Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: 0oXYtOlwNg+3+jo/bYGQT3fFEAhT35efFcKI+80xRn4=
Subject key identifier: D3:B9:B4:3E:26:18:11:00:52:2A:EA:CA:B1:52:16:F3:F7:1F:39:F9
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 0194BD859BB47FCC931907BF20F0D1DA5A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 0FD1
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: YVRBDvJubBDEeuL6HVWGxFekeEDVzLWQRV2GZ00glng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:b4:7f:cc:93:19:07:bf:20:f0:d1:da:5a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=d3b9b43e26181100522aeacab15216f3f71f39f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:4d:28:24:1e:7d:4e:e0:f3:3e:c1:33:57:
68:25:33:c0:5c:8d:3e:8d:07:f0:cb:d0:de:93:9b:
b7:a0:17:86:39:e3:a5:15:18:20:da:4a:7f:c7:58:
c3:d2:6b:02:52:b0:de:c8:54:ee:4f:9e:13:9c:63:
31:4b:f1:47:57:2b:58:81:25:8e:0d:b5:28:02:90:
d5:fa:21:42:8c:65:4f:e0:9c:79:30:37:48:35:04:
da:75:63:92:55:d8:21:ba:2e:ea:e6:de:cf:38:97:
a2:f8:90:46:91:60:56:a5:94:de:26:7b:62:a3:b5:
64:1c:f9:2e:eb:f8:c1:05:fa:61:fa:83:bf:32:32:
eb:5c:97:05:82:53:20:ee:75:3c:93:9a:69:b2:f4:
cf:21:40:3a:80:cf:5e:a0:c6:85:83:3f:fa:dc:29:
fb:92:a5:a8:3d:c3:0f:84:2a:e7:ba:3d:54:95:3e:
45:d9:2c:e9:5c:20:09:0c:f6:3c:72:ef:de:09:dc:
94:9f:99:6a:3d:cd:b1:6e:07:33:d2:2a:84:5c:d9:
7b:c5:25:8a:f7:c5:b8:86:b9:c8:d7:f3:a0:08:25:
8f:8c:09:a7:aa:5a:ef:00:bf:fd:19:06:19:c2:7b:
be:21:45:1f:d1:0c:7c:b1:7d:5e:96:27:78:eb:da:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B9:B4:3E:26:18:11:00:52:2A:EA:CA:B1:52:16:F3:F7:1F:39:F9
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:73:e9:f6:4c:6b:13:98:8d:a3:3d:2e:2f:99:58:ba:27:16:
fa:83:46:92:c5:a8:50:99:94:e9:00:05:78:d3:cb:77:17:2b:
bc:e5:83:9c:b1:65:ca:ed:20:c0:a9:87:e0:af:cf:3f:c4:6f:
92:3b:e5:3d:5c:17:3b:f3:eb:1c:25:af:4a:b1:cd:24:75:a8:
50:2c:64:a9:64:94:ba:af:3b:8c:ca:34:0c:48:4a:3b:f4:3e:
b7:95:e3:42:11:4a:d8:39:11:62:b8:45:29:59:ac:20:51:28:
32:cc:6a:eb:2c:01:e8:19:15:2c:db:96:17:6e:56:24:d9:c0:
f7:e4:10:7b:63:20:ff:db:dd:c3:9b:85:03:d4:9b:f0:96:d9:
53:91:2c:5d:84:21:cb:05:11:fb:37:36:cb:c1:03:79:3b:58:
a9:c2:04:2b:20:16:0a:35:3a:28:e7:8a:d9:75:91:82:de:8d:
a7:c5:46:9e:ca:5b:fc:d6:4d:17:0b:4e:27:88:fb:c5:6a:b2:
89:cd:23:0c:2a:e2:d1:ef:65:a3:81:dd:ed:86:c1:b9:53:0e:
b7:d7:ab:3b:3a:62:79:65:ae:6d:83:87:d4:83:81:41:14:4a:
03:32:0f:c9:45:8c:4a:e9:86:fb:80:0d:5b:de:ec:a7:1b:87:
dd:77:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:48 2025 by rpki-client