59:48:2d:a0:4e:
2b:10:d6:e0:fd:a1:66:58:d0:69:be:ef:62:46:c6:
55:dc:da:61:f8:8d:df:b1:a3:2e:21:b3:ed:e8:51:
4f:37:11:0e:33:87:81:56:77:bc:c9:10:64:e1:96:
5d:75:2d:34:2f:2d:b8:64:94:f9:bb:fd:a6:56:26:
9a:d0:d3:4c:4e:47:f9:35:c5:4f:f3:02:b9:fb:3c:
cf:c8:68:41:02:99:4c:4e:85:a7:c5:cf:b6:94:9a:
b8:26:dd:9d:ab:ea:df:9c:fb:bd:5d:ef:a1:22:2c:
99:8f:e5:63:d0:96:b1:83:c9:02:cf:af:36:b0:97:
81:86:a7:5e:ef:9f:db:12:84:f3:7f:7c:2f:4a:cf:
4a:82:61:67:47:cb:40:fe:7f:64:61:7c:9e:6e:b8:
08:c9:e8:a2:7c:ed:37:43:02:40:e2:d9:ae:f5:55:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:46:D2:91:03:ED:39:6A:EE:7B:58:8A:BE:EB:FA:3D:A0:4B:D6:34
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:b0:9f:78:33:ea:eb:8e:5c:93:88:2e:9a:ce:ab:cf:be:
0d:cb:ad:b3:49:3f:20:2a:76:5d:06:88:4f:1d:4c:d0:1d:e9:
03:31:c3:31:f0:eb:a9:c2:70:bf:60:6f:eb:90:15:ac:8c:a0:
2d:30:70:a7:92:20:eb:e4:94:68:60:98:a5:fa:b0:85:e5:a3:
8a:e6:04:52:f7:5c:e4:da:32:ee:55:75:7a:da:c4:29:cf:b1:
5d:bb:e2:f7:dd:aa:31:b4:c7:de:ff:51:ee:a9:78:81:7c:fc:
10:bf:d0:38:88:2b:cb:75:29:0b:c8:49:5e:58:c5:46:b6:e2:
d0:b9:c8:46:d6:47:b8:e2:2a:4b:16:b9:27:4c:2f:ff:db:c4:
15:d8:96:04:f0:6e:dc:37:e3:bb:9b:9c:35:df:00:02:9a:23:
86:68:5b:3f:6e:c8:e6:a1:61:4d:1a:49:95:56:7b:ae:4a:7d:
a3:ff:d5:03:12:c0:8f:49:3d:f1:30:0e:fd:c4:97:35:c6:4f:
43:e2:56:29:78:9e:51:3b:56:c9:79:69:5d:44:70:75:9c:b3:
80:35:fa:b5:4b:e7:94:b2:08:e1:ad:70:30:2c:06:7b:fa:ca:
3e:fd:9f:04:ba:96:93:65:7a:e5:9d:a3:da:1f:56:f2:c4:cc:
27:9d:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:23 2025 by rpki-client