Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: 7AuYVuGVlWxd9gxRMxpiuV9UWJpeeR1mrcI6YeNLee8=
Subject key identifier: 31:E8:6B:47:3D:4C:24:EE:1B:D1:03:C8:99:CE:C7:92:C3:A9:3C:7D
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 0194BC04C7A53A4A983984A15E703CA39C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: pGvZaulLwAdXVGhdb3oK37gjHXnKIXjws6Y2TvuuNRQ=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:a5:3a:4a:98:39:84:a1:5e:70:3c:a3:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=31e86b473d4c24ee1bd103c899cec792c3a93c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:cf:2f:ab:d1:42:ea:3a:49:09:ac:b2:52:
8f:16:a9:a6:2e:47:41:6a:f6:3d:58:dd:2b:59:53:
6e:36:2d:3e:f5:61:1e:d5:3e:6b:c2:9d:df:6b:2a:
76:9e:25:a3:22:fb:f8:65:43:8b:b5:29:fa:c5:b2:
7b:14:aa:e2:fe:38:85:ab:e6:d7:a3:e0:99:5b:90:
59:66:f8:ae:10:a3:4c:82:dd:de:20:73:0a:b6:b0:
b1:f1:b8:15:74:ae:a9:7f:99:cc:94:0f:31:51:65:
b4:0c:f4:24:2d:54:a3:0a:b6:31:04:72:09:de:5f:
aa:ee:49:36:34:89:a0:19:15:58:27:ec:35:b1:6d:
0b:9b:5d:7c:04:f9:92:4d:3d:71:ba:cf:01:df:73:
e8:33:e6:12:79:42:82:4c:6f:b8:4d:ec:5b:e8:25:
3d:89:9f:9d:9f:05:27:38:38:a7:b8:94:87:a5:db:
8b:8b:d8:00:00:23:34:e0:27:aa:59:b6:f0:e8:ab:
5c:32:83:4f:38:37:03:56:f8:ea:e6:10:23:d3:ab:
17:a3:56:70:01:2f:73:aa:e6:d4:50:d7:6d:ae:b3:
49:e0:24:24:71:f3:72:1f:86:66:04:74:e0:24:68:
78:a6:43:3f:c9:cb:85:e2:89:42:8c:db:10:ec:be:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E8:6B:47:3D:4C:24:EE:1B:D1:03:C8:99:CE:C7:92:C3:A9:3C:7D
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:df:c1:70:db:c5:55:11:56:66:22:55:01:26:e8:cc:5a:5e:
29:6c:25:10:a9:f7:0d:b1:e0:91:4f:b4:ea:d4:f9:6d:45:24:
a4:44:e2:72:9a:26:64:bd:51:f0:24:42:bf:83:e4:28:30:bc:
17:eb:e3:5c:07:41:3f:2d:13:a0:47:ea:23:ab:b0:eb:7f:12:
20:80:b3:8d:33:38:7a:64:f4:e6:17:48:04:a5:68:97:5d:4d:
01:fe:ab:d5:d1:1e:c9:c3:99:c3:5f:d6:1a:86:93:57:43:40:
1a:1c:7e:4a:33:71:e5:88:44:17:f8:f5:89:a2:0e:d3:8a:42:
f0:f4:dc:7c:ca:ec:68:3d:e5:b1:89:fa:fc:7a:6d:39:37:56:
82:55:b7:13:3f:5b:93:70:93:8f:8f:9a:a8:0b:2b:01:47:af:
86:9e:ed:1b:a9:17:91:db:02:66:ed:40:6d:ad:d1:df:04:9e:
f2:0d:47:71:2d:40:99:8c:fe:a9:a5:ee:0b:57:b3:23:c9:7b:
6a:c6:23:1a:a7:91:60:cd:bb:bb:bc:87:96:94:95:c8:53:b5:
c9:42:8c:fe:7d:2e:97:04:8e:24:63:d1:77:d9:c7:e6:be:60:
f6:fa:c0:93:d3:b0:d9:ed:80:39:33:74:be:88:3e:28:d9:48:
90:c0:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client