Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
File: vfG2nIL3gagXzhAhFxeM23-yY68.mft (raw, json)
Hash identifier: BTkn+xHPAZ+9c4XCJppIFABx/hTE+ty04PF6MtFuBTQ=
Subject key identifier: 17:75:B8:6A:2A:BE:05:38:D4:A1:CD:02:F0:9A:B9:E3:AC:CF:7A:0A
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Certificate issuer: /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial: 0194BBCE5EC4C8E41CDE7B7BB5D6393434DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: vfG2nIL3gagXzhAhFxeM23-yY68.crl (hash: aQsWEmHy3kMwPez/ldWukHxpDSiuVBiX3IK1OgKgm9M=)
2: yI6d1S05VUz0QY-pw0Sb7c0mK3g.roa (hash: nlExao6EjzUkd5CMjjgjOU/lBqyQZP29vMZMmMZee4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5e:c4:c8:e4:1c:de:7b:7b:b5:d6:39:34:34:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=1775b86a2abe0538d4a1cd02f09ab9e3accf7a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:9c:81:cd:d9:50:4a:79:8f:73:10:ad:14:
57:cb:90:4c:87:ee:bd:35:2e:7b:42:2c:1b:1f:3b:
17:dd:4c:47:ef:40:6a:73:c9:4f:e2:97:82:63:08:
50:0e:26:5b:09:9c:16:ff:0f:0a:55:0b:bc:ed:22:
b2:bf:a9:83:7b:14:eb:a2:c1:a2:4b:e7:35:04:a7:
fb:88:2c:d1:83:d3:c2:be:4b:8b:26:88:ac:cc:23:
42:b3:c9:3b:ea:d1:8c:08:6c:05:d3:25:ff:3b:c7:
17:36:c6:68:d3:90:51:7d:97:71:b9:71:ab:50:00:
0f:15:cf:c0:4e:d4:44:26:9a:80:f0:84:c4:2a:31:
8a:53:24:a4:11:8b:dc:af:9b:b9:b1:b6:0b:b9:b3:
7f:bf:d6:08:69:bd:24:5a:ec:e4:59:07:b9:8b:fe:
11:7b:79:a6:37:4c:e1:d8:35:f4:17:f1:ca:e1:fd:
d5:d8:3c:69:8d:d6:d8:ab:03:e1:7a:56:2c:98:d8:
e0:36:01:7c:61:96:30:c7:a2:03:3c:23:b7:23:5e:
72:87:80:4d:2d:dc:f9:5c:3c:ef:e9:06:f5:f7:69:
f1:35:3f:25:7d:9c:92:7a:82:d8:60:93:8e:2c:8e:
e2:c6:60:31:ec:45:94:54:d0:70:a2:27:61:c0:49:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:B8:6A:2A:BE:05:38:D4:A1:CD:02:F0:9A:B9:E3:AC:CF:7A:0A
X509v3 Authority Key Identifier:
keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:20:91:ef:d3:ef:0f:7b:fd:46:8d:0d:90:46:d8:e1:08:cb:
f9:36:be:97:f4:6d:2c:f7:0b:44:8e:77:e0:00:19:06:47:fd:
30:2b:8c:52:ca:78:cd:d2:d1:31:40:2a:b9:be:bc:20:e4:03:
21:b6:dc:a7:d9:58:39:6b:03:e2:1e:e6:fb:04:c2:3f:49:59:
74:2c:73:ea:0c:e1:f6:04:c6:c9:13:02:c0:b4:29:47:42:28:
2b:86:a5:f6:f2:a5:2d:ed:a7:4e:7f:4a:40:d5:4b:0f:45:51:
16:1b:b2:3d:07:b4:e2:cc:e4:55:43:64:dd:a3:1b:81:93:cd:
c3:c0:27:42:43:47:51:92:1e:cb:9e:7e:99:90:6c:0e:d0:8c:
85:fc:9f:1c:20:b3:6a:2c:26:a7:0c:1a:50:4e:60:ff:88:a3:
a9:6b:25:86:34:34:ad:4c:e8:48:5e:05:46:17:9a:ce:97:66:
e8:36:88:eb:fe:07:c5:6d:d2:be:e0:4e:af:90:c1:b8:a0:f2:
19:72:4a:0f:44:14:f4:1d:fe:0c:fc:43:ef:4a:81:fc:17:69:
af:ec:65:53:f0:f7:44:cd:8c:31:aa:55:d2:91:d2:84:2b:35:
0f:8d:02:60:8b:9f:57:18:98:5f:d5:44:2d:c8:02:ef:aa:eb:
ad:75:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:05 2025 by rpki-client