Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File: v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier: 2iFA9GSBzXJoJi9ZQ+Ow7KNjtg3moHy0nst07B0rq5g=
Subject key identifier: 68:AD:27:72:42:40:A2:91:F0:A7:FE:DC:B9:2B:35:57:EF:18:1B:E9
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer: /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial: 0194BCAA147163CCC30E63A4922A0E89919E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: JoXkjArh1eQOEzJmDg5eyKhlAZU.roa (hash: IpnTumi25Jm35YnmbE0mTeFwDsMDbPll4BvRMHinz6I=)
2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: BgTTIc45wFGHTqgLfx6OXOvYEodvQi8Cd8/rN2fv09k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:71:63:cc:c3:0e:63:a4:92:2a:0e:89:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=68ad27724240a291f0a7fedcb92b3557ef181be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:89:09:db:9a:cb:1d:a9:46:47:a7:6e:4b:
c7:08:77:82:6c:20:48:f5:05:fe:08:38:a4:88:63:
c8:16:86:36:43:5e:e9:c0:43:20:9b:c5:75:27:15:
02:7a:6a:8c:a1:46:42:74:85:94:3e:03:b7:a2:fb:
67:dd:f3:42:da:02:7a:60:fe:9a:aa:2f:56:81:36:
c7:33:5b:ce:3b:c2:b0:89:62:36:47:c9:90:49:4b:
aa:2c:c0:96:15:c4:15:9c:c0:3d:9b:26:f1:3a:9e:
7a:e0:5b:5b:7a:c3:d8:5a:8d:c2:45:61:5e:66:44:
81:e0:9b:30:e2:8a:1e:fb:18:7f:3e:32:08:12:50:
b0:a8:42:95:fc:a2:bb:55:04:e0:d4:65:3f:d7:6d:
2a:ce:81:70:57:e2:05:4b:65:b8:72:97:f0:21:ac:
c5:66:6e:06:cd:e4:c8:db:75:22:c0:c8:76:81:37:
61:e1:ba:bd:b2:2c:ef:92:74:c3:91:06:da:fe:5d:
5a:5a:e0:d0:25:d2:bb:4b:e9:5b:66:95:6e:ea:77:
d0:fb:2d:18:07:a7:b6:80:51:1d:59:72:de:8e:95:
0b:9b:92:22:ec:db:28:99:9a:ac:da:39:5e:70:34:
4a:f4:ae:5b:70:8c:f3:e5:8d:7f:dd:a3:47:23:d8:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AD:27:72:42:40:A2:91:F0:A7:FE:DC:B9:2B:35:57:EF:18:1B:E9
X509v3 Authority Key Identifier:
keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:0e:cd:8c:e3:b2:9b:9c:d6:cf:a4:3b:6f:24:43:58:45:
6a:f2:e4:11:0a:d4:5a:79:6f:f9:7d:52:b7:bb:31:59:b7:42:
2d:18:51:38:34:c3:d6:08:20:06:b2:61:10:05:4a:06:96:c6:
dd:5c:b9:4d:0e:41:ab:18:5b:45:0e:c0:ca:8a:63:14:8b:27:
5e:78:28:71:24:a9:14:c7:48:6d:ad:73:5d:93:c5:a0:c8:52:
41:d8:28:cc:e6:ed:e2:11:40:9d:5b:4c:20:a9:bb:79:1a:64:
5b:63:e7:84:6a:1b:82:dc:40:63:9e:fd:cd:bb:ec:a2:09:18:
de:f1:95:9d:88:a9:5c:10:5d:75:0b:36:40:e8:50:4f:17:d8:
55:8f:3e:6a:be:a3:44:1c:3f:7f:0a:87:b9:fb:fa:63:08:63:
8c:5f:ff:0b:9c:05:fd:f4:55:5e:56:18:cf:e3:bb:77:04:4f:
f6:9b:ff:1e:81:e2:d9:06:30:00:a7:27:b5:98:c5:2a:25:2d:
89:1e:62:19:ac:61:73:17:70:67:8b:45:d0:b1:b3:4e:7f:3f:
c8:f2:98:34:12:5b:b8:15:97:05:92:57:7b:c8:a8:f8:d2:0e:
f1:61:3e:62:50:93:75:4d:1f:23:d5:d2:27:7b:c5:d1:1c:75:
c5:6c:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:48 2025 by rpki-client