Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: nbWbyS57pFIa+FMXHvEKkx9Nr6caANc+CDAIkT6ud+8=
Subject key identifier: 3F:74:50:12:B3:45:49:6F:43:30:20:23:D8:B6:64:8C:9B:03:6C:19
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 0194BC3C60F3B4FFCE0A67D7DE6A360D07F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0AF2
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: QkDpDuw7B3KRQPukFMLQqXwXNJpdelKzTwOLdePTxwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:f3:b4:ff:ce:0a:67:d7:de:6a:36:0d:07:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=3f745012b345496f43302023d8b6648c9b036c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:98:a0:7f:0c:44:f4:2e:e4:a7:80:b4:ae:
42:26:2b:3d:31:d4:96:3b:e0:7b:83:c6:c4:45:16:
30:bf:f8:53:0c:bf:df:6a:4b:b9:93:97:76:ae:02:
72:77:af:db:10:6b:74:7c:2d:6f:ee:dd:22:ab:73:
e8:cc:09:b0:a2:d4:2b:84:81:3b:17:92:da:7a:4b:
ea:71:c3:b4:51:f4:21:b3:3e:4e:3f:ab:3e:2f:87:
d9:cb:15:72:3e:65:b2:c8:3e:37:31:d4:c9:e4:6d:
88:de:a3:7b:41:3b:7a:79:2b:a6:cc:98:68:ea:5c:
d7:af:42:25:1e:fa:9f:fa:14:b2:2f:07:a5:ad:65:
83:33:6b:1a:38:4b:5f:39:21:8c:18:7e:3b:62:fd:
6a:93:cb:1c:f6:da:bc:14:4e:4e:36:0b:09:79:5b:
6a:71:b3:f6:da:3a:fd:32:61:c4:c8:d6:4a:b4:da:
05:45:f7:4b:54:3d:08:44:d0:2c:a3:9d:3a:bd:31:
10:f1:50:d7:ad:12:d2:cf:05:98:9a:8d:aa:df:d7:
b2:d9:b3:30:dd:06:d2:38:e8:bc:e9:a3:79:c7:80:
b8:75:30:a4:6d:92:66:8c:60:68:48:09:38:1b:4a:
90:0a:e1:ae:85:00:a0:a6:5b:20:56:36:2b:a4:06:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:74:50:12:B3:45:49:6F:43:30:20:23:D8:B6:64:8C:9B:03:6C:19
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:88:6d:73:b5:29:3b:f8:5f:7d:64:8b:f7:28:4c:9a:ab:
9f:59:dd:d1:9b:1d:83:c0:2d:a1:a7:b0:57:d9:02:24:c6:6a:
a0:9e:e3:58:be:b0:3b:08:0e:82:13:c0:ca:f4:5b:d4:4d:b0:
b4:29:45:b5:1c:37:93:db:f6:74:31:bc:71:c1:da:6f:04:19:
7a:03:d2:7d:86:1c:94:2f:5b:23:0a:e7:a9:8d:e6:2c:6c:19:
a5:6b:54:3d:9d:f4:21:e2:1e:46:43:c1:03:a6:60:3a:88:c1:
8d:6b:11:78:13:da:46:90:41:53:2d:82:04:25:e6:40:8f:2d:
a7:3e:a7:b3:2a:38:5e:d2:0b:f0:ed:b2:a7:80:c9:39:64:c4:
b7:fa:82:c8:2c:cb:26:7b:75:56:85:76:c0:fe:3d:d9:ac:86:
84:0c:59:52:b0:f3:b1:5d:09:8e:49:c7:b2:a6:37:3e:38:ba:
10:03:cc:8c:2d:8f:bc:a3:1d:f0:eb:2a:5d:3e:38:0f:13:27:
61:be:b2:6e:32:ce:b3:64:61:10:04:3b:46:70:75:95:79:a4:
5b:bd:41:bc:3f:09:e9:02:52:21:6b:c8:63:08:6f:36:b6:46:
db:5e:b1:1f:93:4c:41:fe:95:d9:70:70:bb:4e:32:9d:0b:27:
20:3f:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client